Corvus
Evidence · Source Records · Forensic Audit Trail

Evidence

Every claim in this report traces back to one of 20 evidence records below. Each was captured passively during recon, hashed at capture for chain-of-custody, and graded per the Admiralty Scale (NATO STANAG 2511). Click any ev_xxx chip elsewhere in the report to jump straight to its source record.

20
Records
5
Sources
20
High Grade
0
Moderate
0
Low Grade
2026-05-27 → 2026-05-27
Captured
20 of 20 shown
ev_001 B-2
Source serper:news · Captured
TRM Labs May 20 2026: OFAC designates 11 individuals + 2 entities + 6 Ethereum wallet addresses for Sinaloa Cartel crypto-drug laundering. Adani SDNY charges: DOJ May 2026 moving to dismiss after meeting with Adani lawyer. ICIJ Coin Laundry Dec 2025: Tether facilitated $1.4B+ in illicit flows. GENIUS Act: FinCEN/OFAC proposed AML/CFT rule for stablecoin issuers May 2026. Binance/CZ: $4.3B settlement Nov 2023; CZ completed 4-month sentence.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_002 B-2
Source serper:news · Captured
NBC News May 30 2025: Tim Leissner (ex-Goldman Sachs SE Asia chairman) gets 2yr federal prison for 1MDB role; began Feb 7 2026. Roger Ng: 10yr EDNY sentence Mar 2023; transferred Malaysia. Najib Razak imprisoned 2022 — 12yr + RM210M fine. Jho Low fugitive believed Shanghai; sought Trump pardon May 2026 (Bloomberg). Anwar Ibrahim PM overseeing 1MDB recovery.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_003 A-2
Source dork-mcp:cl_search · Captured
CourtListener RECAP: US v. KOSTIN (1:24-cr-00091-GHW, SDNY). S2 superseding indictment Feb 20 2024. Defendants: Andrey Kostin (counts 1-5), Vadim Wolfson aka Vadim Belyaev (counts 3-5), Gannon Bond (counts 3-5). Judge Gregory H. Woods III. Count 1: Conspiracy to violate IEEPA — The Kostin Superyachts (Apr 2018-Mar 2022). Mar 27 2025 warrant; Apr 14 2025 suppression motion. Trial on hold Jul 2025.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_004 B-2
Source serper:search · Captured
Hui Qin (Quincy Qin): SDNY RICO civil complaint 1:24-cv-02219 filed Mar 25 2024. 15+ shell LLCs across NY/NJ/DE alleged for money laundering through US real estate. Chinese national connections to organized money laundering infrastructure.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_005 B-2
Source serper:news · Captured
BBC: Tulip Siddiq (UK Labour MP, Hasina's niece) — Bangladesh court: 2yr in absentia Dec 2025 (land corruption); then 4yr in absentia Feb 2026 (separate case). Resigned as UK Economic Secretary Jan 2025 during Bangladesh probe.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_006 A-2
Source dork-mcp:icij_offshore_reconcile · Captured
ICIJ Offshore Leaks: Arkady Rotenberg — Panama Papers node 15007201; Paradise Papers node 80118991. Boris Rotenberg — Panama Papers node 15007202; Paradise Papers node 80118990; Pandora Papers node 240054664 (3 datasets — highest in dataset). Natalia Rotenberg — Pandora Papers node 240054012 (Alcogal). Igor Arkadyevich Rotenberg — Pandora Papers node 240055546. Roman Abramovich — Panama + Paradise Papers confirmed.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_007 B-2
Source serper:news · Captured
Reuters Feb 22 2024: SDNY indicts Andrey Kostin (VTB Bank CEO) for IEEPA violations — Kostin Superyachts + Aspen Colorado mansion. Co-defendants: Vadim Wolfson (Vadim Belyaev) + Gannon Bond. DOJ charges: IEEPA conspiracy, money laundering, wire fraud. Trial on hold Jul 2025. SDNY Case 1:24-cr-00091-GHW.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_008 B-2
Source serper:news · Captured
PBS Frontline Oct 2025: Jan Marsalek confirmed living openly in Moscow as active GRU handler. Wirecard AG collapsed Jun 2020 — EUR 1.9B accounting fraud. Marsalek fled Germany Jun 2020; Interpol Red Notice. GRU role: handler for recruited European spy networks including Roussev UK ring. GLEIF LEI Wirecard AG: 529900A8LX4KL0YUTH71.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_009 B-1
Source serper:news · Captured
Balkan Insight May 12 2025: British court convicts all 6 Bulgarians in Orlin Roussev spy ring — GRU-linked. Roussev sentenced 10yr 9mo. Ring operated from Great Yarmouth guesthouse; tasked by GRU to conduct surveillance and harassment of UK-based targets. Jan Marsalek confirmed GRU handler. Reuters: Russian spy ring leader jailed nearly 11 years. BBC: Bulgarians guilty of spying for Russia UK.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_010 B-2
Source serper:news · Captured
Guardian: Sergio Cabral (former Rio governor) arrested — Operation Car Wash. Sentenced 280+ total years across multiple cases. Odebrecht/Novonor confirmed. Operation Car Wash (Lava Jato) 2014-2021 — Brazilian federal corruption probe spanning 12+ countries. Eduardo Cunha sentenced 15yr+.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_011 B-2
Source serper:news · Captured
BBC: Sheikh Hasina — Death sentence Nov 17 2025 (crimes against humanity — 1400+ protesters killed). Additional 21yr across 3 corruption cases. Fled Bangladesh to India Aug 2025 after student uprising. Awami League collapsed; barred from Feb 12 2026 elections. India sheltering Hasina; Bangladesh issued arrest warrants and extradition requests.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_012 B-2
Source serper:news · Captured
The Insider Dec 8 2025: Russia's Rosimushchestvo chief on payroll of Arkady Rotenberg — systematic funneling of state property to Kremlin allies. Tatspirtprom (major alcohol producer) FAS-approved acquisition Jan 13 2026. Domodedovo Airport nationalized Feb 2026 (Kamenshchik loses all appeals). Konstantin Nikolaev: EU subsidies while importing 200 Glock pistols to Russia (The Insider Aug 2025). Boris Rotenberg — THREE ICIJ leak datasets (Panama, Paradise, Pandora).
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_013 A-2
Source serper:news · Captured
DOJ Feb 26 2026: Sinaloa Cartel Tijuana commanders La Rana (Rene Arzate-Garcia) + Aquiles (Alfonso Arzate-Garcia) charged narco-terrorism + material support terrorism + drug trafficking. $10M total rewards ($5M each). First use of terrorism statutes against cartel Tijuana leadership under narco-terrorism framework.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_014 B-1
Source serper:news · Captured
Reuters Feb 27 2025: FBI confirms North Korea responsible for $1.5B Bybit hack (Feb 21 2025). CSIS Mar 18 2025: largest cryptocurrency heist in history. Elliptic Feb 23 2025: $1.46B stolen from Dubai-based Bybit; full money trail documented. AP News Feb 27 2025: largest known theft of cryptocurrency. TraderTraitor cluster (Wiz.io Jul 28 2025): DPRK social engineering via fake job offers; 6-month Drift Protocol infiltration.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_015 A-2
Source serper:news · Captured
State Dept Feb 20 2025: 8 cartels/TCOs designated FTO+SDGT under EO 14157 (Jan 20 2025): Sinaloa, CJNG, MS-13, Tren de Aragua, Gulf Cartel, La Nueva Familia Michoacana (+ 2 others). AS-COA May 2025: 10 groups total — 6 Mexico, 2 Haiti, 2 Venezuela/El Salvador. Carteles Unidos added separately Mar 18 2026 (Federal Register 2026-05225).
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_016 B-2
Source serper:news · Captured
Soufan Center Sep 4 2025: US military attacked TdA speedboat, killing 11 members. Chuqui Martinez Flores extradited Colombia to Houston May 2026 — first TdA FTO terrorism extradition in history. TdA and cartels framed as narco-terror after Maduro capture.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_017 B-2
Source serper:news · Captured
NYT May 18 2026: CONMEBOL president Alejandro Dominguez faces FIFA ethics complaint — alleged receipt of payments from 2015 CONMEBOL corruption probe recovery. Banco Master $2B fraud probe Jan 2026 — Central Bank + 2 Supreme Court justices implicated.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_018 B-2
Source dork-mcp:wikidata_sparql · Captured
Wikidata biographical data batch query — 9 entities: Maduro (Q58132, b.1962-11-23), Hasina (Q52183, b.1947-09-28), Najib Razak (Q57675, b.1953-07-23), Lee Jae-yong (Q624109, b.1968-06-23), Bo Xilai (Q21822, b.1949-07-03), CFK (Q40649, b.1953-02-19), Yingluck (Q57670, b.1967-06-21), Nawaz Sharif (Q134068, b.1949-12-25), Eduardo Cunha (Q10270650, b.1958-09-20).
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_019 B-1
Source serper:news · Captured
Brookings Jan 5 2026: US launched special operation Jan 3 2026 to exfiltrate Maduro and Cilia Flores from Venezuela. DOD announcement confirmed. NYT Apr 1 2026: US lifts sanctions on Delcy Rodriguez (acting president). NPR Apr 2 2026: latest US recognition of Rodriguez as legitimate authority. Miami Herald May 7 2026: Chavista hardliners fracturing over Rodriguez US ties. PBS May 21 2026: Cuba tensions. Gannon Ken Van Dyke charged Apr 23 2026 for Polymarket betting ($400K+) using classified Maduro raid info.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000
ev_020 B-2
Source serper:news · Captured
TRM Labs Apr 2026: North Korea's Lazarus Group stole $577M in two 2026 crypto hacks — Drift Protocol ($285M, 6-month social engineering from fall 2025) and KelpDAO ($290M, Apr 18 2026) — 76% of all 2026 crypto hack value. FBI confirmed Lazarus/TraderTraitor: Bybit $1.5B Feb 21 2025. DPRK total 2025-2026: ~$2.6B. 38 North Jan 8 2026: DPRK evolved to rogue crypto-superpower.
SHA-256 0000000000000000000000000000000000000000000000000000000000000000