2,847 BTC (~$172M) Moved from Dormant 2016 Wallet to Fresh Address, Then Split Across 14 Wallets in 11 Minutes

The originating wallet (bc1q9...x7k2) had zero outgoing transactions since receiving 2,847 BTC in April 2016 — a clean 8-year dormancy period. At 03:42 UTC today, the entire balance moved in a single sweep transaction to a newly created bech32 address with no prior history.

Within 11 minutes, that intermediary address distributed the funds in unequal tranches (ranging from 51 BTC to 612 BTC) across 14 freshly generated wallets, all funded in the same block.

This pattern matches the pre-distribution phase of several exchange breach liquidation events, most notably the 2022 FTX drain where dormant wallets were consolidated then rapidly fragmented.

The 2016 vintage aligns with Bitfinex hack-era UTXOs, though no direct taint connection to known stolen funds is visible in the first-hop analysis. What flags this as urgent is the speed profile: the 11-minute distribution window is characteristic of automated sweeping scripts, not human wallet management.

No movement to known exchange hot wallets has occurred yet — the 14 destination addresses remain unspent as of this writing.

Transaction fees were overpaid by 3.7x the prevailing rate, suggesting urgency over cost sensitivity — another hallmark of exfiltration rather than planned treasury rotation. The entity is now sitting across 14 surveillance points with no off-ramp triggered.