Get the latest crypto news, updates, and reports by subscribing to our free newsletter.
Giấy phép số 4978/GP-TTĐT do Sở Thông tin và Truyền thông Hà Nội cấp ngày 14 tháng 10 năm 2019 / Giấy phép SĐ, BS GP ICP số 2107/GP-TTĐT do Sở TTTT Hà Nội cấp ngày 13/7/2022.
© 2026 Index.vn
Blocksec said it uncovered a Ponzi scheme that moved at least $1.6 billion in USDT on the TRON network over 16 months, spanning October 2024 to February 2026. The investigation, based on on-chain analysis, traced a network of interconnected wallets organized into functional layers, including fund collection addresses, intermediaries, payment channels, and a shared liquidation point on exchanges.
The scheme operated under the guise of VerilyHK, which presented itself as a health technology group headquartered in Hong Kong. Blocksec said the name was designed to evoke Verily Life Sciences, an Alphabet subsidiary, to project legitimacy. VerilyHK claimed to apply artificial intelligence to healthcare, use big data analytics, and develop medical devices, but Blocksec stated these activities were not real.
Blocksec described a complex wallet architecture. It said the scheme rotated at least 15 collection addresses across eight distinct “generations” of wallets that succeeded one another during the active period. Over time, the volume processed increased steadily, with the last generation moving $900 million in less than four months.
Blocksec cautioned that not all of the reported volume necessarily represents funds taken directly from users, noting that some transfers may have been internal recycling transactions.
The report originated from a victim who reported losses and provided the deposit and payment addresses. Blocksec said this information made it possible to trace the broader wallet network; without the victim’s intervention, the scheme would likely have continued operating undetected by Blocksec.
Blocksec’s on-chain analysis also identified connections to Huione Group, a Cambodian custody service previously linked to multiple hacks and laundering schemes. In this case, Blocksec said the Ponzi’s central hub processed around $4.6 million using addresses associated with Huione. It also reported additional deposits of $4.2 million and $1.5 million made directly to two of Huione’s wallets.
Blocksec said the finding is consistent with earlier investigations that identified Huione as recurring laundering infrastructure within the illicit crypto ecosystem.
Blocksec noted that USDT has grown to exceed 86 billion tokens in circulation on the TRON network, alongside more than 73 million active wallets. It added that the network processes around 34 million daily transactions, close to its all-time high.

Premium gym chains are entering a “golden era” that is ending or already in decline, as rising operating costs collide with shifting consumer preferences toward more flexible, community-based ways to exercise. Long-term memberships are shrinking, margins are pressured by higher rents and facility expenses, and competition from smaller, more personalized…