Second and third rounds on the dossier pipeline, reviewed locally before commit. Retrieval - wayback_pass.py: retries every BLOCKED/DEAD/THIN/ERROR linked source through the Wayback Machine; blocks carry the snapshot date, archive URL and the live verdict. 143 slots retried: 93 fetched, 37 no snapshot, 12 script shells, 1 PDF. - fetch_sources.py: fetch_wayback() helper. - add_extra_sources.py: files staged extra_* finds (web search, not on the DB record) into the store with a provenance note. - Cases re-sourced by web search: 248 (Oslo: Document.no, Avisa Oslo, NRK; the linked Le Parisien piece is case 242 and is marked OFF-CASE), 258 Kharkiv, 260 Singapore, 358 Bangkok, 365 Las Vegas, 388 Verneuil-sur-Seine, 390 Zoersel, 430 Homestead. 341 of 364 cases now hold a fetched article; 11, 66 and 399 have no public text source (podcast, police video, direct victim report). Trimming - auto_trim.py: case-anchored furniture cut for UNTRIMMED blocks. Finds the body run that mentions the case, merges across subheadings and short furniture gaps, drops teasers, share bars, date/URL/caption lines and subscription pitches; refuses pages with no record term or almost no body. 302 blocks trimmed; 16 left on auto-trim-review.md (7 OFF-CASE suspects). Every cut is labelled AUTO-TRIMMED, UNREVIEWED in the dossier; the full extract stays in staging/. Decisions with anchors in trim-decisions-auto.json. - build_cases.py / verify_all.py: banners for auto-trimmed and archived blocks, staged-file check extended to Wayback blocks, flag legend under the record. Detention rule - README "Definitions": the DB field `kidnappings` is the DETENTION violence type (victim, guard, staff or relative held to force submission or execute the theft), distinct from the Kidnapping scenario (taken away and held). - detention-flag-review.md / detention-flag-corrections.json: 40 records reviewed with evidence; 30 set-to-1 proposals accepted by the owner on 2026-09-06 (listed in corrections-approved.md), 10 still open. - apply_detention_wording.py: "Violence Used" in the 70 reviewed summaries now names detention explicitly (62 of 70 labelled), supported by the summary's own text; idempotent; supersedes the batch scripts' wording. Worklist and docs - sofia-worklist.md: 248 decisions, detention rule item replacing the old "no abduction" item, fresh-search section for the textless cases. - README-START-HERE.md: progress notes, run commands, next steps. - Bug fixed in passing: Wayback blocks stored in-memory text with carriage returns; now stored as read back from disk. verify_all.py PASSES (2321 checks). Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GZZENdTLzNGsbNy4DyF1yt
93 lines
5.2 KiB
Plaintext
93 lines
5.2 KiB
Plaintext
================================================================================================
|
||
CASE 167 | Binance Client | November 10, 2023 | Montenegro
|
||
================================================================================================
|
||
|
||
DATABASE RECORD
|
||
id 167
|
||
date November 10, 2023
|
||
original_date November 10, 2023
|
||
year 2023
|
||
month 11
|
||
quarter 2023-Q4
|
||
victim Binance Client
|
||
location Montenegro
|
||
country Montenegro
|
||
scenario Malicious Invitation - SocialEng
|
||
description Executives lured into fake business trip, kidnapped, forced to empty wallets of $12M USDT.
|
||
kidnappings 0
|
||
violence_torture 0
|
||
drugs_alcohol 0
|
||
weapons 0
|
||
theft 0
|
||
life_taken 0
|
||
money_wanted (null)
|
||
coin_type (null)
|
||
reports MH
|
||
notes (null)
|
||
has_processed_date 1
|
||
created_at 2025-11-13 05:44:45
|
||
(flag legend: 'kidnappings' is the DETENTION flag — 1 when the victim was held against
|
||
their will at any point, tied, locked in, held at gunpoint or taken away; it is NOT the
|
||
same as the 'Kidnapping' scenario, which means taken away and held. See README, Definitions.)
|
||
|
||
AI SUMMARY [generated at bulk import, NOT verified against sources]
|
||
**Victim:** Binance Client
|
||
|
||
**Attackers:** Known associate(s) who betrayed victim
|
||
|
||
**Attack Method:** Malicious Invitation - SocialEng
|
||
|
||
**Violence Used:** Threats/intimidation
|
||
|
||
**Crypto Stolen:** No theft completed
|
||
|
||
**Status:** Investigation ongoing
|
||
|
||
LINKED SOURCES
|
||
[url] https://mugglehead.com/binance-client-executives-robbed-of-12-5-million-while-on-vacation/
|
||
|
||
NOTES ON THIS FILE
|
||
* matched to sheet row 168: exact match on victim + year, unique on both sides
|
||
|
||
------------------------------------------------------------------------------------------------
|
||
ARTICLE 1
|
||
Source MH
|
||
URL https://mugglehead.com/binance-client-executives-robbed-of-12-5-million-while-on-vacation/
|
||
Origin reported_K&R sheet, row 168, column "Articles"
|
||
Length 835 chars
|
||
------------------------------------------------------------------------------------------------
|
||
Executives of a VIP client of crypto exchange Binance were tricked and kidnapped in Montenegro during an alleged “business trip” in which they had to compulsorily comply with the thugs’ demands by emptying their crypto wallets. The stolen funds amounted to $12.5 million. Binance was able to track the on-chain movement of the loot and managed to block up to 94% of the sum. $11.8 million was freed in USDT and safely returned to a Tron wallet.
|
||
Binance Customer Support said on X the exchange’s standard procedure for stolen funds depends on the information provided. Maintaining an asset freeze on stolen assets required a police report within seven days after first contact with the exchange’s support department. Although, Binance could extend the freeze on a case-by-case basis if extra time were required to get the police report.
|
||
|
||
------------------------------------------------------------------------------------------------
|
||
FETCHED ARTICLE 1 [AUTO-TRIMMED — UNREVIEWED]
|
||
!! Furniture was cut by a script keyed on this case's record, not by a person.
|
||
!! It may still carry passages about OTHER cases from a round-up article.
|
||
!! The full page extract is kept in staging/ if a cut needs revisiting.
|
||
Source mugglehead.com
|
||
URL https://mugglehead.com/binance-client-executives-robbed-of-12-5-million-while-on-vacation/
|
||
Field url
|
||
Retrieved 2026-09-05T12:51:04+00:00 via raw HTTP retrieval, deterministic extraction (HTTP 200)
|
||
Language unknown
|
||
Kept paragraphs headline [0] + 2-4 of 36
|
||
Length 667 chars
|
||
Integrity sha256 d5e0c7782bd2e78a2537055c9768579d887e87e0490c484c6d157cd4c96d6445
|
||
Trimmed AUTO-TRIMMED, unreviewed: kept paragraphs 2-4 plus headline [0]; dropped 1 leading and 31 trailing paragraphs. Case-term hits on page: 18.
|
||
Caveat retrieved from a live page on the date above. Unlike text copied
|
||
from the spreadsheet, there is no second copy to hash it against.
|
||
------------------------------------------------------------------------------------------------
|
||
|
||
ORIGINAL (unknown, verbatim as retrieved)
|
||
|
||
Binance client executives robbed of USD$12.5 million while on a business trip to Montenegro - Mugglehead Investment Magazine
|
||
|
||
The city of Kotor in Montenegro. Image from Desemeus via Wikimedia Commons.
|
||
|
||
Executives of a Binance client were abducted while on a business trip in Montenegro and forced to empty their cryptocurrency wallets with a total loss of USD$12.5 million.
|
||
|
||
Binance CEO Changpeng Zhao said via X that Binance immediately investigated the on-chain activities of the crypto transactions and reached out to its partners to freeze the wallet with stolen funds. He revealed that all the funds were taken in tether (USDT) and transferred to a Tron wallet.
|
||
|
||
================================================================================================
|
||
generated from attacks-export-Gart-website.json + reported_K&R | case 167
|
||
================================================================================================
|