Files
DB-cleanup/merge-output/sources/167_Binance-Client.txt
StellarCrowandClaude Fable 5.1 439e83a4cb feat(sources): Wayback pass, automatic trimming, detention rule, ten cases re-sourced
Second and third rounds on the dossier pipeline, reviewed locally before commit.

Retrieval
- wayback_pass.py: retries every BLOCKED/DEAD/THIN/ERROR linked source through
  the Wayback Machine; blocks carry the snapshot date, archive URL and the live
  verdict. 143 slots retried: 93 fetched, 37 no snapshot, 12 script shells, 1 PDF.
- fetch_sources.py: fetch_wayback() helper.
- add_extra_sources.py: files staged extra_* finds (web search, not on the DB
  record) into the store with a provenance note.
- Cases re-sourced by web search: 248 (Oslo: Document.no, Avisa Oslo, NRK; the
  linked Le Parisien piece is case 242 and is marked OFF-CASE), 258 Kharkiv,
  260 Singapore, 358 Bangkok, 365 Las Vegas, 388 Verneuil-sur-Seine, 390 Zoersel,
  430 Homestead. 341 of 364 cases now hold a fetched article; 11, 66 and 399
  have no public text source (podcast, police video, direct victim report).

Trimming
- auto_trim.py: case-anchored furniture cut for UNTRIMMED blocks. Finds the body
  run that mentions the case, merges across subheadings and short furniture
  gaps, drops teasers, share bars, date/URL/caption lines and subscription
  pitches; refuses pages with no record term or almost no body. 302 blocks
  trimmed; 16 left on auto-trim-review.md (7 OFF-CASE suspects). Every cut is
  labelled AUTO-TRIMMED, UNREVIEWED in the dossier; the full extract stays in
  staging/. Decisions with anchors in trim-decisions-auto.json.
- build_cases.py / verify_all.py: banners for auto-trimmed and archived blocks,
  staged-file check extended to Wayback blocks, flag legend under the record.

Detention rule
- README "Definitions": the DB field `kidnappings` is the DETENTION violence
  type (victim, guard, staff or relative held to force submission or execute
  the theft), distinct from the Kidnapping scenario (taken away and held).
- detention-flag-review.md / detention-flag-corrections.json: 40 records
  reviewed with evidence; 30 set-to-1 proposals accepted by the owner on
  2026-09-06 (listed in corrections-approved.md), 10 still open.
- apply_detention_wording.py: "Violence Used" in the 70 reviewed summaries now
  names detention explicitly (62 of 70 labelled), supported by the summary's
  own text; idempotent; supersedes the batch scripts' wording.

Worklist and docs
- sofia-worklist.md: 248 decisions, detention rule item replacing the old
  "no abduction" item, fresh-search section for the textless cases.
- README-START-HERE.md: progress notes, run commands, next steps.
- Bug fixed in passing: Wayback blocks stored in-memory text with carriage
  returns; now stored as read back from disk.

verify_all.py PASSES (2321 checks).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GZZENdTLzNGsbNy4DyF1yt
2026-09-06 19:36:45 +02:00

93 lines
5.2 KiB
Plaintext
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
================================================================================================
CASE 167 | Binance Client | November 10, 2023 | Montenegro
================================================================================================
DATABASE RECORD
id 167
date November 10, 2023
original_date November 10, 2023
year 2023
month 11
quarter 2023-Q4
victim Binance Client
location Montenegro
country Montenegro
scenario Malicious Invitation - SocialEng
description Executives lured into fake business trip, kidnapped, forced to empty wallets of $12M USDT.
kidnappings 0
violence_torture 0
drugs_alcohol 0
weapons 0
theft 0
life_taken 0
money_wanted (null)
coin_type (null)
reports MH
notes (null)
has_processed_date 1
created_at 2025-11-13 05:44:45
(flag legend: 'kidnappings' is the DETENTION flag — 1 when the victim was held against
their will at any point, tied, locked in, held at gunpoint or taken away; it is NOT the
same as the 'Kidnapping' scenario, which means taken away and held. See README, Definitions.)
AI SUMMARY [generated at bulk import, NOT verified against sources]
**Victim:** Binance Client
**Attackers:** Known associate(s) who betrayed victim
**Attack Method:** Malicious Invitation - SocialEng
**Violence Used:** Threats/intimidation
**Crypto Stolen:** No theft completed
**Status:** Investigation ongoing
LINKED SOURCES
[url] https://mugglehead.com/binance-client-executives-robbed-of-12-5-million-while-on-vacation/
NOTES ON THIS FILE
* matched to sheet row 168: exact match on victim + year, unique on both sides
------------------------------------------------------------------------------------------------
ARTICLE 1
Source MH
URL https://mugglehead.com/binance-client-executives-robbed-of-12-5-million-while-on-vacation/
Origin reported_K&R sheet, row 168, column "Articles"
Length 835 chars
------------------------------------------------------------------------------------------------
Executives of a VIP client of crypto exchange Binance were tricked and kidnapped in Montenegro during an alleged “business trip” in which they had to compulsorily comply with the thugs demands by emptying their crypto wallets. The stolen funds amounted to $12.5 million. Binance was able to track the on-chain movement of the loot and managed to block up to 94% of the sum. $11.8 million was freed in USDT and safely returned to a Tron wallet.
Binance Customer Support said on X the exchanges standard procedure for stolen funds depends on the information provided. Maintaining an asset freeze on stolen assets required a police report within seven days after first contact with the exchanges support department. Although, Binance could extend the freeze on a case-by-case basis if extra time were required to get the police report.
------------------------------------------------------------------------------------------------
FETCHED ARTICLE 1 [AUTO-TRIMMED — UNREVIEWED]
!! Furniture was cut by a script keyed on this case's record, not by a person.
!! It may still carry passages about OTHER cases from a round-up article.
!! The full page extract is kept in staging/ if a cut needs revisiting.
Source mugglehead.com
URL https://mugglehead.com/binance-client-executives-robbed-of-12-5-million-while-on-vacation/
Field url
Retrieved 2026-09-05T12:51:04+00:00 via raw HTTP retrieval, deterministic extraction (HTTP 200)
Language unknown
Kept paragraphs headline [0] + 2-4 of 36
Length 667 chars
Integrity sha256 d5e0c7782bd2e78a2537055c9768579d887e87e0490c484c6d157cd4c96d6445
Trimmed AUTO-TRIMMED, unreviewed: kept paragraphs 2-4 plus headline [0]; dropped 1 leading and 31 trailing paragraphs. Case-term hits on page: 18.
Caveat retrieved from a live page on the date above. Unlike text copied
from the spreadsheet, there is no second copy to hash it against.
------------------------------------------------------------------------------------------------
ORIGINAL (unknown, verbatim as retrieved)
Binance client executives robbed of USD$12.5 million while on a business trip to Montenegro - Mugglehead Investment Magazine
The city of Kotor in Montenegro. Image from Desemeus via Wikimedia Commons.
Executives of a Binance client were abducted while on a business trip in Montenegro and forced to empty their cryptocurrency wallets with a total loss of USD$12.5 million.
Binance CEO Changpeng Zhao said via X that Binance immediately investigated the on-chain activities of the crypto transactions and reached out to its partners to freeze the wallet with stolen funds. He revealed that all the funds were taken in tether (USDT) and transferred to a Tron wallet.
================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R | case 167
================================================================================================