PlusToken-Linked Bitcoin Movement Put 13,000 BTC Estimate Under Scrutiny

A blockchain researcher tracking PlusToken-linked funds estimated on March 7, 2020 that roughly 13,000 BTC had entered a mixing process during the preceding 24 hours. CryptoSlate published the estimate on March 7 and accurately framed its immediate limitation: moving bitcoin into a mixer did not establish that the coins had been sold.

The movement mattered because PlusToken had accumulated cryptocurrency from a large alleged investment scheme, leaving analysts, exchanges and market participants watching attributed addresses for possible liquidation. A transfer of that scale could affect expectations even before any sale occurred. But Bitcoin’s public ledger recorded transactions between pseudonymous addresses—not the legal identity controlling each address, the purpose of each transfer or subsequent trades inside an exchange.

What the March 7 report established

The event-day record supports a narrow finding. The pseudonymous researcher ErgoBTC reported approximately 13,000 BTC in new deposits to a cluster described as part of the PlusToken mixing process over the previous 24 hours. The researcher said distributions were occurring intermittently and more slowly than during September and November 2019.

That figure was an analytical estimate, not a single transaction visible under a PlusToken label. It depended on address attribution, clustering heuristics and interpretation of repeated splitting, merging and spending patterns. CryptoSlate’s contemporaneous account did not publish a complete list of addresses and transaction identifiers sufficient for an independent reconstruction of the entire 13,000-BTC total.

ErgoBTC’s earlier methodology described funds moving through address reuse, repeated output splitting, consolidation and suspected mixing activity before some outputs reached addresses attributed to Huobi. The analysis also explicitly qualified its conclusion: links among the studied entities, PlusToken and exchange destinations required further investigation.

Those qualifications matter. A blockchain analyst can observe transaction amounts and timing directly, but identifying a common controller generally requires heuristics or external information. A mixer deposit also differs from a transfer to an exchange, and an exchange deposit differs from a completed market sale.

Market risk was plausible, not demonstrated

On March 7, the principal market question was whether the attributed funds would eventually create additional bitcoin supply for sale. That was a plausible risk because earlier PlusToken-linked flows had been associated with exchange and over-the-counter destinations. It was not evidence that 13,000 BTC had reached an order book on March 7.

The surviving event-day sources therefore do not support attributing any bitcoin price change to PlusToken. They provide no verified execution records, customer-account data or exchange order-book evidence connecting the reported mixer deposits to completed sales. The timing of later market declines cannot fill that evidentiary gap.

The episode nevertheless exposed an institutional problem. Exchanges could monitor public transaction histories, but useful intervention depended on correctly identifying addresses after funds were split or mixed. False attribution could implicate unrelated users, while delayed identification could allow illicit proceeds to reach custodial platforms. The March 7 report was consequently significant as a test of blockchain surveillance, not as proof of market manipulation.

Later clarification

On March 12, 2020, Chainalysis confirmed that bitcoin had moved from addresses it associated with PlusToken during the March 7–8 weekend. Its separate clustering found that very little of the weekend movement had reached exchanges, however, and it concluded that PlusToken liquidations were probably not responsible for the ensuing bitcoin decline.

Chainalysis said PlusToken-linked addresses had sent roughly 23,000 BTC to exchanges between its December 16, 2019 analysis and the March 12 update, with most of that activity occurring before the selloff that began on March 8. Those later findings corroborate movement from attributed addresses while cautioning against turning the March 7 estimate into a claim of immediate liquidation or causation.