Someone Turned $120M Into Monero, a Price Chart, and a Cry for Help 🕵️

An unknown entity routed approximately $120.2 million in USDT through a single transfer to a Tron [TRX] address on June 11, setting off a chain of swaps that pushed Monero [XMR] sharply higher before Tether froze $72 million linked to the activity. Onchain investigator ZachXBT disclosed the movements in a Telegram broadcast on June 12, tracing the funds as they split across exchanges, instant swap services, and cross-chain bridges. The Monero leg of the routing was large enough to lift XMR as much as 33% from around $330 to an intraday high of $438, with the token trading near $382 during European hours, about 8% higher on the day.

According to ZachXBT's tracing, more than $12 million of the capital was sent to deposit addresses tied to the KuCoin exchange, while roughly $8 million flowed into instant swap services that convert one coin into another without identity checks. Another $8 million was moved off Tron onto the Bitcoin and Ethereum networks through Near Intents, a cross-chain swap tool. The remaining value, totaling 72 million USDT, was held at an address that Tether subsequently blacklisted, rendering those tokens immobile.

The rally was tied directly to the size of the Monero orders rather than to a broader market move. XMR had already gained 13.3% over the preceding three days before jumping a further 16.6% on June 11 to reach $390, then extending to a local high of $426 on June 12 before pulling back. By the close of that session the token was at $353, and it later traded around $347. Monero's relatively thin liquidity means that a single large buy can swing the price sharply, and the entity's routing funneled enough demand into the order books to compress that effect into hours.

Once the funds crossed into Monero, the transaction trail became difficult to follow, since XMR conceals sender, receiver, and amount data on its blockchain. Visibility into the original $120.2 million had relied on transparent onchain analytics up to the point of conversion; afterward, attribution depended on exchange records, timing correlations, and behavioral patterns. An estimated $48 million had already been repositioned before Tether's freeze took effect, underscoring the narrow window in which monitoring on transparent networks can translate into action.

The episode has also drawn fresh attention to Tron's role as a stablecoin settlement layer, with the network hosting roughly $88 billion USDT, or nearly half of Tether's circulating supply. Low fees, deep liquidity, and near-instant settlement make Tron efficient for moving large volumes, and the same properties continue to attract regulatory and compliance scrutiny. The origin of the $120.2 million remains unconfirmed, but the combination of fast stablecoin redistribution, conversion to a privacy coin, and cross-chain hops matches patterns commonly associated with laundering, and Tether's freeze indicates the issuer reached the same assessment.