1.  On 2021-04-16 21:56:25, the scam address listed below moved stolen cryptocurrency to another address:

      bc1qcygs9dl4pqw6atc4yqudrzd76p3r9cp6xp2kny

      Using an advanced analytical tool, answer the following questions:

      Note: CT Pro – Use the Tracer Feature. No date filter needed

• Identify the change address? 
   
• What two indicators did you base your assumption on.
   
• Trace the transactions to determine which exchange the cryptocurrency was transferred to. Ensure to label each hop on the graph. 
   
• Identify the name of the exchange and the exchange deposit address used by the suspect.
   
• CT Pro – Name, Save, and Download the Graph. Document the last four of the transaction hash, the suspect address, and the exchange deposit address that you would use to prepare a Letterhead Memo to the exchange for account information. 

2.  On July 4, 2023, a target purchased one kilo of cocaine on a dark web marketplace for approximately $38,900. The target sent funds to the following address.

       bc1q3v3zw4dkx8nk7tm9mlw24tkcfxcqmd3ajkgyjd

      Using an advanced analytical tool, answer the following questions:

      Note: CT Pro – Use the Tracer Feature. No date filter needed

• Identify the change address for the 2023-07-04 03:27:19 transaction.
   
• What two indicators did you base your assumption on. 
   
• How can you confirm your answer with absolute certainty?
   
• Trace the outgoing transaction (2023-08-20 17:19:33). There will be two outputs. If using CT PRO, the change address is labeled. Due to this being a dark web transaction, follow the change address which will be the larger amount in several transactions. Once the change address is lower than the “not change” address, switch and follow the “not change” address. There will be several transactions and then you will identify a possible exchange or unregulated exchange used by target.
   
• Use the exchange address identified and run through Auto Clustering. Attempt to identify any regulated exchanges that sent or received crypto involving the address.