Estrutura de Investigação para Analista Sênior de Inteligência

### 1. Constraint Mapping & Elimination **Explicit Boundaries & Constraints:** - **Geographical:** The entity operates within a specific corridor (e.g., "Eastern Mediterranean to South Asia" or "Nordic-Baltic transit zone") – *if not specified, assume a single, non-contiguous jurisdiction with cross-border access.* - **Technical:** Requires low-latency execution (<50ms), supports 24/7 settlement, and uses non-KYC-compliant channels for at least 30% of volume. - **Operational:** Volume spikes occur exclusively between 02:00–04:00 UTC on weekdays; funding sizes range from $500K–$2M per tranche; no single transaction exceeds $250K. - **Behavioral:** Avoids all sanctioned entities, but uses "shadow" liquidity pools; never interacts with centralized exchanges for >15% of total flow. **Completely Ruled Out:** - **Retail aggregators** (due to tranche size and timing discipline). - **State-owned entities** (due to avoidance of sanctioned counterparties, which states typically cannot fully avoid). - **Traditional hedge funds** (due to non-KYC reliance and 24/7 settlement requirement). - **Any entity requiring regulatory reporting** (e.g., EU MiFID II, US SEC) – eliminated by the shadow liquidity usage. --- ### 2. Behavioral & Profile Matching **Patterns Identified:** - **Volume spikes** at 02:00–04:00 UTC align with the **London-New York overnight gap**, often used by algorithmic arbitrageurs to exploit thin liquidity. - **Funding sizes** ($500K–$2M) match **mid-tier proprietary trading desks** or **crypto OTC desks** that operate on margin. - **Non-KYC channels** (30%+ volume) are characteristic of **decentralized finance (DeFi) aggregators** or **P2P marketplaces** with VPN-based access. **Cross-Reference to Baselines:** - Historical precedents: **Alameda Research** (pre-collapse) exhibited similar tranche sizes and off-exchange settlement patterns. - **Wintermute** and **Jump Crypto** show similar timing discipline but use KYC-compliant venues more heavily. - The exact profile (non-KYC + 24/7 + specific UTC window) most closely mirrors **private OTC desks in the CIS region** (e.g., those operating via Telegram-based settlement) or **independent market makers** in the **Balkans**. **Perfect Mirror Profile:** A **crypto-native proprietary trading firm** with a **dual-entity structure** (one registered in a low-tax jurisdiction, one unregistered) that specializes in **cross-border stablecoin arbitrage** and **pre-IPO token placements**. --- ### 3. Quantitative Calibration **Given Data (Hypothetical):** - Total funding deployed: $18.5M across 12 tranches over 30 days. - Claim: "This amount controls 50% of the circulating supply of Asset X." **Mathematical Plausibility:** - If $18.5M = 50% of supply, then **total market cap = $37M** (strictly). - However, to *control* 50% (not just hold), you need to account for **illiquid float** (e.g., locked tokens, team vesting). If 40% of supply is locked, then the *liquid* market cap is $37M × 0.6 = $22.2M. Controlling 50% of *liquid* supply would require $11.1M, leaving $7.4M for price manipulation buffer. - **Plausibility Range:** For the claim to be true, the asset's **fully diluted valuation (FDV)** must be between **$35M and $40M**, and its **liquid float** must be between **55% and 65%** of total supply. Any candidate with FDV >$50M or <$25M is mathematically eliminated. **Elimination:** Assets with FDV >$50M (e.g., major L1s) or <$25M (micro-caps with <$1M daily volume) are ruled out. --- ### 4. Triangulated Candidates Matrix | Candidate | Technical Fit | Narrative Fit | Overall Probability | |-----------|---------------|---------------|---------------------| | **1. Private OTC Desk (CIS-based, e.g., "Nordic Shadow")** | **High** – Meets all timing, tranche, and non-KYC constraints. | **Medium** – Geopolitical context (sanctions evasion) fits, but no public narrative ties to a specific asset. | **High** | | **2. DeFi Arbitrage Fund (e.g., "Atlas Yield")** | **High** – Uses smart-contract routing, 24/7 settlement, and non-KYC DEXs. | **Medium** – Narrative of "yield farming" aligns with market context, but funding sizes are slightly large for typical DeFi funds. | **Medium-High** | | **3. Independent Market Maker (Balkan-based)** | **Medium** – Meets timing and size, but relies on centralized exchange APIs (violates <15% rule). | **Low** – No strong geopolitical narrative; likely too small for $18.5M deployment. | **Low-Medium** | | **4. State-Backed Crypto Arbitrage Unit (e.g., Venezuelan PDVSA crypto desk)** | **Low** – Fails non-KYC constraint (state entities often use KYC to launder legitimacy). | **High** – Geopolitical fit (sanctions circumvention) is strong, but operational mechanics don't match. | **Low** | --- ### 5. Definitive "Educated Guess" & Confidence Score **Primary Hypothesis:** The entity is a **CIS-based private OTC desk** operating under a shell company in a **non-sanctioned jurisdiction** (e.g., Kazakhstan or Georgia), using **Tether (USDT) on Tron** for settlement, and targeting a **mid-cap altcoin with FDV ~$37M** (e.g., a Layer-2 token or a privacy coin with low exchange listing). **Confidence Score:** **72%** **#1 Missing Piece of Data:** The **exact asset name** or its **contract address**. Without this, I cannot verify the FDV range, liquidity depth, or the specific exchange/DeFi pools used. Once the asset is identified, I can confirm the 50% control claim by cross-referencing on-chain holdings and exchange order books.