Downstream: the consolidation address
The backward trace answered where the money came from. Following it forward answers where it went, and the answer reshapes the picture.
The collecting address is not a final destination. Every payment it received it forwards onward, in full, to a single downstream address: a pure pass-through.
That downstream consolidation address is itself a pass-through. Its gross receipts look enormous (9.85 billion ADA across 807 deposits), but a pass-through hub re-counts its own change: each time it forwards funds it sends change back to itself, and that change is counted again as a "deposit." Stripping that out, its genuine external inflow is just 1207M ADA across 112 deposits from 37 distinct depositors (8.64B, 88%, is its own self-change recycling). The monthly stream is just one depositor of it.
The consolidation address is a shared hub: every depositor traced to origin
Applying the same backward trace to its external depositors (its own change recycling is excluded) gives a complete census of all 37 of them:
Every one of the 37 external depositors resolves to a true genesis origin (the dominant-flow trace runs as deep as it needs, up to ~1,700 hops). They split two ways: 8 trace back to the same 2,463,071,701-ADA Byron genesis holder that funds the monthly payments (including the 925M burst stream and the 184.8M monthly stream itself), while 29 trace to different genesis origins entirely.
By volume the consolidation address is dominated by one genesis holder: its three biggest external inflows, 925M + 184.8M + 54M ADA, each trace independently to the same genesis wallet that funds the monthly stream (~1174M of the 37 depositors' traced inflow vs. just ~32M from the others). But it is not a single holder's wallet: 29 of the 37 depositors trace to independent genesis origins: the structural signature of a shared consolidation address used by many parties.
The burst stream
The largest depositor of all is the burst stream: a separate 925M-ADA offload (2021-02-02 → 2021-03-19). Its timing signature differs from the salary-like monthly cadence (front-loaded Feb–Mar 2021 burst of variable-size deposits (not a monthly cadence)), but its funds share the same genesis origin. It looks like a larger offload by the same holder, front-loaded into six weeks that ended just before the monthly payments began.
Why move 925M ADA as 33 smaller deposits over six weeks, rather than in one transfer? A single transfer of that size is one conspicuous event, easy to notice the moment it lands. Metering it out in variable amounts draws less attention at the time. It does not escape tracing after the fact: on a public ledger the trail survives, and this report reconstructed it anyway. The same shape is also what you would expect from someone pacing a disposal to avoid moving the price. Both readings are inferred from the shape of the flow, not on-chain facts.
Where the consolidation address sends next
It fans its consolidated value out to a handful of second-layer addresses:
| Endpoint | From addr (ADA) | Lifetime in (ADA · outputs) | Active | Characterisation | |
|---|---|---|---|---|---|
| 745,424,379 | 938,922,526 · 573 | 2021-02-01 → 2024-03-27 | consolidation hopunnamed | ||
| 266,795,456 | 280,641,880 · 201 | 2021-01-31 → 2023-03-14 | consolidation hopunnamed | ||
| 103,856,081 | 108,147,806 · 147 | 2021-01-31 → 2023-06-09 | consolidation hopunnamed | ||
| 40,950,033 | 40,950,053 · 46 | 2021-01-31 → 2021-11-24 | consolidation hopunnamed | ||
| 24,593,093 | 1,063,080,973 · 135 | 2021-03-17 → 2023-10-05 | consolidation hopunnamed | ||
| 13,799,140 | 13,806,268 · 11 | 2021-02-01 → 2022-06-23 | smallunnamed | ||
| 7,020,098 | 7,020,117 · 5 | 2021-06-07 → 2021-06-28 | smallunnamed | ||
| 2,200,001 | 293,839,691 · 19 | 2021-03-31 → 2023-05-10 | smallunnamed |
A high-throughput address that consolidates inflow from dozens of distinct depositors and fans it onward is the structural profile of a shared brokerage or custodial omnibus, not necessarily a single person's wallet, and the depositors tracing to other genesis origins fit that reading. But the forward endpoints above are unnamed: their lifetime footprints are far below exchange-hot-wallet scale, so naming a specific exchange would require tracing one hop further. As everywhere in this report: structure and flow are on-chain facts; the "brokerage / OTC" label is an interpretation of them, and real-world identity is not.