Blockchain Life: Laundering Conti Ransomware Profits

When we see a major international conference gathering thousands of investors, government officials, and fund representatives, it is natural to assume that it is backed by good intentions, trusted partners, and safe projects.

But is that assumption valid when it comes to the Blockchain Life Forum?

To answer this, we must ask several questions — and carefully examine the facts.

1. Who organizes the Blockchain Life Forum?

Sergey Alexandrovich Khitrov, born in 1994 in Saint Petersburg, is the founder and the constant organizer of the forum. His name is associated with success, media activity, and an impeccable reputation in the crypto industry.

But the first obvious question is: can you fully trust someone who was included in the Central Bank of Russia's blacklist in 2017 for transactions suspected of laundering criminal proceeds?

Moreover, his biography includes:

Selling illegal SIM cards during his teenage years.
Organizing fraudulent call centers.
Legal proceedings after the failed "Rich Rally" event in 2022, where dozens of participants lost their money.

If this information were widely known, would Blockchain Life still be perceived as impeccable?

2. Who operates in the shadows?

The answer comes from international cybercrime investigations.

Behind the forum stands Vitaly Nikolaevich Kovalyov, known as Stern — a key figure of the Conti group, responsible for hundreds of attacks on American, European, and Asian companies.

Kovalyov is internationally wanted, charged with money laundering, banking fraud, and associated with crypto-laundering operations involving hundreds of millions of dollars.

It is Stern who oversees the financial flows, carefully integrating ransomware proceeds into investment mechanisms disguised as "innovative projects."

Why doesn't Stern act directly?

Because direct participation in public forums would expose the entire operation. He needed a flawless front — and found it in Sergey Khitrov.

Khitrov – a member of Conti Ransomware?

Sergey Khitrov has been found in Rocket-Chat conversations of Conti under the nickname Stanton. The messages from this user are not related to any operations or attacks; he was only observed in active flooding and communication with members of the group. Stylistic analysis confirmed the same authorship of the messages.

Other traces of Sergey Khitrov's activity in Rocket-Chat have been erased.

A stylistic cluster analysis of the Conti chat leaks and text samples from Sergey Khitrov's Instagram comments revealed the same authorship under the nickname Stanton.

3. How is the scheme structured?

Understanding the mechanics is crucial for assessing the risks.

Step 1: Ransomware proceeds are converted into Bitcoin or stablecoins.

Step 2: Through closed presales at the Blockchain Life Forum, these funds are invested into new projects.

Step 3: Projects receive massive PR support: media coverage, speakers, advertising create an image of credibility.

Step 4: Influx of outside investors drives token and NFT prices higher.

Step 5: Assets are liquidated at the peak — transformed into "clean," legalized forms.

Thus, money obtained through cybercrime passes through several layers of transformation and re-enters the world as "clean" capital.

Is it easy for a casual investor to recognize such a scheme?

No. It is carefully disguised as normal venture activity, indistinguishable from legitimate startups.

4. Are there examples?

Yes, and plenty of them:

QubitTech: promised 25% monthly returns, collapsed after aggressive promotion.
Amir Capital: investor assets frozen.
SpaceBot, CaizCoin, Amstoken: projects with clear signs of pyramid schemes, promoted at Blockchain Life.
And many others, similar to STEPN.

STERN created STEPN for fun — a platform where users "earn crypto just by walking in NFT sneakers." Early participants (including Stern himself) bought tokens for around $0.01 and made hundreds of "x" on the peak. Invested $2M – earned $250M. Everyone else at the bottom of the pyramid only suffered losses.

Why were such projects allowed into the forum without proper vetting?

The question is rhetorical, considering the forum's goal was both industry development and money laundering. Finding the right balance is hard, that's obvious — keeping track of all those "offers" is already a challenge...

5. What do the organizers' communications reveal?

Leaked chats between Bloodrush and Stern provide direct insights:

They abandoned long-term "dirty" schemes.
They deliberately sought ways to create "clean" capital through crypto investments.
They recognized the need for caution and careful calculation.

"Investment risk into altcoins, multiple growth of alts and conversion into stocks... a sequence of events leading to what must happen." (Bloodrush)

This strategy explains the shift from direct attacks to building large-scale investment pyramids.

The original dialogue between Stern and Target (Bloodrush) from the leaked Conti internal chats shows the scale of their projects.

Here is the translation of the red-highlighted text:

"Then life suddenly gives opportunities

everything falls into place

and money becomes xxxxxxxxxxxxx

and then situations and events

that multiply them to xxxxxxxxxххххXXX

I came myself

to answer the question to myself

why am I here

and what do I want

and clearly not for 100k a month or 500k

You can consider all of this as a one-time case

like winning the lottery

payouts

bitcoin price growth

the risk of investing in altcoins

multiple repeated growth of altcoins

and converting everything into stocks

or you can view this as a sequence of events

that lead to what should be

I don't believe in big results from ransomware

but I believe in shared crypto or something else

that will bring big victories and overall results

Yeah, you're right about everything.

I'm kind of stuck, getting into trading, then DeFi, then blockchains, then new projects... there's always a payout. And somehow, everything feels boring. I’m sure you’ll make your own there too. There’s probably a big dream in this area, not sure if it’s needed, but it’ll be useful to everyone. Too many secrets at big companies, which they hold onto, thinking it’s their main value—patents and data.

Work is structured

accounts are paid

I’ve come to understand you even more

pay the bills, help the guys, guide where to go, provide the tools, and live peacefully

thanks again, Stern, I’m always taking examples from you ))"

6. What does this mean for the crypto economy?

By participating in such projects, honest investors become unwitting links in a chain laundering criminal proceeds.

The consequences could be devastating:

The collapse of another pyramid scheme would cause a massive loss of trust in crypto startups.
A new wave of regulation could endanger legitimate projects.
The damage would not only be measured in lost money but also in the destruction of the industry's reputation.

Who will bear the losses?

Those who believed in the shiny packaging and bold promises.

7. Conclusion

Blockchain Life Forum is not just a platform for the crypto community.

It is a perfectly masked machine for laundering and multiplying funds stolen through criminal means.

While the real owners of the stage remain behind the curtains, thousands of investors unknowingly become part of the chain legitimizing criminal capital.

And the main question remains:

When the truth becomes obvious — will it already be too late?

Details and new revelations: https://t.me/GangExposed

English version: https://x.com/GangExposed