Skip to main content
First Publication Original RusWatch investigation,

The “Sistema” Files | Part 8 | One Investigation. One Pattern. One Blueprint.

Russia ran a secret cryptocurrency network worth hundreds of millions of dollars through a Western-backed innovation center — the West didn’t stop it, and is not prepared to stop the others that are already running right now

THE FULL PICTURE

Eight parts. One network. A Kremlin operative in a Skolkovo office, a Bitcoin reserve that reached $85 million at its peak in London, criminal cash-out teams in Spain and Lithuania, privacy coins routed through the Central African Republic, and a chain of command that runs from a MacBook in office 412 — through Vladislav Surkov at Staraya Square, 4 — to the Presidential Administration and the Foreign Intelligence Service of the Russian Federation.

This is not a story about one bad actor. This is a story about a method. And methods get copied.

The operation ran for years. This investigation took months to document it.

“Eight parts. One chain of command. One MacBook. One reserve fund. One question: how many more are there?”

THIS IS NOT AN EXCEPTION

The most important thing to understand about what this investigation has documented is that it is not an anomaly. The network described in these pages is a template: Skolkovo as an operational cover, Western financial centers as routing infrastructure, criminal cash networks as the final conversion layer. It was built deliberately. It was refined over years. And there is no reason to believe it has been dismantled.

And if this network exists, others do too. Not as speculation — as logical consequence. A method this effective, this invisible, this profitable, does not stay in one office in one building in one country.

Russia has not invented a new form of warfare. It has adapted an old one. The use of financial systems as tools of political power is as old as economic sanctions themselves. What Russia has done is find the gaps in the system the West built to defend itself, and operate through those gaps. The gaps are structural. Nobody closed them before this investigation. Nobody was looking.

“Russia did not attack the Western financial system. It enrolled in it — as a student, a partner, an innovation hub, a donor. And from the inside, it did exactly what it needed to do.”

THE THREE FAILURES

What this investigation reveals, taken as a whole, is three distinct failures of the Western response to Russian financial aggression.

The first is the failure of institutional trust. Western governments and corporations lent their names, their capital, and their credibility to Skolkovo — a project that was, from the beginning, under the direct control of the Russian Presidential Administration and the security services. The assumption that engagement produces moderation is a reasonable one. In this case, it produced a state-controlled technology complex with MIT’s name on the letterhead.

The second is the failure of regulatory coverage. The UK and EU have some of the most sophisticated financial regulatory frameworks in the world — but those frameworks are built around regulated entities: banks, brokers, exchanges. Organizations that operate like NGOs, receiving cryptocurrency donations through public wallets, fall through the gaps. The Anti-Corruption Foundation’s public donation addresses were legally transparent. No regulation required anyone to ask where the money was actually coming from.

The third is the failure of imagination. The West built its defenses around the threats it had seen before — direct military aggression, obvious espionage, sanctioned oligarchs moving money through shell companies. It did not build defenses against a network that looks, on the surface, like a civic organization receiving cryptocurrency donations from supporters around the world. The attack was hiding in the most visible place possible.

“The West built walls against the threats it understood. Russia walked through the door it left open.”

WHAT NEEDS TO CHANGE

The blockchain forensics approach that produced this investigation is not secret. The tools are publicly available. The data is publicly available. What is required is the decision to use them — systematically, at scale, and without the assumption that Western financial infrastructure is automatically safe. Every public donation wallet connected to a politically sensitive organization is a data source. The question is whether anyone is reading it.

Regulatory frameworks that govern organizations receiving cryptocurrency donations need to be extended. The current gap between the scrutiny applied to banks and the scrutiny applied to NGOs and nonprofits is not a deliberate policy choice — it is an oversight that has been systematically exploited. A bank that receives $2 million across 124 transactions from a single Moscow IP address would trigger an automatic review. A public donation wallet that does the same triggers nothing.

The partnerships that gave Russian state institutions access to Western credibility need to be looked at again. Skolkovo’s board included Eric Schmidt of Google, Craig Barrett of Intel, Peter Loescher of Siemens, and a direct academic partnership with MIT. Each of these relationships provided something more valuable than money: legitimacy. They made it harder to ask the obvious questions. Future partnerships with state-linked institutions from hostile governments need to be evaluated not only for their commercial or academic value, but for the operational cover they provide to the state that controls them.

“The blockchain recorded everything. The regulators recorded nothing. The difference between those two sentences is the gap that needs to close.”

The Sistema Files is now a permanent record. It documents what happened, where it happened, who was responsible, and how it was done. The blockchain recorded every transaction, every address, every connection. It recorded Skolkovo. It recorded London. It recorded Surkov. It recorded all of it — in a public ledger, available to anyone with an internet connection. The information was never hidden. The question was never whether it could be found. The MacBook is still there. The wallets are still active. The blockchain is still recording. The question is why no one looked — and whether anyone is looking now.


 

THE SISTEMA FILES — END OF SERIES

Have information to share?

Submit anonymous tips through our secure, encrypted submission platform.

Secure Disclosure