Skip to content
← All case studies

Forsage: the $340M scheme that ran entirely on-chain

FORSAGE, 2020 SEC + DOJ enforcement, 2022–2023 the forensic chain, 2026. Assembled entirely from public court filings, peer-reviewed research, and permanent on-chain data.

Lost money in Forsage? You are not alone — this involved millions of people.

We can't reverse a blockchain transfer, and we will never charge an upfront “recovery” fee. What we can do is help you assemble a documented chain of custody for your loss — the kind of record that supports a theft-loss tax claim, a restitution filing, or a conversation with your attorney.

Start here — free consultation → No upfront fee, ever. We were scammed too.
Public-record demonstration

Unlike our UULALA case study — the operator's own documented loss — this is a matter the operator was not involved in. It is assembled entirely from public court filings, published peer-reviewed research, and permanent on-chain data. Nothing here is an allegation by us against any individual; every characterization of wrongdoing below is the U.S. government's, quoted from its own filings.

We chose Forsage for one reason: it is the single cleanest demonstration of what a forensic chain of custody looks like when a scheme runs entirely on public smart contracts.

The scheme that was the smart contracts

Most losses require assembling records from an exchange, a wallet, and a paper trail. Forsage is different: the scheme was the smart contracts. Per the SEC and DOJ, it operated as a set of self-executing contracts — marketed as “Forsage x3,” “x4,” and “xGold” — deployed across Ethereum, BNB Smart Chain, and Tron. Every deposit and every payout is permanently readable by anyone, forever.

The primary Ethereum matrix contract is public and verifiable right now:

0x5acc84a3e955Bdd76467d3348077d003f00fFB97

Deployed
~January 2020 (Ethereum)
Transactions
104,799+ on the primary contract
Chains
Ethereum, BNB Smart Chain, Tron
Current balance
0 ETH — funds flowed straight through
Explorer flag
Etherscan warning label present

The complete on-chain contract map

Forsage published its own contract addresses, and the archived pages' links pointed straight to the block explorers — preserving the full addresses even where the on-screen text was truncated. Every one is independently viewable right now:

ProgramChainContract address
x3 / x4Ethereum0x5acc84a3e955Bdd76467d3348077d003f00fFB97
xGoldEthereum0x488e3a4Bbbb2386bA619Eed88319E807C3dDb6C2
x3 / x4TronTREbha3Jj6TrpT7e6Z5ukh3NRhyxHsmMug
xGoldTronTA6p1BnBf2HJgc77Zk8BHmHoiJzquLCKWb
x3 / x4BNB Chain (BUSD)0x5acc84a3e955Bdd76467d3348077d003f00fFB97
xXxBNB Chain (BUSD)0x2CAa4694cB7Daf7d49A198dC1103C06d4991ae52
xGoldBNB Chain (BUSD)0x98872a66D0749C720D8Dc1A80d496b24B04ff7C5
xQoreBNB Chain (BUSD)0x1ee4A7a62726fDd1EDe780f90fd2a77f53F5Ba78

Source: the scheme's own site as archived by the Internet Archive, with the block-explorer links preserved in each capture — the ETH / Tron / BUSD core from the 14 Aug 2021 capture, and the two later BUSD contracts (xGold, xQore) from a 2025 capture, by which point the footprint had grown to eight contracts across three chains.

You do not have to take our word for any of this. Open the address above and watch $340 million move. That is the entire point: on a transparent chain, the ledger is the evidence, and the evidence is public.

The forensic pattern in the chain

Per the SEC's litigation release and the peer-reviewed analysis Forsage: Anatomy of a Smart-Contract Pyramid Scheme (Kell, Yousaf, et al., Cornell Tech / IC3, Financial Cryptography 2023), the on-chain record shows a characteristic structure:

  • Automatic pass-through. The SEC states the contract “automatically diverted the investor's funds to other Forsage investors, such that earlier investors were paid with funds from later investors.” On-chain this appears as inbound deposits routed, in the same or adjacent block, to prior participant addresses — with no external revenue ever entering.
  • Zero terminal balance. The primary contract holds 0 ETH today. Nothing was ever held or invested; value only redistributed from newer participants to older ones until inflow slowed.
  • Quantified loss, three independent ways. Per court documents, over 80% of Ethereum participants received back fewer ETH than they put in, and over 50% never received a single payout. The independent Cornell Tech / IC3 study measured net losses for more than 88% of participants.

These describe transaction-flow shapes on a public ledger. The allegations of wrongdoing belong to the SEC and DOJ, below.

And it is not only inferable from the ledger — it is written into the contract. The scheme's own verified source code (published on BscScan) contains the payout routine that transfers each deposit directly to an upline participant. The SEC's “automatic diversion” is the code's literal behavior.

What it advertised vs. what the ledger recorded

The scheme's own website — preserved by the Internet Archive — is a time-series of its claims. Two captures, three years apart:

The platform's own counters14 Aug 20212025 capture
Participants1,614,8833,440,704
“Turnover,” USD$2,520,112,365~$2 billion
New sign-ups / day927235

The SEC charged Forsage in August 2022 and the DOJ indicted the founders in February 2023 — yet the Internet Archive shows the site still serving active referral / “upline” links as late as the 7 August 2025 capture. The on-chain record confirms the activity was real, not merely a counter: the Forsage Tron contracts were still processing successful sign-ups and level purchases as late as February 2025, and successful internal payouts as late as March 2026 — roughly three years after the indictment. (Those figures come from block-explorer exports capped at 10,000 rows apiece, so they set a floor on the activity, not its full extent.)

And the record runs to the present: the deployer account's own administrative transactions on these contracts continue into July 2026 — the most recent recorded operator transaction is dated four days before the first Forsage criminal trial is scheduled to begin.

Three numbers, three meanings — and the case turns on never blending them
  • ~$2.5 billion “turnover” is a promotional figure. In a matrix scheme the same funds are passed hand-to-hand and re-counted at every hop, so “turnover” inflates far past the money actually taken in. It is not a measure of victim losses.
  • ~$340 million is the DOJ's net figure — money “taken in from victim-investors.” This is the number that maps to actual losses.
  • More than 88% net loss is what independent on-chain analysis (Cornell Tech / IC3) measured actually happened to participants.

The distance between “$2.5 billion earned — join today” and “88% of participants lost money” is the entire forensic point. The blockchain, not the marketing copy, settles it.

The irony that makes the record airtight: the platform advertised its transparency as a selling point — “All data is stored in the blockchain and can be verified… you can be confident in its safety.” That same public transparency is now the permanent evidence of the losses. The scheme invited the exact verification that documents it.

The enforcement record

Every characterization of wrongdoing here is the U.S. government's, from its own filings.

Civil · SEC
SEC v. Vladimir Okhotnikov, et al., No. 1:22-cv-03978 (N.D. Ill., Judge Jeremy C. Daniel) — filed August 1, 2022 (Press Release 2022-134; Litigation Release 25460). The SEC charged eleven individuals over what it called “a fraudulent crypto pyramid and Ponzi scheme that raised more than $300 million from millions of retail investors worldwide.”
Criminal · DOJ
United States v. Okhotnikov, et al., No. 3:23-cr-00057 — U.S. District Court, District of Oregon. Indictment February 2023: four founders charged including wire-fraud conspiracy, alleging a scheme that “took in approximately $340 million from victim-investors around the world.”

Status, as of July 2026:

  • Olena Oblamska (charged under the alias “Lola Ferrari”) was extradited from Thailand, pleaded not guilty, and is detained pending a four-day jury trial in the District of Oregon scheduled to begin in July 2026 — the first Forsage criminal trial to reach a courtroom.
  • Vladimir Okhotnikov (the alleged director, reported to be Dubai-based) remains at large; separately, a court in Tbilisi, Georgia convicted him in absentia in 2024, sentencing him to ten years in a related money-laundering matter.
  • Mikhail Sergeev and Sergey Maslakov remain at large.

All U.S. charges are allegations; each defendant is presumed innocent unless and until proven guilty in a U.S. court.

What the forensic chain enables now

For a participant who lost funds to Forsage, the public record and the on-chain data together assemble into a documented loss chain useful for:

  1. Capital / theft-loss tax treatment. A loss to a scheme charged by the SEC and DOJ as fraudulent is documentable in ways an undocumented “I lost money in a DeFi project” claim is not. (Consult tax counsel regarding IRS Revenue Procedure 2009-20's safe-harbor framework for theft-loss deductions, and its eligibility conditions.)
  2. Restitution / victim-remission eligibility. Where DOJ pursues forfeiture or a court orders restitution, victims with a documented loss chain are positioned to file — at no cost when a process is opened.
  3. Class-action standing. Participants with documented on-chain contributions within the charged period have standing in any civil action against the same defendants for the same conduct.
  4. Permanent archival evidence. The contract transactions are immutable on-chain; the SEC and DOJ records are permanent public record. Together they survive platform shutdowns, wallet loss, and the passage of time.

What L0gic Verify does — and does not — do

L0gic Verify would not have prevented a Forsage loss. Deposits were sent by participants, on their own keys, to a published contract address. There was no discrepancy between exchange-reported and on-chain state to detect — the destination itself was the harm, and it became legally recognized as such only afterward, when enforcement followed.

What we provide is the retrospective documentation layer: a reconstructed forensic chain of custody between wallet records and on-chain reality, with an operator-signed PDF for counsel-led use. The single-transaction Forensic Report starts at $95; multi-transaction, scheme-wide reconstructions are scoped per case after a free consultation.

Critically, and without exception: traced does not mean recovered. We produce documentation. We are not a fund-recovery service, we make no promise that any money can be gotten back, and we will never ask a victim for an up-front “recovery fee.” The crypto-recovery space is full of operators who re-victimize the already-harmed with exactly that promise. We are the opposite of those operators, on purpose. For anything touching recovery, taxes, or litigation, consult licensed counsel.

If you put funds into Forsage — or any scheme, charged or not — your loss may be documentable.

Start with a free consultation. We'll look at what you have, tell you honestly whether a forensic report would help, and if so, price it to your situation. No pressure, no upfront fee.

Assembled from public record: SEC Press Release 2022-134 & Litigation Release 25460; U.S. DOJ, District of Oregon indictment (Feb 2023); Kell, Yousaf, et al., “Forsage: Anatomy of a Smart-Contract Pyramid Scheme,” Financial Cryptography and Data Security 2023; the scheme's own site as preserved by the Internet Archive; and on-chain data at Etherscan / BscScan / Tronscan for the contracts listed above.