Avengers Anti-Fraud Alliance
MetaTronics — On-chain Forensics Brief

Where MetaTronics really gets the moneyIt comes in through a crypto payment gateway called Heleket, then crosses a bridge. None of it comes from trading.

MetaTronics tells members it earns their returns by trading. We took the operator’s own list of withdrawals and checked every one against the blockchain, on two networks. The payouts did happen — which tells us the records are accurate, not that the business is. The trading did not. Money arrives from a crypto payment gateway, crosses a bridge, goes straight back out to members, and at every stage the operation holds almost nothing.

NetworksBNB Smart Chain · TRONEvidence pulled22 September 2026Published22 September 2026StatusWallets still paying at publication

AThe bottom line

What this is, in four sentences.

MetaTronics pays its members from a pair of automated wallets, and we verified every single payout those wallets made in the operator's ledger — 4,247 transfers, matched on chain, with no mismatches. Those wallets are filled by a chain of other wallets, and everything we traced back turned out to belong to somebody else: a crypto payment gateway called Heleket, two bridge services that move money between blockchains, and withdrawals from Binance. Across roughly $1.8 million moving on two chains we found no trading at all. No exchange, no trading venue of any kind, nothing bought and held, and no wallet in the network ever holding more than a few thousand dollars. Money comes in from members, crosses a bridge, and leaves as somebody else's withdrawal, usually within hours.

4,247
payouts in the operator's records, every one found on the blockchain exactly as described
0
trades found anywhere in the wallet network, on either chain
$3.00
deducted from every TRON withdrawal, which is not a network fee and is not passed on
22 Sep
payouts still leaving both wallets on the day this was published, while members report withdrawals failing since 14 September

In plain English

Withdrawals have been leaving these wallets and reaching members. We say so because it is true, and because it is the single thing that persuades people to put more in.

What we could not find is any business behind them. The money paying one member's withdrawal today is money that arrived from other people days earlier, crossed a bridge, and went straight out again. Nothing is earning anything in between.

BWhat rests on what

Four kinds of evidence, kept separate throughout.

The main limitation, stated up front

The ledger covers the branch of one leader — 4,953 withdrawals worth $594,242.93 — while the wallets paying it serve the whole platform. On BNB Smart Chain the payout wallet sent 571,061.74 USDT to 2,525 recipients in the same period, so the ledger is roughly three quarters of that wallet's outflow by value and a fraction of the platform's total. Every platform-wide figure in this report is therefore a floor, not a total.

CWhat was examined

The evidence base behind every figure.

4,953
withdrawal rows in the operator's ledger, 11 Mar – 21 Sep 2026
~45,000
blockchain transfer records pulled and parsed across both chains
2
blockchains — BNB Smart Chain and TRON
5,058
distinct addresses checked for collisions before any was tagged
The BNB Smart Chain payout wallet, filtered to genuine USDT. The 30-day view alone holds 9,204 transfers, which is why the export had to be split into windows.
The BNB Smart Chain payout wallet, filtered to genuine USDT. The 30-day view alone holds 9,204 transfers, which is why the export had to be split into windows. BscScan, 22 Sep 2026

DThe payouts did happen

The first thing to test — and it tells us less than it first appears.

The operator's ledger claims a blockchain transaction for 4,247 of its rows. We pulled the full history of both wallets that made them and checked each one on three things at once: the transaction hash, the receiving address and the amount.

Payout walletLedger rowsMatchedMismatchedNot found
BNB Smart Chain, automated3,5363,53600
TRON, automated71171100

That is $418,914.19 on one chain and $87,721.17 on the other, all confirmed. We also ran the same check using made-up transaction IDs, and it found nothing — so the check really does tell the difference between a real payout and an invented one.

What this does and does not tell us

It tells us the operator is not inventing its payout records. When it says it paid someone, the money moved.

It does not tell us the business behind it works. A transfer proves that money left a wallet; it says nothing about where that money came from. Paying today’s withdrawals with money that arrived days earlier looks identical, on a blockchain, to paying them out of profits — and the rest of this report is about which of those is happening here.

EWhere the money comes from

Followed backwards, hop by hop, until it leaves the blockchain.

1
Heleket, a crypto payment gateway on TRON
A wallet publicly tagged Heleket Hot Wallet 2 settles money to the operation — 579,163.93 USDT to its main TRON wallet between January and July 2026.
What that is: the service a business plugs into its website or app so customers can pay in crypto. It shows the customer an invoice, watches the blockchain for the money, and credits it to the business’s account with the gateway. The business withdraws it to its own wallet when it wants it. Heleket advertises fees from 0.4% and sign-up with nothing but an email address.
This is why members’ deposits never show up as ordinary wallet transfers — and it is where the record of who paid what actually sits.
2
The TRON hub
Takes money from the gateway and pays TRON members directly. In the part of its history we exported it took in 1,826,293.52 USDT and sent out 1,781,510.86, dealing with 1,091 different addresses. It was left holding $44,782.
3
A crossing wallet, then a bridge
386,400 USDT passes to a wallet created on 16 August, which pushes 276,800 straight into the Bridgers bridge contract on TRON. Minutes later the matching amount, less a fee, appears on BNB Smart Chain.
4
A funding wallet on BNB Smart Chain
Bridge settlements arrive and are passed on. The current one took 374,959.20 USDT in and sent 373,665.47 out in five weeks, keeping about $1,294.
5
The payout wallet, and members
571,061.74 USDT out to 2,525 people. It holds about $6,887.

What naming Heleket does not mean

Heleket is a payment gateway used by many businesses. Processing payments for this operation is not, by itself, misconduct, and we found nothing suggesting Heleket knew what it was processing. It is named here because it is where the record of members’ deposits actually sits, and because that record cannot be reached from a blockchain.

The identification also rests on TronScan’s public tag for the wallet rather than on anything Heleket told us.

In plain English

Nothing in this chain stops anywhere. Each wallet takes money in and pushes it out within hours, keeping a float of a few thousand dollars. That is what a payment pipe looks like. A business earning returns on member capital would have that capital sitting somewhere, doing something, and it does not exist.

The TRON hub and everyone it deals with. Green on the left is money coming in from a handful of large senders; the red fan on the right is payments going out to hundreds of individual members.
The TRON hub and everyone it deals with. Green on the left is money coming in from a handful of large senders; the red fan on the right is payments going out to hundreds of individual members. Arkham Intelligence, 22 Sep 2026

FWhat isn't there

Three absences, each checked directly rather than assumed.

No trading

One of the funding wallets signed 551 transactions in its lifetime. 546 are plain transfers, three are token approvals, and the two remaining calls go to bridge contracts. Nowhere in any wallet we looked at, on either chain, is there an exchange, a trading venue, lending, staking, or anything bought and held. The one transaction labelled "Swap" is 7,000 USDT being sent into the bridge.

Money held is the other half of it. Over roughly three months and around $577,000 passing through, the BNB Smart Chain wallets retained between $0.29 and $6,887 each. Capital that is being traded has to sit somewhere and move in value. None of it ever does.

What this does not exclude

A trading account inside a centralised exchange is invisible on a blockchain. If the operator says its trading happens on an exchange, that claim cannot be disproved with these exports — only with statements from the venue. What we can say is that the money paying members demonstrably comes from a bridge, not from a trading wallet returning gains.

No deposits on the blockchain

We looked for a MetaTronics deposit address for weeks of work and there isn't one. Member money is collected through the payment gateway at step 1, which means the record of who paid in what sits in the gateway's systems and the operator's database, not on any public chain.

No sign of the leader's $200,000

The branch leader states publicly that he invested around $200,000. His wallet is confirmed from his own video. We pulled its full history back to November 2022. Between his registration on 3 March 2026 and his first payout on 4 July, the wallet sent 95,480.84 USDT in 63 transfers to 62 different addresses, the largest single one being 9,950, and no destination received as much as 20,000 in total.

It is a busy wallet — 874,300.60 in and 864,234.19 out since 2022 — but it is a pass-through, not an investor's account, and nothing resembling a $200,000 deposit leaves it in the relevant window.

What this does not exclude

He could have deposited from a different wallet, from an exchange account, or on a chain we have not pulled. The finding is precise: the wallet he published shows no such investment. It is not the same as proving he never made one.

The branch leader recording his own withdrawal. The recipient address in the form matches the wallet in the operator ledger character for character, including capitalisation, which is what confirms the identification.
The branch leader recording his own withdrawal. The recipient address in the form matches the wallet in the operator ledger character for character, including capitalisation, which is what confirms the identification. Screen recording published by the account holder

GThe three dollars

A small charge that says something about the rest.

Every one of the 711 TRON payouts in the ledger is exactly 3.00 USDT short of the amount the member requested — every row, no exceptions. On the chain, the wallet that sent them received 184,191.53 and sent out 184,049.57 over eight weeks. It kept 141.96.

So the $3 is not being retained by the payout wallet, and TRON's own costs are paid separately in energy and bandwidth, which we can see being delegated to it. The member is charged $3 that is not a blockchain fee.

In plain English

Three dollars a withdrawal sounds trivial, and for one member it is. It is in this report because a member reading "network fee" would assume the blockchain took it, and the blockchain did not.

HWhat we got wrong before

Corrections to our own interim report of 3 August 2026.

An earlier report by this investigator identified eight wallets as MetaTronics "funders" paying the branch leader around $114,000. Reading the same addresses on a properly labelled explorer shows seven of them are Binance hot wallets. That money was the leader withdrawing from his own exchange accounts, not the platform paying him.

Two more addresses that report treated as MetaTronics wallets belong to bridge services. Both of those wallets are dropped from our list here.

Why this happened, and why it matters beyond us

Those wallets were identified by matching an amount and a time, without ever checking the address itself. The operator's own ledger makes the same mistake in the same way: for payouts made by hand, it searched the member's address for a transfer of about the right size at about the right moment and recorded whoever sent it. That method produced entries calling Binance wallets and bridge contracts "company wallets". Anyone using that ledger should treat those hand-made rows as a starting point, not a fact.

ICheck it yourself

The addresses behind every figure above. No account needed.

Automated payout walletBNB Smart Chain · bscscan.com
0xbE3426473400e863Ba78cCB2b607816731a9c328
3,536 ledger payouts, all verified. 571,061.74 USDT out to 2,525 recipients. Still paying on 22 September 2026.
Automated payout walletTRON · tronscan.org
TTJurvGXygZ2R1gTPZoHra2njFjmtofid9
711 ledger payouts, all verified. Funded almost entirely by the hub below.
The TRON hubTRON · tronscan.org
TJt5UnJ9ZGPhykdkFG8dP3Fo6NcYgZb5rX
Created 11 January 2026. Receives from the payment gateway, pays members, and feeds the bridge crossing.
Payment gatewayTRON · publicly tagged Heleket Hot Wallet 2
TXe31JpKEjb9Jr1sqNnSssD6gTZd9RHUtJ
579,163.93 USDT settled to the hub. A service used by many businesses, not a MetaTronics wallet.
Current funding walletBNB Smart Chain
0x9d880930526F2eb566da80b19B6247BdF58c62eD
346,520 USDT into the payout wallet between 16 August and 21 September 2026.
Branch leader's walletBNB Smart Chain · self-published on video
0x1bfa2f0D2Ca96989Bb18e665Fdb843a635d30E4F
79 ledger payouts totalling $92,921. Full history from 30 November 2022 examined for the $200,000 question.

JWhere we hold the line

What we did, and did not, claim.