Public reporting on 2025–2026 cases continues to show that most successful investigations exploit operational mistakes rather than magical Tor breaks: reused usernames, contaminated shipping data, and transparent crypto trails.
Educational takeaway for researchers: study failure modes in our OPSEC guide and timeline.