Yeah.. looking through the block chain, I feel this guy has been involved in a lot of laundering.. as I follow the trail, I see hundreds of thousands of dollars in some of the accounts that have moved money through his known addresses over the past few days...

https://blockchain.info/address/13izUnFG7RTwpmumiL2CqAhrJqYKHnBBEu -- the address that got about 40 of the stolen BTC and was used for refunds.. Before any talk of refunds, this wallet sent 4 BTC to:
https://blockchain.info/address/1AWcY1Am2hT8jzFWqWy7eRs1XxEJqqfdtT
Which then went to: https://blockchain.info/address/1B9HbcJsJvQP3AcCMBYkNgTnEJNDvy6NnZ
Note: Lots of other accounts sent to this one in a single transaction.. This is worth investigating, as initial research indicates that a long chain of transactions are working to conceal thousands of BTC. We may be able to tie him to larger scams through this..
Then all was sent to: https://blockchain.info/address/1MSLBgY9Si2SFBHnuj2g1NAEnkHHBwxUYA
which primarily went to: https://blockchain.info/address/1McKuuur4ngF3Q89SsaSsEoMNvCVfeBa8K
... Then https://blockchain.info/address/16SpTaW8kYW8NW9RmHZLJyB3TPAzwtzj6U    
... Then https://blockchain.info/address/1NZueDaFyozy3JrH2ZTNhscCQdYdECoupq
... Then https://blockchain.info/address/1Nw2sxCAC6ZKay7irSoVtogfk7k27CXd3u
... then https://blockchain.info/address/17Kfb54KCAN7f6iSTVE8dEH7NPrx4ktLWf
... Then https://blockchain.info/address/14jpbGf3Guxztp1sJDpZtY98WMUpBv58RP
... then https://blockchain.info/address/1G67rAovm2GUfw3dDdkziFW2nZTcVT2YhU
... then https://blockchain.info/address/1D4dDhbRcfyeQq6Qt7gdo7GwzFTyBFx3Nr
... then https://blockchain.info/address/1JUUeZnajHtxfi6sjLGVTrkfGPEaQFcB7G
... then https://blockchain.info/address/1N1xV9swCBYnZZAGHGJebWgzf81HWeJt1a
... then https://blockchain.info/address/18x6Hfc94GVz3zsMRdKUj6ECK6AS9pEkHT
... then https://blockchain.info/address/1NWzVSjGFhiz8N2iY4VCfsMetonKpnk4Vt
.. then https://blockchain.info/address/1HntkccSbpfUthFMBkiEd96NuYAoUdhM95
.. then https://blockchain.info/address/16tCLQWbc6rRnunezduodfhgFvhAZdCBMr
.. then https://blockchain.info/address/13PsB2yUwQCNR6suEFzmRTkongn3fgDDjd
.. then https://blockchain.info/address/1EyRfFwjijDGWL7XHLGcSdVHS5NdZgL6WE
.. then https://blockchain.info/address/14aaFvxtgkethwbK5g7jtb1xqFQz4fT4M7
... then https://blockchain.info/address/12jJnveKiXNXvW795Pmxa9WTkcrP4zg24n
This is where it sits now.. he keeps shaving off bits of it, as it typical for BTC laundering. These shavings might be worth investigating further.

Another line of inquiry: the address he's sending refunds from (https://blockchain.info/address/13izUnFG7RTwpmumiL2CqAhrJqYKHnBBEu) also received an odd 4 BTC from:
https://blockchain.info/address/1GRMipxgTzH19fVqRkSN7W6tx781XPLX7s
In the same transaction this address also sent 31 BTC to:
https://blockchain.info/address/1EGEBgB4HHCYhceRpzsR9BsPEo2jRuD7i
... Then https://blockchain.info/address/14fx5qf1Tj933M3EHaMcV8iGwysbqZYhqX
... then https://blockchain.info/address/13FEHHvdEniRHQJhJG5ENmYKxEvcvMqxhm
... then https://blockchain.info/address/1Bf3ZhZ15fPuHTQZNSMtFSy2wZjTr5rrEZ
... then https://blockchain.info/address/1Lx9LBQqvPrn7Wo3nCsu5bLY8SzanmjJSy

Here he split the funds and send half of them on this route:
https://blockchain.info/address/1AGW2qz4qJ1XQ2DkrsGH557hZQEoqQgbJg
https://blockchain.info/address/14AM8fZAnCahKRkeaxLwGc9U2SJmDM9U9D
https://blockchain.info/address/17s3yzeEVjEpLM5RR6xb4RaE36VKcotyv6
https://blockchain.info/address/1EjJtEzwKwZwqziT3BdLbVYEgCoj1Cc47C
- This wallet is particularly interesting.. looks like a lot of BTC pass through it before going to https://blockchain.info/address/1Facb8QnikfPUoo8WVFnyai3e1Hcov9y8T
This one is more interesting. Suspected money laundering service - it's had over 100 Million USD worth of BTC pass through it.
The other half of the funds go here:
https://blockchain.info/address/1PehpTQvD8f5uXDYJqeFULAyFwXbkT41wr
then here: https://blockchain.info/address/14jHyRDjrhAYkEw6sECkpbwCCyVjGZoFn8
then here: https://blockchain.info/address/19xjfwWpCCuUTC1Gq6auZiDF4B7UcrwQXM
before again going into the suspected laundering service here: https://blockchain.info/address/1Facb8QnikfPUoo8WVFnyai3e1Hcov9y8T

So at the end of the day, everything ends up here: 1Facb8QnikfPUoo8WVFnyai3e1Hcov9y8T


Going back a few steps.. https://blockchain.info/address/13izUnFG7RTwpmumiL2CqAhrJqYKHnBBEu received those 4 BTC from:
https://blockchain.info/address/1GRMipxgTzH19fVqRkSN7W6tx781XPLX7s - where did this ~4btc sender get his money? Well, a few transactions back he took ~64 BTC out of DGEX...
Over the course of some time, DGEX:https://blockchain.info/address/1LNKq42Hx6nsWCyBsxKCDqdF3btBbufnQT
sent around 3000 BTC here: https://blockchain.info/address/1JpQQcJwNSo4QueHZ3dwcXfbaDCAimYKg7  which I am guessing is another DGEX wallet… On Jan 9th This address sent 64 BTC to our scammer at https://blockchain.info/address/1BhQufqMWAdNNZLeRypUPeb6YmrhYDGLh4
which sent to https://blockchain.info/address/1MkaNSYKWJ71oJniwictmMUUBZSnktGb4B
which sent to https://blockchain.info/address/1GRMipxgTzH19fVqRkSN7W6tx781XPLX7s
which sent the majority of the balance to another address, but also sent 4BTC to
https://blockchain.info/address/13izUnFG7RTwpmumiL2CqAhrJqYKHnBBEu
which happens to be where most of the Shares scam money ended up, thus we see that all this activity is part of his laundering.  Notable that all this happened pretty darn fast.

So it's worth asking - was there a NXT scam / heist worth about 64 BTC recently? If not, he may have just been laundering through DGEX.. Hard to say. Other possibility is that he got in early or was in the genesis block.

Now then.. it gets juicier! He was asked to help out with Frozen and I think he feels guilty about the mess he has made with that..


But wait a moment! Where did those funds come from??? They came from:
https://blockchain.info/address/1HezbN4YyUcSh6h2FYmNbZGjAFEggnhJkc
which had 108 BTC until recently. So.. Where did it come from? It all starts at https://blockchain.info/address/1Facb8QnikfPUoo8WVFnyai3e1Hcov9y8T -- that suspected laundering service.
https://blockchain.info/address/1Facb8QnikfPUoo8WVFnyai3e1Hcov9y8T
to https://blockchain.info/address/18j5D343qpcthmknKJDzJoE8R2yZn5xSbW
to https://blockchain.info/address/1N6LQPShbSYa1T1XurAm5fasPWnY5KsP4g
to https://blockchain.info/address/1P55oKQVYy9CNyU1Bc3z8cD5dTmcafVeZL
to https://blockchain.info/address/1558DTt1PKDx2mCobbSu6JXbYWsVUR6ssK
to https://blockchain.info/address/1DRzaUT2LsPG3Eoy4ZPVrHYgVmhvEXHgy9
to https://blockchain.info/address/1ErJjTTd5NFasgow5kzE3uqYnFSbybicEM
to https://blockchain.info/address/1DRNg4xeLKzD5jSkDQExX62UoPUxPXzSiD
to https://blockchain.info/address/1PqpH1bG5qnJLWTTQkiDHeGkKhLhb1ZDHq
to https://blockchain.info/address/13qtUgaFjCHUGuPSkUj7pTfGrDRJVaYEaq
to https://blockchain.info/address/12FuyijsERr7WJ8bmT8JkYF7GDjxgoVxca
to https://blockchain.info/address/1PGsNJxiH4tuy9wMsSasa6VnQg5gwRYBpE
to https://blockchain.info/address/1NZYbNzajTgenFkudLWXsQYjb1npQtfSUS
to https://blockchain.info/address/1DMV6jwV1fbGJVY9J6ExjVZCTM4MYoEf5L
to https://blockchain.info/address/1CyKSYtuFAPfTAHRE7o6vUnqMycyAnH6WR
to https://blockchain.info/address/1HMh7JUG7d2HqndQQbr3WUeLLitKhYtc8G
to https://blockchain.info/address/1HJovy2giHDTDBekhFQD9HYfFG6gTCsZJp
to https://blockchain.info/address/1H2nxMnrhcVLqtEGk5CmiqEtWXriFkd8UF
to https://blockchain.info/address/1EbYSSbXAAF4zeWb7Ca6k9MRAaV1tdWpzx
to https://blockchain.info/address/1G9W2NDbUpwKEwPvBvynxbRSuck2ZVyFqn
to https://blockchain.info/address/19KSJH6RHMEogSiZwpeFFkcLMffYwxMtgT
to https://blockchain.info/address/1Hd9cgX6twjUu7HuLKo1sPf7e6wkoMEt4A
to https://blockchain.info/address/1C4W4oJciH6gezm8LmfZVHbNbTCiQT8se9
to https://blockchain.info/address/1HezbN4YyUcSh6h2FYmNbZGjAFEggnhJkc
where he sends that 0.5 BTC to his old FZ friend.

Then it continues:
https://blockchain.info/address/1C7ShYgQkuYgauyS8r4U7AzyBEjMAMfurP
https://blockchain.info/address/1K821sNyk9eQS5THfVw12QQGxSNQASZpVY
https://blockchain.info/address/1BPu3nwpunuTFXTeFzXN2cyUt2Nwwmanuk
https://blockchain.info/address/1Mequey8AQEjcqsagaTxKHFF4WymqBDJ3Q
https://blockchain.info/address/1NVReZqPZDLNzJoGpxwr4jCbsEvt1jMCTN
https://blockchain.info/address/1J6suPKEgFYnAC458LtMymbAGmHAWLM3xc
https://blockchain.info/address/1Hcs9suVtuZp3D3EZyAynVe9LbKqxQrwdW

which is where it remains as I post this.