There was some irc chat long ago, where Karpeles sent around 424k BTC to a particular address as prove that the exchange holds enough funds.
The address was this here
424k proof transaction:
https://blockchain.info/tx/3a1b9e330d32fef1ee42f8e86420d2be978bbe0dc5862f17da9027cf9e11f8c4 424k 06/23/2011
connected to this address are following addresses
50k 1P3S1grZYmcqYDuaEDVDYobJ5Fx85E9fE9 first input: 11/16/2011 05:59:08
40k 1cXNTyXj4xPGopfYZNY5xfSM1EPJJvBZV first input: 11/16/2011 05:59:08
40k 12HddUDLhRP2F8JjpKYeKaDxxt5wUvx5nq first input: 11/16/2011 05:38:46
40k 16Ls6azc76ixc9Ny7AB5ZPPq6oiEL9XwXy first input: 11/16/2011 05:38:46
30k 1MyGwFAJjVtB5rGJa32M6Yh46cGirUta1K first input: 11/16/2011 05:45:03
Unfortunately i fail to understand the blockchain.info chain of events completely, as there are some addresses which received less funds than they seemingly sent out.
you will notice that all of those addresses contain the bitcons still, AND all of those addresses have zero digits BEFORE the dot(sub the front digit of course). they are exactly 50000.whatever, 40000.whatever and so on...
if you head over to
http://bitcoinrichlist.com/top100 you will be able to find similar addresses with 40k, 30k, 20k, 10k etc
one example being this
Nr 24, 25, 26 in the rich list are 40k with all digits in front of the dot are zero, AS WELL as one digit after the DOT.
There is one more 40k which has ALL digits in front of the dot zero, but not the digit AFTER the dot.
This would be this one
http://bitcoinrichlist.com/address/14j6jLececs66ZQ8ew6vTFNiEn2NupacWJ?charttype=balanceThere is only 1 30k address which is already included in the list, showing this pattern, but there are two 20k addresses being at 45 and 46 in the rich list position, having all zeros after the "2" digit
http://bitcoinrichlist.com/address/15CVfJUC1LKn1GKZx6RM5UMbFfnTd8vTT4?charttype=balancehttp://bitcoinrichlist.com/address/13ssxUjmQqemuiBfJSBsr7gFX7UWU7uXNK?charttype=balanceat 15k we have
http://bitcoinrichlist.com/address/1LDWDufjU5ATbozDZY3uChb7oPAbDaiB7K?charttype=balancehttp://bitcoinrichlist.com/address/12WFth5HabiVrcj5waHtDP1b7gXSQPuDPz?charttype=balancehttp://bitcoinrichlist.com/address/1Fd2RVn8Ha6K6qevPFgPLneJn8VNaLPGW2?charttype=balanceat 10k we have
http://bitcoinrichlist.com/address/1MeCzxxB8eDd17DaocFLQaQtH8seVjNM67?charttype=balancehttp://bitcoinrichlist.com/address/1Gg9GGQWmRk1pp4vNkMqLaEiPVNdiNvz7E?charttype=balancehttp://bitcoinrichlist.com/address/19PPeuu4jPjqtefSQ2FDgKmNJ88Z5wiuJt?charttype=balancehttp://bitcoinrichlist.com/address/15jdxjFhXUsp2xuycmKnjw8yk1WsVon69c?charttype=balance....
many more. The 10k addresses that follow this pattern are numerous going from 84-113 , meaning 29* 10k = 290k coins
194-235 5k deposits with same pattern
So we would have
1x 50k
4x 40k
1x 30k
2x 20k
29x 10k
41x 5k
we get a total of 775k BTC.
Of course, not all of those addresses are owned by MtGox so we are getting closer to the 750k in this highly speculative theory.
In fact, none of those addresses could have anything to do with MtGox, as i do not understand the blockchain well enough, but i find it quite a coincidence that they add up so well.
I think you have shown how evidence can be used to shape a case, however to be fair to all parties the forensics really must start at the beginning and go where it leads, my guess it many interesting things will be found.
Based on what you found Mt Cox will have to account for those transactions -- they may all be legit, all illegit, or some mixture the point is we know where they came from and MG must make an accounting. Whatever he can't account for must be assumed that he has control over.