It reminds me a lot of Wizsec's investigative report on the Mt Gox theft. Stolen coins were initially mostly in one very large wallet, then distributed to many small wallets. Finally the coins were reconsolidated into a large wallet at a foreign exchange. The main difference is that BCC controls 95% of the market through its onsite exchange. I'm starting to think that a lot of the addresses in cohort 3 and 4 were fictitious as well , and that Bitconnect.co is using Gox like tactics to populate addresses for shill trading to manipulate the BCC price. It would be in Bitconnect's interest to legitimize exchange data with BCC blockchain transactions. Exchange trades should have a BTC counter part that could theoretically be vouched to, however this might be very difficult, like finding a needle in a haystack.
Also, I find it extremely suspicious how correlated BCC price and BTC price are. No other coin is so correlated to BTC. If anything I'd expect there to be a somewhat of an inverse correlation as BCC purports to be a vehicle to trade out of BTC in order to make fiat USD loans. We might expect a flight to a fiat based instrument during a BTC price crash for instance. The charts look nearly identical. It's almost as if someone is literally copying trades from a BTC exchange and pasting those exact trades into the BCC exchange: