Flagged Addresses
Every address in the newest signed snapshot whose active reasons reach risk "high" or above, on any chain: listed, traced through THORChain, linked, or controlled by the same key as a listing. Each address (key) counts once. From signed snapshot v1791511951 (10/9/2026, 2:12:31 AM). What the numbers mean.
21,626 listed · 2,360 traced through THORChain · 0 linked accounts (3 linked in all) · 3,442 same key as a listing
| Address | Chain | Risk | How | Reason codes | Sources | Incident / entity |
|---|---|---|---|---|---|---|
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | CIRCLE_BLACKLISTED TETHER_FROZEN | Circle, circle_other_chains, Tether | Circle (USDC issuer) |
| evidence ↗ | EVM | high | listed | USDT0_FROZEN | tether_usdt0 | Tether USDT0 (omnichain USDT) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | KelpDAO rsETH bridge exploit (2026-04-18) |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | KelpDAO rsETH bridge exploit (2026-04-18) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | HECO bridge and HTX hot-wallet hack (2023-11-22) |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | BigONE hot-wallet hack (2025-07-15) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | LI.FI exploit (2024-07-16) |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | EXPLOITER_LABEL | eth-labels | Filament Exploiter 1 |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Indodax hot-wallet hack (2024-09-11) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |