Flagged Addresses
Every address in the newest signed snapshot whose active reasons reach risk "high" or above, on any chain: listed, traced through THORChain, linked, or controlled by the same key as a listing. Each address (key) counts once. From signed snapshot v1791292715 (10/6/2026, 1:18:35 PM). What the numbers mean.
21,570 listed · 2,391 traced through THORChain · 0 linked accounts (4 linked in all) · 3,442 same key as a listing
| Address | Chain | Risk | How | Reason codes | Sources | Incident / entity |
|---|---|---|---|---|---|---|
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Phemex hot-wallet hack (2025-01-23) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | FTX accounts drainer (2022-11-11) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | EXPLOITER_LABEL | eth-labels | Jimbos Protocol Exploiter |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | BtcTurk hot-wallet hack (2025-08-14) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | CIRCLE_BLACKLISTED | Circle, circle_other_chains | Circle (USDC issuer) |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | CIRCLE_BLACKLISTED | Circle | Circle (USDC issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | INCIDENT_LAUNDERING | Curated | Penpie exploit (2024-09-03) |
| evidence ↗ | EVM | high | listed | TETHER_FROZEN | Tether | Tether (USDT issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | KelpDAO rsETH bridge exploit (2026-04-18) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | Bybit hack laundering cluster |
| evidence ↗ | EVM | high | listed | CIRCLE_BLACKLISTED | Circle, circle_other_chains | Circle (USDC issuer) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | FTX accounts drainer (2022-11-11) |
| evidence ↗ | EVM | high | listed | HACK_CLUSTER | Hack cluster | BingX hot-wallet hack (2024-09-19) |