Flagged Addresses
Every address in the newest signed snapshot whose active reasons reach risk "high" or above, on any chain: listed, traced through THORChain, linked, or controlled by the same key as a listing. Each address (key) counts once. From signed snapshot v1792754912 (10/23/2026, 11:28:32 AM). What the numbers mean.
21,879 listed · 2,375 traced through THORChain · 0 linked accounts (1 linked in all) · 3,442 same key as a listing
| Address | Chain | Risk | How | Reason codes | Sources | Incident / entity |
|---|---|---|---|---|---|---|
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | KelpDAO rsETH bridge exploit (2026-04-18) |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Tether (USDT issuer) |
| evidence ↗ | BTC | high | traced | TRACE_SWAP | THORChain trace | Bybit hack laundering cluster |
| evidence ↗ | DOGE | high | traced | TRACE_SWAP | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | DOGE | high | traced | TRACE_THORNAME | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | DOGE | high | traced | TRACE_SWAP | THORChain trace | Tether (USDT issuer) |
| evidence ↗ | DOGE | high | traced | TRACE_THORNAME | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | DOGE | high | traced | TRACE_SWAP | THORChain trace | Tether (USDT issuer) |
| evidence ↗ | EVM | high | traced | TRACE_THORNAME | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | EVM | high | traced | TRACE_THORNAME | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | EVM | high | traced | TRACE_SWAP | THORChain trace | Tether (USDT issuer) |
| evidence ↗ | EVM | high | traced | TRACE_SWAP | THORChain trace | SBI Crypto mining-pool theft (2025-09-24) |
| evidence ↗ | EVM | high | traced | TRACE_SWAP | THORChain trace | Keyvan Fayyaz Gareh BLAGH |
| evidence ↗ | EVM | high | traced | TRACE_THORNAME | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | EVM | high | traced | TRACE_THORNAME | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | EVM | high | traced | TRACE_SWAP | THORChain trace | Tether (USDT issuer) |
| evidence ↗ | EVM | high | traced | TRACE_THORNAME | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | EVM | high | traced | TRACE_LP_PAIR | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | EVM | high | traced | TRACE_SWAP | THORChain trace | SBI Crypto mining-pool theft (2025-09-24) |
| evidence ↗ | EVM | high | traced | TRACE_L1_FUNDING | THORChain trace | SBI Crypto mining-pool theft (2025-09-24) |
| evidence ↗ | EVM | high | traced | TRACE_SWAP | THORChain trace | SBI Crypto mining-pool theft (2025-09-24) |
| evidence ↗ | EVM | high | traced | TRACE_SWAP | THORChain trace | Hardware-wallet social-engineering theft, $282M … |
| evidence ↗ | GAIA | high | traced | TRACE_THORNAME | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | GAIA | high | traced | TRACE_SWAP | THORChain trace | Tether (USDT issuer) |
| evidence ↗ | GAIA | high | traced | TRACE_SWAP | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | GAIA | high | traced | TRACE_THORNAME | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | LTC | high | traced | TRACE_THORNAME | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | LTC | high | traced | TRACE_THORNAME | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | LTC | high | traced | TRACE_SWAP | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | LTC | high | traced | TRACE_SWAP | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | LTC | high | traced | TRACE_SWAP | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | LTC | high | traced | TRACE_SWAP | THORChain trace | Hardware-wallet social-engineering theft, $282M … |
| evidence ↗ | LTC | high | traced | TRACE_SWAP | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | THOR | high | traced | TRACE_THORNAME | THORChain trace | Stake.com hot-wallet hack (2023-09-04) |
| evidence ↗ | THOR | high | traced | TRACE_BEST | THORChain trace | CoinEx hot-wallet hack (2023-09-12) |
| evidence ↗ | THOR | high | traced | TRACE_BEST | THORChain trace | CoinEx hot-wallet hack (2023-09-12) |