Addresses that an official source lists as sanctioned, as holding stolen funds or as an exploit address, and what they move on-chain.
| Address | Listing |
|---|---|
| 0x8c72…1806EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xb723…c305EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x32da…1e3eEVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Programs ILLICIT-DRUGS-EO14059, SDGT · field ETH |
| 0xdd90…5f92EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xa4b2…449eEVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x83ef…a09eEVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xbca0…4a39EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xf1c4…e597EVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Program CYBER4 · field ETH |
| 0x7f19…8102EVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Programs CYBER2, ELECTION-EO13848 · field ETH |
| 0x7ff9…e3d9EVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Programs CYBER4, RUSSIA-EO14024 · field ETH |
| 0xbc3e…9a7eEVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x1bb0…c6b4EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xf0a1…1c09EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xbde2…bcbdEVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xa5a0…6ad6EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x660b…ea1dEVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xf03a…f0b1EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xeb0b…8549EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x684d…28b9EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x30a8…fa1dEVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x6d46…dc91EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x55cc…b734EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x0e8c…6b35EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xe697…ae49EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xe9bc…f7e6EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x723a…8315EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x959c…6fb4EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x2103…044cEVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xefe3…3ccaEVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Program ILLICIT-DRUGS-EO14059 · field ETH |
| 0xd3c6…07fbEVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x2711…7985EVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Program CYBER4 · field ETH |
| 0x5af7…4b1dEVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xb5a6…7b7cEVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Programs CYBER2, HRIT-IR · field ETH |
| 0xb4a8…f1a2EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xcd7e…c63aEVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x1512…0268EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x140c…c3e3EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x9271…d1abEVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xd850…e10eEVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Programs CYBER4, RUSSIA-EO14024 · field ETH |
| 0xb172…03b4EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xa7e5…b008EVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Programs ELECTION-EO13848, CYBER2 · field ETH |
| 0x8ac5…4bc6EVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Programs CYBER2, HRIT-IR · field ETH |
| 0x7ced…361eEVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Programs CYBER4, RUSSIA-EO14024 · field ETH |
| 0xd5b5…c489EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0x1cab…cbebEVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Programs CYBER2, HRIT-IR · field ETH |
| 0xc103…1c10EVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Program ILLICIT-DRUGS-EO14059 · field ETH |
| 0x4c19…cd67EVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
| 0xb338…1f33EVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Programs CYBER4, RUSSIA-EO14024 · field ETH |
| 0x8dce…4995EVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Programs CYBER4, RUSSIA-EO14024 · field ETH |
| 0x5d5b…d0efEVM (Ethereum, Arbitrum, Base …) | Sanctioned Listed as sanctioned by OFAC SDN list (on the list as of 2026-10-28) ↗Program ILLICIT-DRUGS-EO14059 · field ETH |
Each address is shown exactly as the source lists it, with the source's own wording and a link. A listing is the source's statement, not ours; we name no person, and a wallet that receives funds from a listed wallet is never labelled. OFAC dates are the first SDN list in which we saw the address. Balances: native ETH and our verified tokens on Ethereum, Arbitrum and Base. Not investment advice.
Only from official sources: the OFAC SDN list of the U.S. Treasury, FBI public service announcements and official incident post-mortems. Each listing links to its source.