Listed wallets

Addresses that an official source lists as sanctioned, as holding stolen funds or as an exploit address, and what they move on-chain.

Alert when a listed wallet moves

Listed addresses

1,109

OFAC SDN list 1,058 · FBI / IC3 51

Tracked on-chain

712

EVM 178 · Bitcoin 534

Moved in 7 days

Show these

Moves of 0x9ef4…407b

Include unverified tokens

No priced moves of listed wallets recorded yet. Transfers of tokens outside our verified list appear with "Include unverified tokens".

Matching listed wallets

Wallets listed by official sources, most recently active first
Address	Listing	Network	Last move	Balance
0x9ef4…407bEVM (Ethereum, Arbitrum, Base …)	Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit	EVM (Ethereum, Arbitrum, Base …)	-	$1as of 2026-11-05

Each address is shown exactly as the source lists it, with the source's own wording and a link. A listing is the source's statement, not ours; we name no person, and a wallet that receives funds from a listed wallet is never labelled. OFAC dates are the first SDN list in which we saw the address. Balances: native ETH and our verified tokens on Ethereum, Arbitrum and Base. Not investment advice.

Questions and answers

Where do the listed wallets come from?

Only from official sources: the OFAC SDN list of the U.S. Treasury, FBI public service announcements and official incident post-mortems. Each listing links to its source.

Address

Listing

Network

Last move

Balance

0x9ef4…407bEVM (Ethereum, Arbitrum, Base …)

Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit

EVM (Ethereum, Arbitrum, Base …)

$1as of 2026-11-05