Addresses that an official source lists as sanctioned, as holding stolen funds or as an exploit address, and what they move on-chain.
| Address | Listing |
|---|---|
| 0x9ef4…407bEVM (Ethereum, Arbitrum, Base …) | Stolen funds Listed as holding stolen funds by FBI (IC3 PSA I-022625-PSA), 2025-02-26 ↗The following Ethereum addresses are holding or have held assets from the theft, and are operated by or closely connected to North Korean…Incident: Bybit |
Each address is shown exactly as the source lists it, with the source's own wording and a link. A listing is the source's statement, not ours; we name no person, and a wallet that receives funds from a listed wallet is never labelled. OFAC dates are the first SDN list in which we saw the address. Balances: native ETH and our verified tokens on Ethereum, Arbitrum and Base. Not investment advice.
Only from official sources: the OFAC SDN list of the U.S. Treasury, FBI public service announcements and official incident post-mortems. Each listing links to its source.