Holistic wallet report
0x28C6c06298d514Db089934071355E5743bf21d60
HX-0161906e5e82 · screened 2026-09-13 19:46:26+00:00 · 6 chain(s) in one call · data source: live
Allow
No rule triggered. Proceed.
Holistix scores this wallet 1.0 of 10 (minimal risk) from a single screen across 6 chain(s), with activity on Ethereum, Base, Optimism, BNB Smart Chain, Polygon, Arbitrum. $319,223,957 of traced value breaks down as $316,738,789 direct, $2,485,167 one hop away and $0 beyond 0 bridge crossing(s). The score is driven by regulated exchange or vasp (96% of the score), unattributed address (4% of the score).
No material risk exposure identified.
Level 1 of 5
· minimal
Balanced tolerance
Traced value
$319,223,957
Direct
$316,738,789
observed on chain
One hop away
$2,485,167
weighted 50%
Across bridges
$0
0 crossing(s)
Balance held
$382,303,962
Chains active
6 / 6
ethereum, base, optimism, bsc, polygon, arbitrum
What the score is made of
Each category contributes on the same 0–10 scale and the score is the quadratic mean of those contributions, so the share of the score each category owns is exact — the percentages below sum to 100%.
direct exposure
one hop away
across a bridge
Regulated exchange or VASP
weight 1
1.00 of 10
· 96% of score
Regulated exchange or VASP contributes 1.00 of 10: $315,035,711 directly and $246,782 one hop away on BNB Smart Chain ($300,000,600), Optimism ($15,035,111), Ethereum ($246,782). Weighted exposure is 99.112% of traced value, at the 80.000% saturation point for this category.
Binance 8
· bsc · $300,000,600
Binance 8
· optimism · $15,035,111
Bitfinex Hot Wallet
· ethereum · $115,266
Unattributed address
weight 2
0.21 of 10
· 4% of score
Unattributed address contributes 0.21 of 10: $1,703,078 directly and $2,158,534 one hop away on Ethereum ($3,853,443), Base ($7,562), Arbitrum ($539). Weighted exposure is 0.875% of traced value, below the 80.000% saturation point for this category.
Unattributed address 0xc29b...56fe
· ethereum · $350,000
Unattributed address 0x2b54...7c6e
· ethereum · $310,808
Unattributed address 0x0474...8de5
· ethereum · $205,814
Decentralised finance protocol
weight 2
0.03 of 10
· 0% of score
Decentralised finance protocol contributes 0.03 of 10: $79,742 one hop away on Ethereum ($79,742), Base ($0), Optimism ($0). Weighted exposure is 0.013% of traced value, below the 80.000% saturation point for this category.
Aave V3 aUSDT
· ethereum · $79,742
UniswapV2Pair
· base · $0
Uniswap V2
· base · $0
Cross-chain bridge
weight 3
0.00 of 10
· 0% of score
Cross-chain bridge contributes 0.00 of 10: $109 one hop away on Ethereum ($109), Base ($0). Weighted exposure is 0.000% of traced value, below the 50.000% saturation point for this category.
MetaBridge
· ethereum · $109
BridgeToken
· base · $0
Merchant or payment processor
weight 1
0.00 of 10
· 0% of score
Merchant or payment processor carries no scoring weight in this model, so its $0 of flow does not affect the score.
Tether USD (USDT)
· ethereum · $0
Token contract
weight 1
0.00 of 10
· 0% of score
Token contract carries no scoring weight in this model, so its $0 of flow does not affect the score.
Aave (AAVE)
· ethereum · $0
Pepe (PEPE)
· ethereum · $0
Lisk (LSK)
· ethereum · $0
Flow of funds
Source and destination are kept apart on purpose. Illicit money arriving is a source-of-funds question the institution must report; clean money leaving towards a risky party is a destination question it may still be able to prevent.
Source of funds
Total
$16,707,890
842 transfer(s)
Largest single
$15,035,111
mean $19,843
Risk-relevant
0.0%
$0
Counterparties
498
10.012% unattributed
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Cross-chain bridge | 0.0% | $0 | 1 | protocol | BridgeToken |
| Unattributed address | 10.012% | $1,672,779 | 653 | unhosted | Unattributed address 0xc29b...56fe, Unattributed address 0x2b54...7c6e, Unattributed address 0x0474...8de5, Unattributed address 0xb93c...7361, Unattributed address 0x12b0...903b |
| Decentralised finance protocol | 0.0% | $0 | 131 | protocol | UniswapV2Pair, Uniswap V2, UniswapV3Pool, Aave V3 aWBTC, Aave V3 aWETH |
| Regulated exchange or VASP | 89.988% | $15,035,111 | 2 | hosted | Binance 8, Binance Hot Wallet |
| Token contract | 0.0% | $0 | 55 | unhosted | USD Coin (USDC), Pendle (PENDLE), Optimism (OP), Uniswap (UNI), Rocket Pool Protocol (RPL) |
Destination of funds
Total
$300,030,899
900 transfer(s)
Largest single
$300,000,600
mean $333,368
Risk-relevant
0.0%
$0
Counterparties
769
0.01% unattributed
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Unattributed address | 0.01% | $30,299 | 842 | unhosted | Unattributed address 0x51db...fb5c, Unattributed address 0x31be...da34, Unattributed address 0xff00...5fd1, Unattributed address 0xb241...2401, Unattributed address 0x7fbc...3f0b |
| Regulated exchange or VASP | 99.99% | $300,000,600 | 8 | hosted | Binance 8, Binance Hot Wallet 7, Binance Hot Wallet 15 |
| Merchant or payment processor | 0.0% | $0 | 28 | hosted | Tether USD (USDT) |
| Token contract | 0.0% | $0 | 22 | unhosted | Aave (AAVE), Pepe (PEPE), Lisk (LSK), Golem (GLM), Lagrange (LA) |
Funds arrived mainly from regulated exchange or vasp (89.988%) across 842 inbound transfer(s) totalling $16,707,890. Funds left mainly to regulated exchange or vasp (99.99%) across 900 outbound transfer(s) totalling $300,030,899.
Round trips
| Counterparty | Category | In | Out | Net |
|---|---|---|---|---|
| Binance 8 | Regulated exchange or VASP | $15,035,111 | $300,000,600 | $-284,965,489 |
Both sides are computed from observed transfers only, so the percentages describe funds this screen actually saw move. Modelled hops are excluded here deliberately: a source-of-funds statement should not rest on an inferred counterparty.
Typology indicators
Exposure says who the wallet touched; these say what it was doing. A clean counterparty set does not rule out structuring.
5 indicator(s) triggered, 3 not observable with the data available.
| Indicator | Family | Status | What was found |
|---|---|---|---|
| Mixing or anonymising service use | privacy | clear | No traced value connects to a mixing service. |
| CoinJoin-shaped joint spend | privacy | high | 12 transfers of near-identical value inside a 6-hour window, the shape of a collaborative mix rather than ordinary payments. |
| Peel chain | structuring | medium | Run of 4 successively smaller outbound transfers totalling $10,820, consistent with peeling a bulk balance into increments. |
| Deposit splitting below a reporting threshold | structuring | clear | No counterparty received 3 or more transfers in the band beneath the reporting threshold. |
| Rapid pass-through | structuring | high | 152 outbound transfer(s) left within an hour of funds arriving; median dwell is 15.20h across 900 sample(s). |
| Bridge and cross-chain swap routing | cross chain | clear | No bridge crossing appears in this screen. |
| Swap and protocol routing concentration | cross chain | clear | Protocol routing accounts for 0.0% of flow, within normal range. |
| Burst transaction scheduling | network | medium | 179 transfers were broadcast inside a 5-minute window, which is automation rather than a person transacting. |
| Mempool and fee irregularities | network | unavailable | Zero-confirmation transactions, fee spikes and confirmation depth are not exposed on the chains in this screen, so this indicator is reported as unavailable rather than inferred. Bitcoin mempool.space is the exception, and it was not read here. |
| Unhosted wallet interaction | custody | clear | Self-custodied counterparties account for 0.5% of directly transacted value; hosted services account for 99.5%. |
| Deviation from stated customer profile | profile | unavailable | No stated customer profile was supplied, so deviation from expected behaviour cannot be scored. The wallet's own history is still in the report. |
| Opening deposit inconsistent with stated identity | identity | unavailable | No stated identity (account opening date, new-customer flag, or declared income) was supplied, so an opening deposit cannot be judged inconsistent and a new-user full withdrawal cannot be scored. PEP/RCA name screening and source-of-wealth documents are not in this product. The institution's own identity stack still has to sit beside this screen. |
| Many-to-one inbound wallet shape | identity | medium | 137 distinct inbound wallets sent value inside a 24-hour window ($1,672,172). That is a many-to-one wallet shape, not a finding that they are several people or share an IP. |
Indicators are computed from the observed transfer set and the composed exposure view. They describe transaction shape, not intent: a triggered indicator is a reason to look, not a finding of wrongdoing. Profile deviation is scored only when the institution supplies a stated customer profile; without one the indicator is not observable rather than clear. Opening-deposit is scored only when account age or declared income is supplied. Many-to-one names inbound wallets, not people or a shared IP.
Sanctions and watchlist screening
No address in this screen matches a sanctions or watchlist entry, directly or through a traced hop.
Lists screened: EU, OFAC, UK-HMT, UN.
Forensic tracing
6 path(s) traced, 6 of them fully observed on chain; deepest is 1 hop(s).
Counterparty category
Regulated exchange or VASP
Unattributed address
Value flows left to right. Solid edges are observed transfers; dashed edges are modelled onward hops. Circle area is proportional to value, not to risk. Node colour is the counterparty category — see the key below the diagram. 1444 lower-value node(s) omitted for legibility.
Multi-hop transfer diagram
Fund flow by hop and first transfer time. Orange arrows cross chains; dashed arrows are onward or bridged hops.
Counterparty category
Regulated exchange or VASP
Cross-chain bridge
Token contract
Unattributed address
Transfer diagram: Source 3 → Source 2 → Hop 1 sources feed the subject; Hop 1 destinations → Hop 2 → Hop 3+ leave to the right. Nodes in a column are ordered by first transfer time. Circle area tracks USD. Solid arrows are observed; dashed arrows are onward or bridged hops. Orange arrows cross chains. Node colour is the counterparty category — see the key below the diagram. 1420 lower-value node(s) omitted for legibility. 42 arrow(s) · 28 multi-hop.
When the funds moved
90% of inbound USD arrived in a 4-hour window starting 21 Sep 2023 08:42 UTC ($15,035,111 of $16,707,890). The lower chart is activity on counterparties (hop 2+), not funds through this address.
Recent window: the newest 1742 transfers were read. This chart describes that window, not the wallet's lifetime.
Hop 1 category
Regulated exchange or VASP
Unattributed address
Traced paths
observed
Binance 8 · Regulated exchange or VASP
$300,000,600
1. Binance 8
· BNB Smart Chain
· observed
$300,000,600 traced across 1 hop(s): Binance 8, ending at a regulated exchange or vasp on BNB Smart Chain. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request.
observed
Binance 8 · Regulated exchange or VASP
$15,035,111
1. Binance 8
· Optimism
· observed
$15,035,111 traced across 1 hop(s): Binance 8, ending at a regulated exchange or vasp on Optimism. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request.
observed
Tether USD (USDT) · Merchant or payment processor
$0
1. Tether USD (USDT)
· Ethereum
· observed
$0 traced across 1 hop(s): Tether USD (USDT), ending at a merchant or payment processor on Ethereum. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request.
observed
Binance Hot Wallet 7 · Regulated exchange or VASP
$0
1. Binance Hot Wallet 7
· Ethereum
· observed
$0 traced across 1 hop(s): Binance Hot Wallet 7, ending at a regulated exchange or vasp on Ethereum. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request.
observed
Binance Hot Wallet 15 · Regulated exchange or VASP
$0
1. Binance Hot Wallet 15
· Ethereum
· observed
$0 traced across 1 hop(s): Binance Hot Wallet 15, ending at a regulated exchange or vasp on Ethereum. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request.
observed
Binance Hot Wallet · Regulated exchange or VASP
$0
1. Binance Hot Wallet
· BNB Smart Chain
· observed
$0 traced across 1 hop(s): Binance Hot Wallet, ending at a regulated exchange or vasp on BNB Smart Chain. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request.
6 path(s) from this wallet reach an identified endpoint, of which 6 are fully observed on chain. $300,000,600 traced across 1 hop(s): Binance 8, ending at a regulated exchange or vasp on BNB Smart Chain. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request. 6 path(s) terminate at a hosted service, which is where an investigation can realistically recover identity information or freeze funds.
Timeline
| When | Chain | Direction | Counterparty | Value |
|---|---|---|---|---|
| 2023-02-25 14:57 | Optimism | in | 0xe403a23ef3c63478916620fe4cbd51e292c45a30 | $0 |
| 2023-03-04 04:48 | Arbitrum | in | 0xbd6a96bbf9a5267896a65b11a564b31c84991b3e | $0 |
| 2023-04-11 06:26 | Arbitrum | in | 0xc38c40098a10b026119b86bffadebabe8c26a7ee | $256 |
| 2023-04-23 16:15 | Arbitrum | in | 0x6e5b93d5bcf893688f9149652cf64f152871dea9 | $0 |
| 2023-05-06 15:18 | Arbitrum | in | 0x092b1233159a7a156e869cbd700cf0b550d09ba7 | $0 |
| 2023-05-07 12:54 | Arbitrum | in | 0x13abed8b09b1895d778cd8f348ec69bdd52b1090 | $0 |
| 2023-05-07 13:29 | Arbitrum | in | 0x13abed8b09b1895d778cd8f348ec69bdd52b1090 | $0 |
| 2023-05-07 15:02 | Arbitrum | in | 0xe0b77e6822be907f3b557606d31a7d681af4a628 | $0 |
| 2023-05-07 18:29 | Arbitrum | in | 0x93373e854b5392a3e947b78f966d78351d214871 | $0 |
| 2023-05-07 23:49 | Arbitrum | in | 0x863acfdf3aa48e68743e58c9e3cd7203562cd1b2 | $0 |
| 2023-05-08 00:46 | Arbitrum | in | 0xba6bba18d0711676175ba1464991980d12c7585c | $0 |
| 2023-05-08 01:21 | Arbitrum | in | 0xba6bba18d0711676175ba1464991980d12c7585c | $0 |
| 2023-05-08 10:29 | Arbitrum | in | 0x63786d249c546ad4321ef22f0ab29bd382ac04e0 | $0 |
| 2023-05-08 19:28 | Arbitrum | in | 0xecba6c36a5308e86b9308696d681626779990cca | $0 |
| 2023-05-10 15:55 | Arbitrum | in | 0x3f1d12034e675e9db47765628eaf6372a6aa5838 | $0 |
| 2023-05-11 11:53 | Arbitrum | in | 0x0000000000000000000000000000000000000000 | $0 |
| 2023-05-11 11:53 | Arbitrum | in | 0xf8392aab3b21e6012b2f1d210975e3d0f07ec4ce | $0 |
| 2023-05-11 15:45 | Arbitrum | in | 0x76d16965ee29b6a4cb87f5c1a5fa30ea61ed78f8 | $0 |
| 2023-05-11 15:57 | Arbitrum | in | 0x76d16965ee29b6a4cb87f5c1a5fa30ea61ed78f8 | $0 |
| 2023-05-11 16:07 | Arbitrum | in | 0x76d16965ee29b6a4cb87f5c1a5fa30ea61ed78f8 | $0 |
Exhibits
| Address | Entity | Cluster | Attribution | Basis |
|---|---|---|---|---|
| 0xf977814e90da44bfa03b6295a0616a897441acec | Binance 8 Regulated exchange or VASP |
binance
3 address(es) |
public | observed on chain |
| 0xdac17f958d2ee523a2206206994597c13d831ec7 | Tether USD (USDT) Merchant or payment processor |
tether
0 address(es) |
public | observed on chain |
| 0xdfd5293d8e347dfe59e90efd55b2956a1343963d | Binance Hot Wallet 7 Regulated exchange or VASP |
binance
3 address(es) |
public | observed on chain |
| 0x21a31ee1afc51d94c2efccaa2092ad1028285549 | Binance Hot Wallet 15 Regulated exchange or VASP |
binance
3 address(es) |
public | observed on chain |
| 0xe2fc31f816a9b94326492132018c3aecc4a93ae1 | Binance Hot Wallet Regulated exchange or VASP |
binance
3 address(es) |
public | observed on chain |
Paths are assembled from the composed exposure view, walking each endpoint back to the subject. Direct hops are observed on chain. Onward and bridged hops are observed from a live indexer walk, or modelled from the seed when SAFESCORE_OFFLINE=1, and are marked as such on every hop. The transfer map lays those hops on chain lanes ordered by fund size and transfer timestamp.
Counterparty services
The same exposure means different things through a licensed custodian and a no-KYC venue, so each service a wallet touched is scored on its own controls.
2 directory-listed service(s) appear in this screen; 0 of them are high risk or prohibited, carrying 0.0% of traced value.
| Service | Jurisdiction | Licence | KYC | Layers | Value | Entity risk |
|---|---|---|---|---|---|---|
| Binance Holdings Ltd
Regulated exchange or VASP |
Malta | licensed | strict | directindirect | $315,072,280 | 2.1 low |
| iFinex Inc. (Bitfinex)
Regulated exchange or VASP |
British Virgin Islands | licensed | strict | indirect | $171,627 | 3.3 low |
Only counterparties with a directory entry are profiled here. Everything else is covered by category exposure.
Cross-chain picture
Ethereum ETH
Traced value$1,696,987
In / out$1,672,172 / $24,815
Transfers300
Balance$382,303,311
Sourcelive:alchemy
Base ETH
Traced value$5,484
In / out$0 / $5,484
Transfers300
Balance$25
Sourcelive:alchemy
Optimism ETH
Traced value$15,035,112
In / out$15,035,112 / $0
Transfers273
Balance$5
Sourcelive:alchemy
BNB Smart Chain BNB
Traced value$300,000,602
In / out$2 / $300,000,600
Transfers300
Balance$122
Sourcelive:alchemy
Polygon POL
Traced value$65
In / out$65 / $0
Transfers300
Balance$2
Sourcelive:alchemy
Arbitrum ETH
Traced value$539
In / out$539 / $0
Transfers269
Balance$497
Sourcelive:alchemy
Bridge crossings
Bridged value does not stop at the bridge contract, so Holistix follows it onto the chains the bridge connects and weights what it finds there at 70%.
No bridge crossings observed, so all exposure stays on the chains screened.
Counterparties
| Counterparty | Category | Chain | Layer | Jurisdiction | Visibility | Value | Weighted |
|---|---|---|---|---|---|---|---|
| Binance 8
PoR Binance historical
w=0.00
0xf977814e90da44bfa03b6295a0616a897441acec |
Regulated exchange or VASP
public
(1.00)
|
BNB Smart Chain | direct | MT | out of sight — exchange-internal | $300,000,600 | $300,000,600 |
| Binance 8
PoR Binance historical
w=0.00
0xf977814e90da44bfa03b6295a0616a897441acec |
Regulated exchange or VASP
public
(1.00)
|
Optimism | direct | MT | out of sight — exchange-internal | $15,035,111 | $15,035,111 |
| Unattributed address 0xc29b...56fe
0xc29bf263bded90b43585dafe876d4e9808eb56fe |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $350,000 | $350,000 |
| Unattributed address 0x2b54...7c6e
0x2b5431e034ace47318edfdd4f693224562c27c6e |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $310,808 | $310,808 |
| Unattributed address 0x0474...8de5
0x0474d431505951d9f4231af32b21ecd090058de5 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $205,814 | $205,814 |
| Unattributed address 0xed0c...4312
0xed0c6079229e2d407672a117c22b62064f4a4312 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xc29bf263bd… |
-- | traced on | $318,628 | $159,314 |
| Unattributed address 0xb93c...7361
0xb93c41300a8791c70018f6b17f5dd49966267361 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $149,547 | $149,547 |
| Unattributed address 0x12b0...903b
0x12b03c29b7d03ae56345e74544f1be053737903b |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $149,219 | $149,219 |
| Unattributed address 0xa294...6de1
0xa294cca691e4c83b1fc0c8d63d9a3eef0a196de1 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x2b5431e034… |
-- | traced on | $266,451 | $133,225 |
| THORChain_Router
0xd37bbe5744d730a1d98d8dc97c42f0ca46ad7146 |
Unattributed address
blockscout
(0.70)
|
Ethereum | indirect
via 0x0474d43150… |
-- | traced on | $205,814 | $102,907 |
| Unattributed address 0x2767...374a
0x2767b11afc19c8b2407a381843126d80c4de374a |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $75,129 | $75,129 |
| Unattributed address 0x637d...bd2e
0x637d155fa1abea137f58c961704a4d769da0bd2e |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xb93c41300a… |
-- | traced on | $146,502 | $73,251 |
| Unattributed address 0x7f2c...d86d
0x7f2cabce04f012df9ed86b6522a3903b6a66d86d |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $73,063 | $73,063 |
| Unattributed address 0x2432...6107
0x243202498ab0f22bbe866d1f7a6b74f359d96107 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xd37bbe5744… |
-- | traced on | $129,064 | $64,532 |
| Unattributed address 0xeb6a...e0a5
0xeb6a20957e1ef66e09ad9de2a7235c4ed866e0a5 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $61,740 | $61,740 |
| Bitfinex Hot Wallet
0x77134cbc06cb00b66f4c7e623d5fdbf6777635ec |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0xa294cca691… |
VG | out of sight — exchange-internal | $115,266 | $57,633 |
| Unattributed address 0xdb2c...a9cc
0xdb2c3f9ba995edb35156ff028edfa1c6d0d1a9cc |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $45,606 | $45,606 |
| Aave V3 aUSDT
0x23878914efe38d27c4d67ab83ed1b93a74d4086a |
Decentralised finance protocol
public
(1.00)
|
Ethereum | indirect
via 0xed0c607922… |
-- | traced on | $79,742 | $39,871 |
| Unattributed address 0x997a...2ba2
0x997a19bc9a964b14f4b7d709679746326c0e2ba2 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x2767b11afc… |
-- | traced on | $75,129 | $37,565 |
| Unattributed address 0xb91e...742a
0xb91ecb27c64ae77f8e78c905b6445b6fee9c742a |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x7f2cabce04… |
-- | traced on | $73,063 | $36,531 |
| Unattributed address 0xef8f...8a2b
0xef8fe2fa62d8725169b416d9724c720a026d8a2b |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x12b03c29b7… |
-- | traced on | $71,850 | $35,925 |
| Unattributed address 0x3a3b...c09b
0x3a3b1ca243f3ccedfe386e5493f1df18758ac09b |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x637d155fa1… |
-- | traced on | $64,674 | $32,337 |
| Unattributed address 0x07ae...0e67
0x07ae8551be970cb1cca11dd7a11f47ae82e70e67 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xeb6a20957e… |
-- | traced on | $61,740 | $30,870 |
| Unattributed address 0x7833...4601
0x7833341fff5bbbac5a0bd0ca28d6d9fa7d094601 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $29,982 | $29,982 |
| THORChain_Router
0xd37bbe5744d730a1d98d8dc97c42f0ca46ad7146 |
Unattributed address
blockscout
(0.70)
|
Ethereum | indirect
via 0xb91ecb27c6… |
-- | traced on | $56,533 | $28,267 |
| Bitfinex Hot Wallet
0x77134cbc06cb00b66f4c7e623d5fdbf6777635ec |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0xed0c607922… |
VG | out of sight — exchange-internal | $56,361 | $28,181 |
| Unattributed address 0x3730...7341
0x37305b1cd40574e4c5ce33f8e8306be057fd7341 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xed0c607922… |
-- | traced on | $56,348 | $28,174 |
| ERC1967Proxy
0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055 |
Unattributed address
blockscout
(0.70)
|
Ethereum | indirect
via 0xed0c607922… |
-- | traced on | $54,261 | $27,131 |
| THORChain_Router
0xd37bbe5744d730a1d98d8dc97c42f0ca46ad7146 |
Unattributed address
blockscout
(0.70)
|
Ethereum | indirect
via 0x997a19bc9a… |
-- | traced on | $51,898 | $25,949 |
| Unattributed address 0x5c8b...186c
0x5c8b31cc91b84cb554826ada05c9bda77f9e186c |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $23,806 | $23,806 |
| Unattributed address 0x4d7a...6a73
0x4d7a15dc073fa6ffd1c142ccde64f6f676166a73 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $23,649 | $23,649 |
| Unattributed address 0x477c...bf7d
0x477cd7932bcaf77c5b72679a96a0506de466bf7d |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xd37bbe5744… |
-- | traced on | $42,361 | $21,181 |
| Unattributed address 0x3c72...50d9
0x3c7201f61c491ae4772138fe150008d546c450d9 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $20,660 | $20,660 |
| Unattributed address 0x3b98...5e4f
PoR OKX current
w=0.78
0x3b98b9e9cb75c1cb1729aab8f09ced2936505e4f |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xa294cca691… |
-- | traced on | $40,325 | $20,162 |
| Unattributed address 0xef79...42d6
0xef7960eb0b732f70007f7c05daf6bb597aa742d6 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $19,778 | $19,778 |
| Unattributed address 0xede0...165d
0xede0740c34ec3919614eeee5796a8a001567165d |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x637d155fa1… |
-- | traced on | $38,751 | $19,375 |
| Unattributed address 0x95f4...7c43
0x95f48ba0f153a15492c8bf686e793523a9e97c43 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x12b03c29b7… |
-- | traced on | $38,536 | $19,268 |
| Unattributed address 0x3ee0...0d9b
0x3ee08fb83e912b9bc7658ca3d07fa9b7599d0d9b |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $19,162 | $19,162 |
| Unattributed address 0x7f60...b752
0x7f604d597c15b2e2f60dc645844f68b1d781b752 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xa294cca691… |
-- | traced on | $38,076 | $19,038 |
| Coinbase 10
0xa9d1e08c7793af67e9d92fe308d5697fb81d3e43 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x2b5431e034… |
US | out of sight — exchange-internal | $35,726 | $17,863 |
Transfer sample
| When | Chain | Direction | Counterparty | Amount | Value |
|---|---|---|---|---|---|
| 2026-09-13 | ethereum | out | 0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0x7fc66500c84a76ad7e9c93437bfc5ac33e2ddae9 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0x41f960c868109583611d38845de5c63d10529243 | 2.970021 | $0 |
| 2026-09-13 | ethereum | out | 0x914572c96cfaf7845027909524e8e2a4983f441b | 60.600000 | $61 |
| 2026-09-13 | ethereum | out | 0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0x6982508145454ce325ddbe47a25d4ec3d2311933 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0x5a62228fb76176bf7edf25bad4bd2d5a75665fa4 | 26176637.730000 | $0 |
| 2026-09-13 | ethereum | out | 0x4848f396952274870edde38ed792029e662c9926 | 30.000000 | $30 |
| 2026-09-13 | ethereum | out | 0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0x6033f7f88332b8db6ad452b7c6d5bb643990ae3f | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0xec745cbe0a2f6d5571b4d30fc5678836b8b9e11d | 1682.108499 | $1,682 |
| 2026-09-13 | ethereum | out | 0xd862cdcfeb856c32b3c4f7563f4811d8ddfd42e2 | 5059.750000 | $0 |
| 2026-09-13 | ethereum | in | 0x06fd4ba7973a0d39a91734bbc35bc2bcaa99e3b0 | 0.639720 | $0 |
| 2026-09-13 | ethereum | out | 0xbd157af982bca24f3fd24cf416133c719c8654ab | 0.015389 | $39 |
| 2026-09-13 | ethereum | out | 0x4fd35aa611164ce397cb93dbe7475f57e17ea689 | 0.868142 | $2,175 |
| 2026-09-09 | base | in | 0x82b28c96dc096c5ac48d1a7a047bf90e9753b8bd | 4902.920000 | $0 |
| 2026-09-09 | base | in | 0xaa7f03dee84967dce7c2bbc6a060ba5a9227ddf9 | 1.000000 | $0 |
| 2026-09-09 | base | in | 0x04008fbd52e0dae2e8ab9a94d57d9fb621bbe596 | 659.815280 | $0 |
| 2026-09-09 | base | in | 0x04008fbd52e0dae2e8ab9a94d57d9fb621bbe596 | 659.815280 | $0 |
| 2026-09-08 | base | in | 0x79339dc74099519a3255cc2000e0695125acbeef | 1832.240000 | $0 |
Risk level (1–5)
1
minimal
below 2.0
2
low
2.0 to 4.0
3
medium
4.0 to 6.0
4
high
6.0 to 8.0
5
prohibited
8.0 and above
Continuous score 1.02 falls in the level 1 band (below 2.0) under the balanced tolerance.
Accept. No material risk exposure identified.
Policy: Balanced, boundaries 2.0 / 4.0 / 6.0 / 8.0. Change the risk tolerance →
The 1-5 level is the institution's policy applied to the 0-10 score, not a second measurement. Re-grading under a different tolerance changes the level and never the score.
Rules triggered
0 of 19 enabled rules matched. Tune the rule set →
No rule matched, so the recommendation is to proceed.
Subject attribution
| Name | Binance Hot Wallet 14 |
|---|---|
| Category | Regulated exchange or VASP weight 1 |
| Jurisdiction | Malta (MT) |
| Source | public · confidence 1.00 |
| Cluster | binance
recorded on ETH, BTC
A named group in the attribution source, not a
co-spend cluster inferred from this wallet's transactions. |
Score history
| Screened | Score | Band |
|---|---|---|
| 2026-09-13 19:46 | 1.0 | minimal |
| 2026-09-12 17:32 | 1.0 | minimal |
| 2026-09-12 17:10 | 1.0 | minimal |
| 2026-08-29 15:29 | 2.0 | minimal |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:13 | 2.0 | low |
| 2026-08-29 15:12 | 2.0 | low |
Provenance
| ethereum | live:alchemy
https://eth-mainnet.g.alchemy.com/v2/… | native=122 token=178 internal=0 | unpriced_tokens=71 |
|---|---|
| base | live:alchemy
https://base-mainnet.g.alchemy.com/v2/… | native=2 token=298 internal=0 | unpriced_tokens=296 |
| optimism | live:alchemy
https://opt-mainnet.g.alchemy.com/v2/… | native=6 token=267 internal=0 | internal transfers unavailable on this network; unpriced_tokens=266 |
| bsc | live:alchemy
https://bnb-mainnet.g.alchemy.com/v2/… | native=7 token=293 internal=0 | internal transfers unavailable on this network; unpriced_tokens=288 |
| polygon | live:alchemy
https://polygon-mainnet.g.alchemy.com/v2/… | native=24 token=276 internal=0 | unpriced_tokens=231 |
| arbitrum | live:alchemy
https://arb-mainnet.g.alchemy.com/v2/… | native=23 token=246 internal=0 | internal transfers unavailable on this network; unpriced_tokens=237 |
| Label set | 2463 entities, 20 categories, 85 clusters |
Label sources
- Sanctions: 943 designated addresses from the US Treasury OFAC SDN list, published 08/28/2026.
- Token contracts: 927 identified from public token lists.
-
Cited public labels:
519 addresses from
34 source(s), each with a URL.
- Aave address book: V3 Ethereum (98 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Ethereum.json
- FBI/IC3 PSA: North Korea responsible for $1.5 billion Bybit hack (51 addresses) — https://www.ic3.gov/PSA/2025/PSA250226
- Aave address book: AaveV3Polygon (45 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Polygon.json
- Aave address book: V2 Ethereum (40 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV2Ethereum.json
- Aave address book: AaveV3Arbitrum (39 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Arbitrum.json
- Aave address book: AaveV3Optimism (31 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Optimism.json
- Aave address book: AaveV3Base (25 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Base.json
- Tornado Cash smart contracts (24 addresses) — https://docs.tornado.cash/general/tornado-cash-smart-contracts
- Bybit: wallet addresses ownership explained (21 addresses) — https://www.bybit.com/en/help-center/article/Bybit-Wallet-Addresses-Ownership-Explained
- Circle CCTP EVM contract addresses (20 addresses) — https://developers.circle.com/cctp/evm-smart-contracts
- Aave address book: AaveV3BNB (18 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3BNB.json
- Bitfinex: published public wallets (16 addresses) — https://github.com/bitfinexcom/pub/blob/main/wallets.txt
- Aave address book: AaveV2Polygon (16 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV2Polygon.json
- Aave address book: AaveV3EthereumLido (12 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3EthereumLido.json
- Crypto.com: Transparency First cold-wallet list (10 addresses) — https://crypto.com/en/company-news/transparency-first
- Uniswap v3 Arbitrum deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/arbitrum-deployments
- Uniswap v3 Optimism deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/optimism-deployments
- Uniswap v3 Polygon deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/polygon-deployments
- Lido deployed contracts (6 addresses) — https://docs.lido.fi/deployed-contracts/
- Uniswap v3 Base deployments (6 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/base-deployments
- Uniswap v3 Ethereum deployments (3 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/ethereum-deployments
- Chainalysis: Euler Finance flash loan attack (2 addresses) — https://www.chainalysis.com/blog/euler-finance-flash-loan-attack/
- Morpho deployed contracts (2 addresses) — https://docs.morpho.org/get-started/resources/addresses
- Compound III USDC Ethereum roots (2 addresses) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usdc/roots.json
- Aave address book: GhoEthereum (2 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/GhoEthereum.json
- Railgun privacy system contracts (1 address) — https://docs.railgun.org/wiki/learn/helpful-links
- Linea network contracts (1 address) — https://docs.linea.build/network/build/contracts
- Starknet L1-L2 messaging (1 address) — https://docs.starknet.io/documentation/architecture_and_concepts/Network_Architecture/l1-l2-messaging/
- Chainalysis: Wormhole hack February 2022 (1 address) — https://www.chainalysis.com/blog/wormhole-hack-february-2022/
- Compound III USDS Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usds/roots.json
- Compound III USDT Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usdt/roots.json
- Compound III WBTC Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/wbtc/roots.json
- Compound III WETH Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/weth/roots.json
- Compound III WSTETH Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/wsteth/roots.json
- Demonstration data: excluded — 118 synthetic entities were not scored.
Proof-of-reserves feed
- OKX: OKX Proof of Reserves · bibliography only
- OKX: OKX Proof of Reserves downloads · bibliography only
- OKX: OKX reserves zip — 11 Aug 2026 · snapshot 2026-08-11 · 211,793 addresses indexed
- Binance: Binance Proof of Reserves · bibliography only
- Binance: Binance Mazars PoR report — 7 Dec 2022 · snapshot 2022-11-22 · 19 addresses indexed
Screen window
- Up to 500 transfers across 3 indexer page(s) · default 2 hops · hop-2 budget 16 · hop-3 budget 12.
Artefact integrity
-
sha256+hmac · SHA-256
1c30665dcd894546339340f655f78a21ea5b7e23a5d976f0a01524fd88a47a29· sealed 2026-09-13T19:46:28+00:00 · HMAC present.
Informative
Notice / Disclaimer
Limits that apply to this artefact as a whole. Sources and hashes stay in provenance; this section is how to read them.
- Holistix scores combine public blockchain data with a seeded label set. Direct counterparties are observed on every screened chain. Onward and bridge hops are observed from a live indexer walk; they are modelled from the seed only when SAFESCORE_OFFLINE=1. Unlabelled counterparties stay unknown. Synthetic seed entities are demonstration labels, not live attribution. IP/node geolocation is not inferred.
- direct counterparties are observed from chain data on every screened chain. Hop-2 and hop-3 same-chain walks are observed from a live indexer when online (budgets split inbound/outbound so Source and Hop columns both receive inputs), and modelled from the label seed only when SAFESCORE_OFFLINE=1. The far side of a bridge is always modelled: the crossing into the bridge is observed, but no transfer links it to a specific address on the destination chain, so value is attributed across that bridge cluster's known addresses there. Modelled hops cannot carry sanctions or terrorism-financing categories. IP/node geolocation is not inferred from first-seen time.
- Token-contract labels name contracts, not wallet owners.
- Demonstration data was excluded — 118 synthetic entities were not scored.
- 211812 reserve-list address(es) from 2 ingested file(s). A hit is a snapshot claim, not a verification and not a host. Pages without an extractable address list stay in the bibliography only.
- OKX: Landing page. The address list is the reserves zip linked from the download table, not this page.
- OKX: Index of reserve and liability zips. Hits come from the zip.
- OKX: Bulk reserve list. Indexed locally; not a cited label.
- Binance: Live Merkle / Download All Address page. No public address file was extractable from this URL (WAF / account flow).
- Binance: Addresses printed in the appendix, claimed as of the 22 Nov 2022 reporting date. Snapshot, not a current named-wallet page.
- Activity beyond the stated screen window is not in the score.
- Recompute the sha256+hmac digest against the JSON export to confirm this copy matches what was stored.