Holistic wallet report
0x28C6c06298d514Db089934071355E5743bf21d60
HX-279d080056e2 · screened 2026-09-12 17:10:16+00:00 · 6 chain(s) in one call · data source: live
Allow
No rule triggered. Proceed.
Holistix scores this wallet 1.0 of 10 (minimal risk) from a single screen across 6 chain(s), with activity on Ethereum, Base, Optimism, BNB Smart Chain, Polygon, Arbitrum. $316,449,880 of traced value breaks down as $315,753,433 direct, $696,447 one hop away and $0 beyond 0 bridge crossing(s). The score is driven by regulated exchange or vasp (99% of the score), unattributed address (1% of the score).
No material risk exposure identified.
Level 1 of 5
· minimal
Balanced tolerance
Traced value
$316,449,880
Direct
$315,753,433
observed on chain
One hop away
$696,447
weighted 50%
Across bridges
$0
0 crossing(s)
Balance held
$330,855,230
Chains active
6 / 6
ethereum, base, optimism, bsc, polygon, arbitrum
What the score is made of
Each category contributes on the same 0–10 scale and the score is the quadratic mean of those contributions, so the share of the score each category owns is exact — the percentages below sum to 100%.
direct exposure
one hop away
across a bridge
Regulated exchange or VASP
weight 1
1.00 of 10
· 99% of score
Regulated exchange or VASP contributes 1.00 of 10: $315,186,443 directly and $125,577 one hop away on BNB Smart Chain ($300,000,600), Optimism ($15,185,843), Ethereum ($125,577). Weighted exposure is 99.730% of traced value, at the 80.000% saturation point for this category.
Binance 8
· bsc · $300,000,600
Binance 8
· optimism · $15,185,843
Bitget Hot Wallet
· ethereum · $56,782
Unattributed address
weight 2
0.12 of 10
· 1% of score
Unattributed address contributes 0.12 of 10: $566,990 directly and $570,870 one hop away on Ethereum ($1,128,275), Base ($8,973), Arbitrum ($544). Weighted exposure is 0.270% of traced value, below the 80.000% saturation point for this category.
Unattributed address 0x0f9f...3e37
· ethereum · $155,530
Unattributed address 0x4af2...c554
· ethereum · $68,000
Unattributed address 0x4c62...7ad1
· ethereum · $65,000
Cross-chain bridge
weight 3
0.00 of 10
· 0% of score
Cross-chain bridge carries no scoring weight in this model, so its $0 of flow does not affect the score.
BridgeToken
· base · $0
Decentralised finance protocol
weight 2
0.00 of 10
· 0% of score
Decentralised finance protocol carries no scoring weight in this model, so its $0 of flow does not affect the score.
UniswapV2Pair
· base · $0
Uniswap V2
· base · $0
UniswapV2Pair
· base · $0
Merchant or payment processor
weight 1
0.00 of 10
· 0% of score
Merchant or payment processor carries no scoring weight in this model, so its $0 of flow does not affect the score.
Tether USD (USDT)
· ethereum · $0
Token contract
weight 1
0.00 of 10
· 0% of score
Token contract carries no scoring weight in this model, so its $0 of flow does not affect the score.
Ondo Finance (ONDO)
· ethereum · $0
ARPA Chain
· ethereum · $0
Uniswap (UNI)
· ethereum · $0
Flow of funds
Source and destination are kept apart on purpose. Illicit money arriving is a source-of-funds question the institution must report; clean money leaving towards a risky party is a destination question it may still be able to prevent.
Source of funds
Total
$15,662,441
842 transfer(s)
Largest single
$15,185,843
mean $18,601
Risk-relevant
0.0%
$0
Counterparties
512
3.043% unattributed
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Cross-chain bridge | 0.0% | $0 | 1 | protocol | BridgeToken |
| Unattributed address | 3.043% | $476,599 | 694 | unhosted | Unattributed address 0x0f9f...3e37, Unattributed address 0x4af2...c554, Unattributed address 0x8106...e1a3, Unattributed address 0x9626...ef4d, Unattributed address 0x3c72...50d9 |
| Decentralised finance protocol | 0.0% | $0 | 90 | protocol | UniswapV2Pair, Uniswap V2, Aave V3 aWBTC, Aave V3 aWETH, Aave V3 aAAVE |
| Regulated exchange or VASP | 96.957% | $15,185,843 | 2 | hosted | Binance 8, Binance Hot Wallet |
| Token contract | 0.0% | $0 | 55 | unhosted | USD Coin (USDC), Pendle (PENDLE), Optimism (OP), Uniswap (UNI), Rocket Pool Protocol (RPL) |
Destination of funds
Total
$300,090,991
899 transfer(s)
Largest single
$300,000,600
mean $333,805
Risk-relevant
0.0%
$0
Counterparties
753
0.03% unattributed
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Unattributed address | 0.03% | $90,391 | 838 | unhosted | Unattributed address 0x4c62...7ad1, Unattributed address 0x31be...da34, Unattributed address 0x496f...acb7, Unattributed address 0x0364...5b1e, Unattributed address 0x5ab0...7aec |
| Regulated exchange or VASP | 99.97% | $300,000,600 | 7 | hosted | Binance 8, Binance Hot Wallet 7 |
| Merchant or payment processor | 0.0% | $0 | 42 | hosted | Tether USD (USDT) |
| Token contract | 0.0% | $0 | 12 | unhosted | Ondo Finance (ONDO), ARPA Chain, Uniswap (UNI), Shiba Inu (SHIB), World Liberty Financial (WLFI) |
Funds arrived mainly from regulated exchange or vasp (96.957%) across 842 inbound transfer(s) totalling $15,662,441. Funds left mainly to regulated exchange or vasp (99.97%) across 899 outbound transfer(s) totalling $300,090,991.
Round trips
| Counterparty | Category | In | Out | Net |
|---|---|---|---|---|
| Binance 8 | Regulated exchange or VASP | $15,185,843 | $300,000,600 | $-284,814,757 |
Both sides are computed from observed transfers only, so the percentages describe funds this screen actually saw move. Modelled hops are excluded here deliberately: a source-of-funds statement should not rest on an inferred counterparty.
Typology indicators
Exposure says who the wallet touched; these say what it was doing. A clean counterparty set does not rule out structuring.
5 indicator(s) triggered, 3 not observable with the data available.
| Indicator | Family | Status | What was found |
|---|---|---|---|
| Mixing or anonymising service use | privacy | clear | No traced value connects to a mixing service. |
| CoinJoin-shaped joint spend | privacy | high | 19 transfers of near-identical value inside a 6-hour window, the shape of a collaborative mix rather than ordinary payments. |
| Peel chain | structuring | medium | Run of 4 successively smaller outbound transfers totalling $1,139, consistent with peeling a bulk balance into increments. |
| Deposit splitting below a reporting threshold | structuring | clear | No counterparty received 3 or more transfers in the band beneath the reporting threshold. |
| Rapid pass-through | structuring | high | 151 outbound transfer(s) left within an hour of funds arriving; median dwell is 16.59h across 899 sample(s). |
| Bridge and cross-chain swap routing | cross chain | clear | No bridge crossing appears in this screen. |
| Swap and protocol routing concentration | cross chain | clear | Protocol routing accounts for 0.0% of flow, within normal range. |
| Burst transaction scheduling | network | medium | 230 transfers were broadcast inside a 5-minute window, which is automation rather than a person transacting. |
| Mempool and fee irregularities | network | unavailable | Zero-confirmation transactions, fee spikes and confirmation depth are not exposed on the chains in this screen, so this indicator is reported as unavailable rather than inferred. Bitcoin mempool.space is the exception, and it was not read here. |
| Unhosted wallet interaction | custody | clear | Self-custodied counterparties account for 0.2% of directly transacted value; hosted services account for 99.8%. |
| Deviation from stated customer profile | profile | unavailable | No stated customer profile was supplied, so deviation from expected behaviour cannot be scored. The wallet's own history is still in the report. |
| Opening deposit inconsistent with stated identity | identity | unavailable | No stated identity (account opening date, new-customer flag, or declared income) was supplied, so an opening deposit cannot be judged inconsistent and a new-user full withdrawal cannot be scored. PEP/RCA name screening and source-of-wealth documents are not in this product. The institution's own identity stack still has to sit beside this screen. |
| Many-to-one inbound wallet shape | identity | medium | 147 distinct inbound wallets sent value inside a 24-hour window ($475,987). That is a many-to-one wallet shape, not a finding that they are several people or share an IP. |
Indicators are computed from the observed transfer set and the composed exposure view. They describe transaction shape, not intent: a triggered indicator is a reason to look, not a finding of wrongdoing. Profile deviation is scored only when the institution supplies a stated customer profile; without one the indicator is not observable rather than clear. Opening-deposit is scored only when account age or declared income is supplied. Many-to-one names inbound wallets, not people or a shared IP.
Sanctions and watchlist screening
No address in this screen matches a sanctions or watchlist entry, directly or through a traced hop.
Lists screened: EU, OFAC, UK-HMT, UN.
Forensic tracing
5 path(s) traced, 5 of them fully observed on chain; deepest is 1 hop(s).
Counterparty category
Regulated exchange or VASP
Unattributed address
Value flows left to right. Solid edges are observed transfers; dashed edges are modelled onward hops. Circle area is proportional to value, not to risk. Node colour is the counterparty category — see the key below the diagram. 1416 lower-value node(s) omitted for legibility.
Multi-hop transfer diagram
Fund flow by hop and first transfer time. Orange arrows cross chains; dashed arrows are onward or bridged hops.
Counterparty category
Regulated exchange or VASP
Token contract
Unattributed address
Transfer diagram: Source 3 → Source 2 → Hop 1 sources feed the subject; Hop 1 destinations → Hop 2 → Hop 3+ leave to the right. Nodes in a column are ordered by first transfer time. Circle area tracks USD. Solid arrows are observed; dashed arrows are onward or bridged hops. Orange arrows cross chains. Node colour is the counterparty category — see the key below the diagram. 1392 lower-value node(s) omitted for legibility. 42 arrow(s) · 28 multi-hop.
When the funds moved
97% of inbound USD arrived in a 4-hour window starting 21 Sep 2023 08:42 UTC ($15,185,843 of $15,662,441).
Recent window: the newest 1741 transfers were read. This chart describes that window, not the wallet's lifetime.
Hop 1 category
Regulated exchange or VASP
Unattributed address
Traced paths
observed
Binance 8 · Regulated exchange or VASP
$300,000,600
1. Binance 8
· BNB Smart Chain
· observed
$300,000,600 traced across 1 hop(s): Binance 8, ending at a regulated exchange or vasp on BNB Smart Chain. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request.
observed
Binance 8 · Regulated exchange or VASP
$15,185,843
1. Binance 8
· Optimism
· observed
$15,185,843 traced across 1 hop(s): Binance 8, ending at a regulated exchange or vasp on Optimism. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request.
observed
Tether USD (USDT) · Merchant or payment processor
$0
1. Tether USD (USDT)
· Ethereum
· observed
$0 traced across 1 hop(s): Tether USD (USDT), ending at a merchant or payment processor on Ethereum. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request.
observed
Binance Hot Wallet 7 · Regulated exchange or VASP
$0
1. Binance Hot Wallet 7
· Ethereum
· observed
$0 traced across 1 hop(s): Binance Hot Wallet 7, ending at a regulated exchange or vasp on Ethereum. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request.
observed
Binance Hot Wallet · Regulated exchange or VASP
$0
1. Binance Hot Wallet
· BNB Smart Chain
· observed
$0 traced across 1 hop(s): Binance Hot Wallet, ending at a regulated exchange or vasp on BNB Smart Chain. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request.
5 path(s) from this wallet reach an identified endpoint, of which 5 are fully observed on chain. $300,000,600 traced across 1 hop(s): Binance 8, ending at a regulated exchange or vasp on BNB Smart Chain. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request. 5 path(s) terminate at a hosted service, which is where an investigation can realistically recover identity information or freeze funds.
Timeline
| When | Chain | Direction | Counterparty | Value |
|---|---|---|---|---|
| 2023-02-25 14:57 | Optimism | in | 0xe403a23ef3c63478916620fe4cbd51e292c45a30 | $0 |
| 2023-03-04 04:48 | Arbitrum | in | 0xbd6a96bbf9a5267896a65b11a564b31c84991b3e | $0 |
| 2023-04-11 06:26 | Arbitrum | in | 0xc38c40098a10b026119b86bffadebabe8c26a7ee | $258 |
| 2023-04-23 16:15 | Arbitrum | in | 0x6e5b93d5bcf893688f9149652cf64f152871dea9 | $0 |
| 2023-05-06 15:18 | Arbitrum | in | 0x092b1233159a7a156e869cbd700cf0b550d09ba7 | $0 |
| 2023-05-07 12:54 | Arbitrum | in | 0x13abed8b09b1895d778cd8f348ec69bdd52b1090 | $0 |
| 2023-05-07 13:29 | Arbitrum | in | 0x13abed8b09b1895d778cd8f348ec69bdd52b1090 | $0 |
| 2023-05-07 15:02 | Arbitrum | in | 0xe0b77e6822be907f3b557606d31a7d681af4a628 | $0 |
| 2023-05-07 18:29 | Arbitrum | in | 0x93373e854b5392a3e947b78f966d78351d214871 | $0 |
| 2023-05-07 23:49 | Arbitrum | in | 0x863acfdf3aa48e68743e58c9e3cd7203562cd1b2 | $0 |
| 2023-05-08 00:46 | Arbitrum | in | 0xba6bba18d0711676175ba1464991980d12c7585c | $0 |
| 2023-05-08 01:21 | Arbitrum | in | 0xba6bba18d0711676175ba1464991980d12c7585c | $0 |
| 2023-05-08 10:29 | Arbitrum | in | 0x63786d249c546ad4321ef22f0ab29bd382ac04e0 | $0 |
| 2023-05-08 19:28 | Arbitrum | in | 0xecba6c36a5308e86b9308696d681626779990cca | $0 |
| 2023-05-10 15:55 | Arbitrum | in | 0x3f1d12034e675e9db47765628eaf6372a6aa5838 | $0 |
| 2023-05-11 11:53 | Arbitrum | in | 0x0000000000000000000000000000000000000000 | $0 |
| 2023-05-11 11:53 | Arbitrum | in | 0xf8392aab3b21e6012b2f1d210975e3d0f07ec4ce | $0 |
| 2023-05-11 15:45 | Arbitrum | in | 0x76d16965ee29b6a4cb87f5c1a5fa30ea61ed78f8 | $0 |
| 2023-05-11 15:57 | Arbitrum | in | 0x76d16965ee29b6a4cb87f5c1a5fa30ea61ed78f8 | $0 |
| 2023-05-11 16:07 | Arbitrum | in | 0x76d16965ee29b6a4cb87f5c1a5fa30ea61ed78f8 | $0 |
Exhibits
| Address | Entity | Cluster | Attribution | Basis |
|---|---|---|---|---|
| 0xf977814e90da44bfa03b6295a0616a897441acec | Binance 8 Regulated exchange or VASP |
binance
3 address(es) |
public | observed on chain |
| 0xdac17f958d2ee523a2206206994597c13d831ec7 | Tether USD (USDT) Merchant or payment processor |
tether
0 address(es) |
public | observed on chain |
| 0xdfd5293d8e347dfe59e90efd55b2956a1343963d | Binance Hot Wallet 7 Regulated exchange or VASP |
binance
3 address(es) |
public | observed on chain |
| 0xe2fc31f816a9b94326492132018c3aecc4a93ae1 | Binance Hot Wallet Regulated exchange or VASP |
binance
3 address(es) |
public | observed on chain |
Paths are assembled from the composed exposure view, walking each endpoint back to the subject. Direct hops are observed on chain. Onward and bridged hops are observed from a live indexer walk, or modelled from the seed when SAFESCORE_OFFLINE=1, and are marked as such on every hop. The transfer map lays those hops on chain lanes ordered by fund size and transfer timestamp.
Counterparty services
The same exposure means different things through a licensed custodian and a no-KYC venue, so each service a wallet touched is scored on its own controls.
2 directory-listed service(s) appear in this screen; 0 of them are high risk or prohibited, carrying 0.0% of traced value.
| Service | Jurisdiction | Licence | KYC | Layers | Value | Entity risk |
|---|---|---|---|---|---|---|
| Binance Holdings Ltd
Regulated exchange or VASP |
Malta | licensed | strict | directindirect | $315,188,258 | 2.1 low |
| iFinex Inc. (Bitfinex)
Regulated exchange or VASP |
British Virgin Islands | licensed | strict | indirect | $45,925 | 3.3 low |
Only counterparties with a directory entry are profiled here. Everything else is covered by category exposure.
Cross-chain picture
Ethereum ETH
Traced value$560,894
In / out$475,987 / $84,907
Transfers299
Balance$330,854,574
Sourcelive:alchemy
Base ETH
Traced value$5,484
In / out$0 / $5,484
Transfers300
Balance$25
Sourcelive:alchemy
Optimism ETH
Traced value$15,185,843
In / out$15,185,843 / $0
Transfers273
Balance$5
Sourcelive:alchemy
BNB Smart Chain BNB
Traced value$300,000,603
In / out$3 / $300,000,600
Transfers300
Balance$122
Sourcelive:alchemy
Polygon POL
Traced value$65
In / out$65 / $0
Transfers300
Balance$2
Sourcelive:alchemy
Arbitrum ETH
Traced value$544
In / out$544 / $0
Transfers269
Balance$502
Sourcelive:alchemy
Bridge crossings
Bridged value does not stop at the bridge contract, so Holistix follows it onto the chains the bridge connects and weights what it finds there at 70%.
No bridge crossings observed, so all exposure stays on the chains screened.
Counterparties
| Counterparty | Category | Chain | Layer | Jurisdiction | Visibility | Value | Weighted |
|---|---|---|---|---|---|---|---|
| Binance 8
PoR Binance historical
w=0.00
0xf977814e90da44bfa03b6295a0616a897441acec |
Regulated exchange or VASP
public
(1.00)
|
BNB Smart Chain | direct | MT | out of sight — exchange-internal | $300,000,600 | $300,000,600 |
| Binance 8
PoR Binance historical
w=0.00
0xf977814e90da44bfa03b6295a0616a897441acec |
Regulated exchange or VASP
public
(1.00)
|
Optimism | direct | MT | out of sight — exchange-internal | $15,185,843 | $15,185,843 |
| Unattributed address 0x0f9f...3e37
0x0f9f949a30b97c42ace87aae6f24ee2607003e37 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $155,530 | $155,530 |
| Unattributed address 0x4af2...c554
0x4af2e22289286685d3cb26ebdb50a0cf6d3ac554 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $68,000 | $68,000 |
| Unattributed address 0x4c62...7ad1
0x4c62091f7f578444cf632b3927d3b8a812317ad1 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $65,000 | $65,000 |
| Unattributed address 0x8106...e1a3
0x8106ee6512b5473de5af71e97c308e181858e1a3 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $49,923 | $49,923 |
| Unattributed address 0x9626...ef4d
0x962601d21abfee71442aa9d9ebe5a7a4e4baef4d |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $34,000 | $34,000 |
| Unattributed address 0x6cbf...6661
0x6cbf52a3cc93a458d925deead320c4597ebb6661 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x4af2e22289… |
-- | traced on | $67,995 | $33,997 |
| Unattributed address 0x3c72...50d9
0x3c7201f61c491ae4772138fe150008d546c450d9 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $33,966 | $33,966 |
| Unattributed address 0x57fb...849f
0x57fbe09a5213cce89ebc4c7769296c4543dc849f |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x4c62091f7f… |
-- | traced on | $56,782 | $28,391 |
| Bitget Hot Wallet
0x1ab4973a48dc892cd9971ece8e01dcc7688f8f23 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x57fbe09a52… |
-- | out of sight — exchange-internal | $56,782 | $28,391 |
| Bitfinex Hot Wallet
0x77134cbc06cb00b66f4c7e623d5fdbf6777635ec |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x0f9f949a30… |
VG | out of sight — exchange-internal | $45,925 | $22,963 |
| Unattributed address 0x7e98...3a3b
0x7e986dcd36d96a85e61eca95a0fdb288ffa73a3b |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $21,404 | $21,404 |
| Unattributed address 0xa283...fa91
0xa283ae89753673f9763b659bee471e20d607fa91 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x6cbf52a3cc… |
-- | traced on | $31,009 | $15,505 |
| Unattributed address 0xa1ab...df09
0xa1abfa21f80ecf401bd41365adbb6fef6fefdf09 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x0f9f949a30… |
-- | traced on | $28,892 | $14,446 |
| Unattributed address 0x1481...db70
0x1481e58411608b2d628ef305b92b01cf4f83db70 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x3c7201f61c… |
-- | traced on | $27,986 | $13,993 |
| Unattributed address 0x1f3b...1714
0x1f3bad9f4467849b105697114a41b173d4091714 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $10,085 | $10,085 |
| Unattributed address 0x804d...2321
0x804d8cbcde4a7c607d3df32aab0ecf19b7a32321 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $9,888 | $9,888 |
| Unattributed address 0x6242...dc9f
0x62425cd6bdcb6bfe51558ea465b063486b70dc9f |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x0f9f949a30… |
-- | traced on | $19,090 | $9,545 |
| ERC1967Proxy
0x2744dfd9898f0babbc570cc594bbbc84b487a22b |
Unattributed address
blockscout
(0.70)
|
Ethereum | indirect
via 0x0f9f949a30… |
-- | traced on | $17,837 | $8,918 |
| Unattributed address 0x2b1f...3732
0x2b1f6507093ef4878a1c1258b0298b6ed0f63732 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x962601d21a… |
-- | traced on | $17,138 | $8,569 |
| Unattributed address 0x3dc5...ae0a
0x3dc55f13dbf3d0f4b2a41cbd715d104cbd18ae0a |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x2b1f650709… |
-- | traced on | $17,138 | $8,569 |
| Unattributed address 0x42a5...8a05
0x42a50693bcaef4127c673a630fbde159b8be8a05 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x962601d21a… |
-- | traced on | $16,860 | $8,430 |
| Unattributed address 0x420b...ae6c
0x420b6d132528ac9d54fbd43543ef76b3e3fcae6c |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $7,588 | $7,588 |
| Unattributed address 0xde0e...7d6c
0xde0e4baa56149d7d0fb0cc94e2c82a0fc3387d6c |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xa1abfa21f8… |
-- | traced on | $14,231 | $7,116 |
| Unattributed address 0x08b6...83f4
0x08b63d77c4e0937c0863b16cae6d4d5120d583f4 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x6cbf52a3cc… |
-- | traced on | $14,121 | $7,061 |
| Unattributed address 0xe55e...5427
0xe55e7834334bf5cb35eebde5e33411d922075427 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x8106ee6512… |
-- | traced on | $13,851 | $6,926 |
| Unattributed address 0x3b98...5e4f
PoR OKX current
w=0.78
0x3b98b9e9cb75c1cb1729aab8f09ced2936505e4f |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x0f9f949a30… |
-- | traced on | $12,693 | $6,346 |
| Unattributed address 0x385c...f646
0x385c4265e4fc0d97bcfff71b4d33869237fff646 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x8106ee6512… |
-- | traced on | $12,281 | $6,140 |
| Unattributed address 0xeb8d...86a1
0xeb8d34230c2fc8dc1a01823e61d07d86b0e586a1 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $6,000 | $6,000 |
| Unattributed address 0x5748...2d40
0x57483d84305357f22e293a55bb7ddc2798352d40 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x62425cd6bd… |
-- | traced on | $11,466 | $5,733 |
| Unattributed address 0x31be...da34
0x31beec3942e4faf3f253c86b51537387d16ada34 |
Unattributed address
unlabelled
(0.00)
|
Base | direct | -- | traced on | $5,484 | $5,484 |
| Unattributed address 0x496f...acb7
0x496f5ae676e9cec99457baaceffb765d15e3acb7 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $5,080 | $5,080 |
| Unattributed address 0x3c53...2a59
0x3c53dc26c6ea6f1f4350eb93f21e209bc7712a59 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $5,065 | $5,065 |
| Unattributed address 0x94e5...0f54
0x94e54b963444dbd78d22a3a197260daf6c320f54 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x1f3bad9f44… |
-- | traced on | $10,085 | $5,042 |
| Unattributed address 0x72f0...2085
0x72f00536053445faae122411e0838d699f392085 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $5,000 | $5,000 |
| Unattributed address 0xfcb9...ba93
0xfcb94fc1c17d99363c44fd3268abb5fa86a1ba93 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x804d8cbcde… |
-- | traced on | $9,882 | $4,941 |
| Unattributed address 0x0003...8d4e
PoR OKX current
w=0.78
0x0003b5aa5e30e97fcc596bb5d0f3a75255e08d4e |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x0f9f949a30… |
-- | traced on | $9,701 | $4,851 |
| Coinbase 10
0xa9d1e08c7793af67e9d92fe308d5697fb81d3e43 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x7e986dcd36… |
US | out of sight — exchange-internal | $9,524 | $4,762 |
| Unattributed address 0x50a6...c7f6
0x50a6e5d5852b0bdf533db2e118fbf4ac2442c7f6 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x1481e58411… |
-- | traced on | $9,382 | $4,691 |
Transfer sample
| When | Chain | Direction | Counterparty | Amount | Value |
|---|---|---|---|---|---|
| 2026-09-12 | ethereum | out | 0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0x4b521a594b002eb775d1dbcbbc83c639a5b94bac | 251.700000 | $252 |
| 2026-09-12 | ethereum | out | 0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0x6ea0395a3aa1a778ea0e7998808d61e5642a2a99 | 59.700000 | $60 |
| 2026-09-12 | ethereum | in | 0x06fd4ba7973a0d39a91734bbc35bc2bcaa99e3b0 | 3594.920157 | $0 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0x604fa28f8ade0a114f7d2682f4c76c7256d850dd | 0.176511 | $447 |
| 2026-09-12 | ethereum | out | 0xcdbf1a5e66ed2ae786e942d3d3d3ab03c44cd63e | 100.000000 | $100 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xf0f99433aa00d23ef912e4838481d2b335825f7d | 1344.268256 | $1,344 |
| 2026-09-12 | ethereum | out | 0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0x9be89d2a4cd102d8fecc6bf9da793be995c22541 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0x4c387f674007f26907788185efbc4a5421ad625c | 21.645510 | $22 |
| 2026-09-12 | ethereum | out | 0x36c367846b7ff2eddadba00a6da914c9c07c451a | 0.000282 | $0 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xfaba6f8e4a5e8ab82f62fe7c39859fa577269be3 | 0.000000 | $0 |
| 2026-09-09 | base | in | 0x82b28c96dc096c5ac48d1a7a047bf90e9753b8bd | 4902.920000 | $0 |
| 2026-09-09 | base | in | 0xaa7f03dee84967dce7c2bbc6a060ba5a9227ddf9 | 1.000000 | $0 |
| 2026-09-09 | base | in | 0x04008fbd52e0dae2e8ab9a94d57d9fb621bbe596 | 659.815280 | $0 |
| 2026-09-09 | base | in | 0x04008fbd52e0dae2e8ab9a94d57d9fb621bbe596 | 659.815280 | $0 |
| 2026-09-08 | base | in | 0x79339dc74099519a3255cc2000e0695125acbeef | 1832.240000 | $0 |
Risk level (1–5)
1
minimal
below 2.0
2
low
2.0 to 4.0
3
medium
4.0 to 6.0
4
high
6.0 to 8.0
5
prohibited
8.0 and above
Continuous score 1.01 falls in the level 1 band (below 2.0) under the balanced tolerance.
Accept. No material risk exposure identified.
Policy: Balanced, boundaries 2.0 / 4.0 / 6.0 / 8.0. Change the risk tolerance →
The 1-5 level is the institution's policy applied to the 0-10 score, not a second measurement. Re-grading under a different tolerance changes the level and never the score.
Rules triggered
0 of 19 enabled rules matched. Tune the rule set →
No rule matched, so the recommendation is to proceed.
Subject attribution
| Name | Binance Hot Wallet 14 |
|---|---|
| Category | Regulated exchange or VASP weight 1 |
| Jurisdiction | Malta (MT) |
| Source | public · confidence 1.00 |
| Cluster | binance
recorded on ETH, BTC
A named group in the attribution source, not a
co-spend cluster inferred from this wallet's transactions. |
Alerts from this screen
Material Change
Score moved -0.97 to 1.01 (minimal) since the previous screen; the material change threshold is 0.50.
Score history
| Screened | Score | Band |
|---|---|---|
| 2026-09-13 19:46 | 1.0 | minimal |
| 2026-09-12 17:32 | 1.0 | minimal |
| 2026-09-12 17:10 | 1.0 | minimal |
| 2026-08-29 15:29 | 2.0 | minimal |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:13 | 2.0 | low |
| 2026-08-29 15:12 | 2.0 | low |
Provenance
| ethereum | live:alchemy
https://eth-mainnet.g.alchemy.com/v2/… | native=106 token=193 internal=0 | unpriced_tokens=47 |
|---|---|
| base | live:alchemy
https://base-mainnet.g.alchemy.com/v2/… | native=2 token=298 internal=0 | unpriced_tokens=296 |
| optimism | live:alchemy
https://opt-mainnet.g.alchemy.com/v2/… | native=6 token=267 internal=0 | internal transfers unavailable on this network; unpriced_tokens=266 |
| bsc | live:alchemy
https://bnb-mainnet.g.alchemy.com/v2/… | native=7 token=293 internal=0 | internal transfers unavailable on this network; unpriced_tokens=287 |
| polygon | live:alchemy
https://polygon-mainnet.g.alchemy.com/v2/… | native=24 token=276 internal=0 | unpriced_tokens=231 |
| arbitrum | live:alchemy
https://arb-mainnet.g.alchemy.com/v2/… | native=23 token=246 internal=0 | internal transfers unavailable on this network; unpriced_tokens=237 |
| Label set | 2463 entities, 20 categories, 85 clusters |
Label sources
- Sanctions: 943 designated addresses from the US Treasury OFAC SDN list, published 08/28/2026.
- Token contracts: 927 identified from public token lists.
-
Cited public labels:
519 addresses from
34 source(s), each with a URL.
- Aave address book: V3 Ethereum (98 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Ethereum.json
- FBI/IC3 PSA: North Korea responsible for $1.5 billion Bybit hack (51 addresses) — https://www.ic3.gov/PSA/2025/PSA250226
- Aave address book: AaveV3Polygon (45 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Polygon.json
- Aave address book: V2 Ethereum (40 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV2Ethereum.json
- Aave address book: AaveV3Arbitrum (39 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Arbitrum.json
- Aave address book: AaveV3Optimism (31 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Optimism.json
- Aave address book: AaveV3Base (25 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Base.json
- Tornado Cash smart contracts (24 addresses) — https://docs.tornado.cash/general/tornado-cash-smart-contracts
- Bybit: wallet addresses ownership explained (21 addresses) — https://www.bybit.com/en/help-center/article/Bybit-Wallet-Addresses-Ownership-Explained
- Circle CCTP EVM contract addresses (20 addresses) — https://developers.circle.com/cctp/evm-smart-contracts
- Aave address book: AaveV3BNB (18 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3BNB.json
- Bitfinex: published public wallets (16 addresses) — https://github.com/bitfinexcom/pub/blob/main/wallets.txt
- Aave address book: AaveV2Polygon (16 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV2Polygon.json
- Aave address book: AaveV3EthereumLido (12 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3EthereumLido.json
- Crypto.com: Transparency First cold-wallet list (10 addresses) — https://crypto.com/en/company-news/transparency-first
- Uniswap v3 Arbitrum deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/arbitrum-deployments
- Uniswap v3 Optimism deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/optimism-deployments
- Uniswap v3 Polygon deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/polygon-deployments
- Lido deployed contracts (6 addresses) — https://docs.lido.fi/deployed-contracts/
- Uniswap v3 Base deployments (6 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/base-deployments
- Uniswap v3 Ethereum deployments (3 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/ethereum-deployments
- Chainalysis: Euler Finance flash loan attack (2 addresses) — https://www.chainalysis.com/blog/euler-finance-flash-loan-attack/
- Morpho deployed contracts (2 addresses) — https://docs.morpho.org/get-started/resources/addresses
- Compound III USDC Ethereum roots (2 addresses) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usdc/roots.json
- Aave address book: GhoEthereum (2 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/GhoEthereum.json
- Railgun privacy system contracts (1 address) — https://docs.railgun.org/wiki/learn/helpful-links
- Linea network contracts (1 address) — https://docs.linea.build/network/build/contracts
- Starknet L1-L2 messaging (1 address) — https://docs.starknet.io/documentation/architecture_and_concepts/Network_Architecture/l1-l2-messaging/
- Chainalysis: Wormhole hack February 2022 (1 address) — https://www.chainalysis.com/blog/wormhole-hack-february-2022/
- Compound III USDS Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usds/roots.json
- Compound III USDT Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usdt/roots.json
- Compound III WBTC Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/wbtc/roots.json
- Compound III WETH Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/weth/roots.json
- Compound III WSTETH Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/wsteth/roots.json
- Demonstration data: excluded — 118 synthetic entities were not scored.
Proof-of-reserves feed
- OKX: OKX Proof of Reserves · bibliography only
- OKX: OKX Proof of Reserves downloads · bibliography only
- OKX: OKX reserves zip — 11 Aug 2026 · snapshot 2026-08-11 · 211,793 addresses indexed
- Binance: Binance Proof of Reserves · bibliography only
- Binance: Binance Mazars PoR report — 7 Dec 2022 · snapshot 2022-11-22 · 19 addresses indexed
Screen window
- Up to 500 transfers across 3 indexer page(s) · default 2 hops · hop-2 budget 16 · hop-3 budget 12.
Artefact integrity
-
sha256+hmac · SHA-256
2106f86d7ca550623bdab22f4ead335239f3da2fe00d681925853b8d02c4dd8a· sealed 2026-09-12T17:10:17+00:00 · HMAC present.
Informative
Notice / Disclaimer
Limits that apply to this artefact as a whole. Sources and hashes stay in provenance; this section is how to read them.
- Holistix scores combine public blockchain data with a seeded label set. Direct counterparties are observed on every screened chain. Onward and bridge hops are observed from a live indexer walk; they are modelled from the seed only when SAFESCORE_OFFLINE=1. Unlabelled counterparties stay unknown. Synthetic seed entities are demonstration labels, not live attribution. IP/node geolocation is not inferred.
- direct counterparties are observed from chain data on every screened chain. Hop-2 and hop-3 same-chain walks are observed from a live indexer when online (budgets split inbound/outbound so Source and Hop columns both receive inputs), and modelled from the label seed only when SAFESCORE_OFFLINE=1. The far side of a bridge is always modelled: the crossing into the bridge is observed, but no transfer links it to a specific address on the destination chain, so value is attributed across that bridge cluster's known addresses there. Modelled hops cannot carry sanctions or terrorism-financing categories. IP/node geolocation is not inferred from first-seen time.
- Token-contract labels name contracts, not wallet owners.
- Demonstration data was excluded — 118 synthetic entities were not scored.
- 211812 reserve-list address(es) from 2 ingested file(s). A hit is a snapshot claim, not a verification and not a host. Pages without an extractable address list stay in the bibliography only.
- OKX: Landing page. The address list is the reserves zip linked from the download table, not this page.
- OKX: Index of reserve and liability zips. Hits come from the zip.
- OKX: Bulk reserve list. Indexed locally; not a cited label.
- Binance: Live Merkle / Download All Address page. No public address file was extractable from this URL (WAF / account flow).
- Binance: Addresses printed in the appendix, claimed as of the 22 Nov 2022 reporting date. Snapshot, not a current named-wallet page.
- Activity beyond the stated screen window is not in the score.
- Recompute the sha256+hmac digest against the JSON export to confirm this copy matches what was stored.