Holistic wallet report
0xcba4a0E2c27578A250e0fF2F80B47B9C9fd010A0
HX-58ea671eea0b · screened 2026-08-28 18:57:40+00:00 · 1 chain(s) in one call · data source: deterministic-fallback
Block
Block the transaction and escalate.
Holistix scores this wallet 10.0 of 10 (critical risk) from a single screen across 1 chain(s), with activity on Ethereum. $402,840 of traced value breaks down as $317,816 direct, $81,035 one hop away and $3,989 beyond 7 bridge crossing(s). The score is driven by sanctioned entity or designated address (26% of the score), darknet marketplace (21% of the score), ransomware operator or affiliate (21% of the score).
Do not transact. Direct or heavy illicit exposure.
Level 5 of 5
· prohibited
Balanced tolerance
Traced value
$402,840
Direct
$317,816
observed on chain
One hop away
$81,035
weighted 50%
Across bridges
$3,989
7 crossing(s)
Balance held
$0
Chains active
1 / 1
ethereum
What the score is made of
Each category contributes on the same 0–10 scale and the score is the quadratic mean of those contributions, so the share of the score each category owns is exact — the percentages below sum to 100%.
direct exposure
one hop away
across a bridge
Sanctioned entity or designated address
weight 10
10.00 of 10
· 26% of score
Sanctioned entity or designated address contributes 10.00 of 10: $48,143 directly on Ethereum ($48,143). Weighted exposure is 13.331% of traced value, at the 0.050% saturation point for this category.
Pyongyang Trade Office
· ethereum · $43,853
Minsk Logistics Sanctioned
· ethereum · $3,829
Sanctioned Bank of Tehran (ETH)
· ethereum · $461
Darknet marketplace
weight 9
9.00 of 10
· 21% of score
Darknet marketplace contributes 9.00 of 10: $23,472 directly on Ethereum ($23,472). Weighted exposure is 6.500% of traced value, at the 0.050% saturation point for this category.
Hydra Bazaar (ETH)
· ethereum · $23,345
Nightshade Market
· ethereum · $127
Ransomware operator or affiliate
weight 9
9.00 of 10
· 21% of score
Ransomware operator or affiliate contributes 9.00 of 10: $18,046 directly on Ethereum ($18,046). Weighted exposure is 4.997% of traced value, at the 0.050% saturation point for this category.
CryptoLock Affiliate 7
· ethereum · $18,046
Scam, phishing or investment fraud
weight 7
7.00 of 10
· 13% of score
Scam, phishing or investment fraud contributes 7.00 of 10: $29,504 directly and $53 one hop away and $490 across a bridge on Ethereum ($29,557), Base ($490). Weighted exposure is 8.272% of traced value, at the 1.000% saturation point for this category.
Bluepeak Romance Scam (ETH)
· ethereum · $29,386
SwiftYield Ponzi (BASE)
· base · $331
Pig Butchering Cluster 12 (ETH)
· ethereum · $118
Unlicensed peer-to-peer broker
weight 5
4.85 of 10
· 6% of score
Unlicensed peer-to-peer broker contributes 4.85 of 10: $16,972 directly on Ethereum ($16,972). Weighted exposure is 4.700% of traced value, below the 5.000% saturation point for this category.
LocalHands P2P (ETH)
· ethereum · $16,972
Mixing or anonymising service
weight 8
4.51 of 10
· 5% of score
Mixing or anonymising service contributes 4.51 of 10: $1,092 directly and $111 one hop away on Ethereum ($1,203). Weighted exposure is 0.318% of traced value, below the 1.000% saturation point for this category.
Tornado Cash 1 ETH Pool
· ethereum · $840
Tornado Cash 10 ETH Pool
· ethereum · $174
Tornado Cash 100 ETH Pool
· ethereum · $78
Gambling or betting service
weight 5
3.91 of 10
· 4% of score
Gambling or betting service contributes 3.91 of 10: $21,729 one hop away and $284 across a bridge on Ethereum ($21,729), Bitcoin ($284). Weighted exposure is 3.064% of traced value, below the 5.000% saturation point for this category.
RollHigh Casino (ETH)
· ethereum · $15,586
SportsEdge Book
· ethereum · $6,143
RollHigh Casino (BTC)
· bitcoin · $284
Proceeds of hacks and exploits
weight 8
2.15 of 10
· 1% of score
Proceeds of hacks and exploits contributes 2.15 of 10: $261 directly on Ethereum ($261). Weighted exposure is 0.072% of traced value, below the 1.000% saturation point for this category.
Vault9 Drainer (ETH)
· ethereum · $261
Fraud shop / stolen data vendor
weight 7
1.63 of 10
· 1% of score
Fraud shop / stolen data vendor contributes 1.63 of 10: $195 directly on Ethereum ($195). Weighted exposure is 0.054% of traced value, below the 1.000% saturation point for this category.
IdentityBazaar
· ethereum · $195
Exchange with weak or absent KYC
weight 6
1.58 of 10
· 1% of score
Exchange with weak or absent KYC contributes 1.58 of 10: $545 directly and $1,017 across a bridge on Optimism ($1,017), Ethereum ($545). Weighted exposure is 0.348% of traced value, below the 5.000% saturation point for this category.
Sunset Swap (OPTIMISM)
· optimism · $1,017
Bazaar Exchange (ETH)
· ethereum · $545
Cross-chain bridge
weight 3
0.88 of 10
· 0% of score
Cross-chain bridge contributes 0.88 of 10: $8,535 directly and $13,160 one hop away and $762 across a bridge on Ethereum ($21,696), Base ($762). Weighted exposure is 4.333% of traced value, below the 50.000% saturation point for this category.
Wormlink Bridge (ETH)
· ethereum · $3,913
Portal Cross-Chain (ETH)
· ethereum · $7,771
Base Bridge
· ethereum · $3,734
Regulated exchange or VASP
weight 1
0.66 of 10
· 0% of score
Regulated exchange or VASP contributes 0.66 of 10: $104,252 directly and $44,474 one hop away and $307 across a bridge on Ethereum ($148,726), Base ($307). Weighted exposure is 35.086% of traced value, below the 80.000% saturation point for this category.
Binance 2
· ethereum · $18,511
Binance 4
· ethereum · $18,221
Kraken 3
· ethereum · $12,938
Merchant or payment processor
weight 1
0.44 of 10
· 0% of score
Merchant or payment processor contributes 0.44 of 10: $56,415 directly and $425 one hop away and $391 across a bridge on Ethereum ($56,840), Base ($391). Weighted exposure is 15.757% of traced value, below the 80.000% saturation point for this category.
Tether USD (USDT)
· ethereum · $51,758
CloudHost Billing
· ethereum · $3,612
ShopChain Gateway (ETH)
· ethereum · $1,045
Decentralised finance protocol
weight 2
0.39 of 10
· 0% of score
Decentralised finance protocol contributes 0.39 of 10: $10,384 directly and $852 one hop away and $412 across a bridge on Ethereum ($11,236), Base ($381), Optimism ($30). Weighted exposure is 3.073% of traced value, below the 80.000% saturation point for this category.
SushiLike Router (ETH)
· ethereum · $10,384
LidoLike Staking
· ethereum · $554
SushiLike Router (BASE)
· base · $381
Mining pool
weight 1
0.03 of 10
· 0% of score
Mining pool contributes 0.03 of 10: $325 across a bridge on Bitcoin ($325). Weighted exposure is 0.063% of traced value, below the 80.000% saturation point for this category.
Iron Peak Mining Pool
· bitcoin · $325
Regulated custodian
weight 1
0.02 of 10
· 0% of score
Regulated custodian contributes 0.02 of 10: $232 one hop away on Ethereum ($232). Weighted exposure is 0.032% of traced value, below the 80.000% saturation point for this category.
Ethereum Foundation
· ethereum · $232
Flow of funds
Source and destination are kept apart on purpose. Illicit money arriving is a source-of-funds question the institution must report; clean money leaving towards a risky party is a destination question it may still be able to prevent.
Source of funds
Total
$123,423
28 transfer(s)
Largest single
$29,386
mean $4,408
Risk-relevant
63.932%
$78,907
Counterparties
25
0.0% unattributed
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Sanctioned entity or designated address risk-relevant | 5.179% | $6,392 | 3 | unhosted | Minsk Logistics Sanctioned, Pyongyang Trade Office, Sanctioned Bank of Tehran (ETH) |
| Darknet marketplace risk-relevant | 19.017% | $23,472 | 2 | unhosted | Hydra Bazaar (ETH), Nightshade Market |
| Ransomware operator or affiliate risk-relevant | 14.621% | $18,046 | 1 | unhosted | CryptoLock Affiliate 7 |
| Mixing or anonymising service risk-relevant | 0.864% | $1,066 | 3 | protocol | Tornado Cash 1 ETH Pool, Tornado Cash 10 ETH Pool, Tornado Cash 100 ETH Pool |
| Scam, phishing or investment fraud risk-relevant | 23.809% | $29,386 | 1 | unhosted | Bluepeak Romance Scam (ETH) |
| Exchange with weak or absent KYC risk-relevant | 0.442% | $545 | 1 | hosted | Bazaar Exchange (ETH) |
| Cross-chain bridge | 4.002% | $4,940 | 3 | protocol | Wormlink Bridge (ETH), Portal Cross-Chain (ETH) |
| Regulated exchange or VASP | 19.138% | $23,621 | 12 | hosted | Binance Hot Wallet 7, Bitget Hot Wallet, Coinbase 10, Kraken 3, Coinbase 3 |
| Merchant or payment processor | 12.927% | $15,955 | 2 | hosted | Tether USD (USDT), CloudHost Billing |
Destination of funds
Total
$194,393
27 transfer(s)
Largest single
$41,752
mean $7,200
Risk-relevant
30.517%
$59,322
Counterparties
23
0.0% unattributed
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Sanctioned entity or designated address risk-relevant | 21.478% | $41,752 | 1 | unhosted | Pyongyang Trade Office |
| Proceeds of hacks and exploits risk-relevant | 0.134% | $261 | 1 | unhosted | Vault9 Drainer (ETH) |
| Mixing or anonymising service risk-relevant | 0.013% | $26 | 1 | protocol | Tornado Cash 100 ETH Pool |
| Fraud shop / stolen data vendor risk-relevant | 0.1% | $195 | 1 | unhosted | IdentityBazaar |
| Scam, phishing or investment fraud risk-relevant | 0.061% | $118 | 1 | unhosted | Pig Butchering Cluster 12 (ETH) |
| Unlicensed peer-to-peer broker risk-relevant | 8.731% | $16,972 | 1 | brokered | LocalHands P2P (ETH) |
| Cross-chain bridge | 1.85% | $3,596 | 3 | protocol | Arbitrum Delayed Inbox, Optimism Gateway, Helix Bridge (ETH) |
| Decentralised finance protocol | 5.342% | $10,384 | 1 | protocol | SushiLike Router (ETH) |
| Regulated exchange or VASP | 41.478% | $80,631 | 14 | hosted | Binance 2, Binance 4, Binance Hot Wallet 14, Kraken 3, Binance Hot Wallet 8 |
| Merchant or payment processor | 20.814% | $40,460 | 3 | hosted | Tether USD (USDT), ShopChain Gateway (ETH) |
Funds arrived mainly from scam, phishing or investment fraud (23.809%) across 28 inbound transfer(s) totalling $123,423. Funds left mainly to regulated exchange or vasp (41.478%) across 27 outbound transfer(s) totalling $194,393. 63.932% of inbound value came from categories that carry material risk weight, which is a source-of-funds question for the institution. 30.517% of outbound value went to categories that carry material risk weight, which is a destination-of-funds question and may be preventable.
Round trips
| Counterparty | Category | In | Out | Net |
|---|---|---|---|---|
| Tether USD (USDT) | Merchant or payment processor | $12,343 | $39,415 | $-27,072 |
| Pyongyang Trade Office | Sanctioned entity or designated address | $2,101 | $41,752 | $-39,650 |
| Kraken 3 | Regulated exchange or VASP | $1,218 | $11,720 | $-10,502 |
Both sides are computed from observed transfers only, so the percentages describe funds this screen actually saw move. Modelled hops are excluded here deliberately: a source-of-funds statement should not rest on an inferred counterparty.
Typology indicators
Exposure says who the wallet touched; these say what it was doing. A clean counterparty set does not rule out structuring.
3 indicator(s) triggered, 1 not observable with the data available.
| Indicator | Family | Status | What was found |
|---|---|---|---|
| Mixing or anonymising service use | privacy | critical | $1,203 (0.299% of traced value) is connected to an anonymising service, of which $1,092 is a direct transfer. |
| CoinJoin-shaped joint spend | privacy | clear | No group of equal-value transfers large enough to indicate a collaborative mix. |
| Peel chain | structuring | medium | Run of 4 successively smaller outbound transfers totalling $26,648, consistent with peeling a bulk balance into increments. |
| Deposit splitting below a reporting threshold | structuring | clear | No counterparty received 3 or more transfers in the band beneath the reporting threshold. |
| Rapid pass-through | structuring | clear | Median dwell is 455.70h, which does not indicate pass-through layering. |
| Bridge and cross-chain swap routing | cross chain | medium | 7 bridge crossing(s) carried $3,989 (1.0% of traced value) onto base, bitcoin, optimism. Routing through a bridge breaks a single-chain trail, which is why the far side is followed here. |
| Swap and protocol routing concentration | cross chain | clear | Protocol routing accounts for 8.5% of flow, within normal range. |
| Burst transaction scheduling | network | clear | Busiest 5-minute window holds 1 transfer(s), consistent with ordinary activity. |
| Mempool and fee irregularities | network | unavailable | Zero-confirmation transactions, fee spikes and confirmation depth are not exposed by the keyless public indexers this system reads, so this indicator is reported as unavailable rather than inferred from confirmed history. |
| Unhosted wallet interaction | custody | clear | Self-custodied counterparties account for 37.6% of directly transacted value; hosted services account for 50.7%. |
Indicators are computed from the observed transfer set and the composed exposure view. They describe transaction shape, not intent: a triggered indicator is a reason to look, not a finding of wrongdoing.
Sanctions and watchlist screening
3 direct match(es),
0 indirect exposure(s)
3 direct match(es) against Minsk Logistics Sanctioned, Pyongyang Trade Office, Sanctioned Bank of Tehran (ETH). Dealing with a designated party is prohibited irrespective of value, so this is a block decision rather than a risk judgement. Lists matched: OFAC, EU, UK-HMT.
| Entity | Match | Severity | Lists | Value | Share |
|---|---|---|---|---|---|
| Pyongyang Trade Office
0xad50728fac17cfc108cafc7bf05c4f394159dcf0 |
direct counterparty | critical |
OFAC SDN
· DPRK4 · OFAC-77B68186CD
EU CFSP consolidated
· 2017/1509 · EU-B5141BA1BF
UK-HMT UK Sanctions List
· DPRK · UK-HMT-ACAC5AF28B
|
$43,853 | 10.886% |
| Minsk Logistics Sanctioned
0x20ebede3c495abeb063c09ad15bd893c8c9e6260 |
direct counterparty | critical |
OFAC SDN
· BELARUS-EO14038 · OFAC-7AF2FA6AD9
UK-HMT UK Sanctions List
· BLR · UK-HMT-E2C167E2FA
|
$3,829 | 0.951% |
| Sanctioned Bank of Tehran (ETH)
0x54ed380e73faf34df5ff5692e0d7345045411840 |
direct counterparty | critical |
OFAC SDN
· IRAN-EO13846 · OFAC-A6D3F70AE3
UK-HMT UK Sanctions List
· IRN · UK-HMT-41612F6317
|
$461 | 0.114% |
Addresses are matched against the seeded watchlist by cluster, so a designation applies to every address attributed to the same entity. Direct matches are observed on chain; indirect and bridged findings include modelled hops and must be confirmed before they are relied on.
Only the Tornado Cash and Lazarus clusters reflect real designations. Every other listing is fabricated for demonstration and must never be used as a sanctions determination.
Counterparty services
The same exposure means different things through a licensed custodian and a no-KYC venue, so each service a wallet touched is scored on its own controls.
21 directory-listed service(s) appear in this screen; 4 of them are high risk or prohibited, carrying 8.54% of traced value.
| Service | Jurisdiction | Licence | KYC | Layers | Value | Entity risk |
|---|---|---|---|---|---|---|
| Binance Holdings Ltd
Regulated exchange or VASP |
Malta | licensed | strict | directindirect | $76,334 | 2.1 low |
| LocalHands P2P
Unlicensed peer-to-peer broker |
Myanmar | unlicensed | none | direct | $16,972 | 7.4 high |
| RollHigh Casino
Gambling or betting service |
Curacao | licensed | weak | bridgeindirect | $15,870 | 6.0 high |
| Payward, Inc. (Kraken)
Regulated exchange or VASP |
United States | licensed | strict | direct | $12,938 | 1.2 minimal |
| Portal Cross-Chain
Cross-chain bridge |
Singapore | out_of_scope | none | bridgedirectindirect | $9,180 | 3.2 low |
| SportsEdge Book
Gambling or betting service |
Malta | licensed | weak | indirect | $6,143 | 5.6 medium |
| Wormlink Bridge
Cross-chain bridge |
Unattributed | out_of_scope | none | directindirect | $3,947 | 3.2 low |
| Base Bridge
Cross-chain bridge |
Unattributed | out_of_scope | none | indirect | $3,760 | 3.5 low |
| CloudHost Billing
Merchant or payment processor |
United States | registered | standard | direct | $3,612 | 5.8 medium |
| Optimism Gateway
Cross-chain bridge |
Unattributed | out_of_scope | none | direct | $1,679 | 3.6 low |
| ShopChain Gateway
Merchant or payment processor |
Germany | registered | standard | bridgedirect | $1,437 | 5.4 medium |
| Vilnius Digital UAB
Regulated exchange or VASP |
Lithuania | licensed | strict | direct | $1,248 | 2.8 low |
Only counterparties with a directory entry are profiled here. Everything else is covered by category exposure.
Cross-chain picture
Transfer diagram
Multi-hop fund flow across screened chains. Columns are hops; nodes in a column are ordered by first transfer time; arrow thickness tracks USD.
Counterparty category
Darknet marketplace
Sanctioned entity or designated address
Gambling or betting service
Unlicensed peer-to-peer broker
Merchant or payment processor
Regulated exchange or VASP
Cross-chain bridge
Arrows
Observed transfer
Modelled or onward hop
Transfer diagram: Source 3 → Source 2 → Hop 1 sources feed the subject; Hop 1 destinations → Hop 2 → Hop 3+ leave to the right. Nodes in a column are ordered by first transfer time. Circle area tracks USD. Solid arrows are observed; dashed arrows are onward or bridged hops. Orange arrows cross chains. Node colour is the counterparty category — see the key below the diagram. 60 lower-value node(s) omitted for legibility. 28 arrow(s) · 14 multi-hop.
Ethereum ETH
Traced value$317,816
In / out$123,423 / $194,393
Transfers55
Balance$0
Sourcedeterministic-fallback
Bridge crossings
Bridged value does not stop at the bridge contract, so Holistix follows it onto the chains the bridge connects and weights what it finds there at 70%.
| Crossing | Bridge | Value bridged | Far-side counterparties |
|---|---|---|---|
| Ethereum → Base | Arbitrum Delayed Inbox 0x4Dbd4fc535Ac27206064B68FfCf827b0A60BAB3f |
$916 |
SwiftYield Ponzi (BASE) · $331
SushiLike Router (BASE) · $381
|
| Ethereum → Base | Helix Bridge (ETH) 0xe862edce9785d3a5ba619807dfec5546e9a38a9c |
$114 |
ShopChain Gateway (BASE) · $54
Wallet Drainer as a Service (BASE) · $29
|
| Ethereum → Optimism | Helix Bridge (ETH) 0xe862edce9785d3a5ba619807dfec5546e9a38a9c |
$101 |
GMXLike Perps (OPTIMISM) · $30
|
| Ethereum → Base | Optimism Gateway 0x99C9fc46f92E8a1c0deC1b1747d010903E884bE1 |
$911 |
Anyswap Relay (BASE) · $505
Portal Cross-Chain (BASE) · $257
|
| Ethereum → Optimism | Wormlink Bridge (ETH) 0x1c66da8512aaa55e1232d2be61d347207705f03d |
$1,715 |
Sunset Swap (OPTIMISM) · $1,017
|
| Ethereum → Bitcoin | Portal Cross-Chain (ETH) 0xee2b6e1d476c5d3f3660a09263acd65165fb2945 |
$527 |
RollHigh Casino (BTC) · $284
Iron Peak Mining Pool · $325
|
| Ethereum → Base | Portal Cross-Chain (ETH) 0xee2b6e1d476c5d3f3660a09263acd65165fb2945 |
$515 |
ShopChain Gateway (BASE) · $338
SwiftYield Ponzi (BASE) · $131
Marina Bay Digital (BASE) · $307
|
Counterparties
| Counterparty | Category | Chain | Layer | Jurisdiction | Visibility | Value | Weighted |
|---|---|---|---|---|---|---|---|
| Tether USD (USDT)
0xdAC17F958D2ee523a2206206994597C13D831ec7 |
Merchant or payment processor
public
(1.00)
|
Ethereum | direct | US | traced on | $51,758 | $51,758 |
| Pyongyang Trade Office
0xad50728fac17cfc108cafc7bf05c4f394159dcf0 |
Sanctioned entity or designated address
synthetic
(0.90)
|
Ethereum | direct | KP | traced on | $43,853 | $43,853 |
| Bluepeak Romance Scam (ETH)
0x31634a449e1d7b0b8871a4a57d5049c151b79072 |
Scam, phishing or investment fraud
synthetic
(0.90)
|
Ethereum | direct | MM | traced on | $29,386 | $29,386 |
| Hydra Bazaar (ETH)
0x31d56b4f013513e4e1e0406d01077fbac6750242 |
Darknet marketplace
synthetic
(0.90)
|
Ethereum | direct | RU | traced on | $23,345 | $23,345 |
| Binance 2
0xD551234Ae421e3BCBA99A0Da6d736074f22192FF |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | MT | traced on | $18,511 | $18,511 |
| Binance 4
0x0681d8Db095565FE8A346fA0277bFfdE9C0eDBBF |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | MT | traced on | $18,221 | $18,221 |
| CryptoLock Affiliate 7
0x9f91938ca033ebaafcbc48aea689b472b9633879 |
Ransomware operator or affiliate
synthetic
(0.90)
|
Ethereum | direct | BY | traced on | $18,046 | $18,046 |
| LocalHands P2P (ETH)
0x2bdc25d6712efd5e85a1d0dcbfe2555a8ec5c017 |
Unlicensed peer-to-peer broker
synthetic
(0.90)
|
Ethereum | direct | MM | traced on | $16,972 | $16,972 |
| Kraken 3
0xE853c56864A2ebe4576a807D26Fdc4A0adA51919 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | US | traced on | $12,938 | $12,938 |
| Binance Hot Wallet 14
0x28C6c06298d514Db089934071355E5743bf21d60 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | MT | traced on | $12,389 | $12,389 |
| SushiLike Router (ETH)
0x96d5de8718b60e4e8f369ece59fa06851c311b65 |
Decentralised finance protocol
synthetic
(0.90)
|
Ethereum | direct | -- | traced on | $10,384 | $10,384 |
| Binance Hot Wallet 7
0xDFd5293D8e347dFe59E90eFd55b2956a1343963d |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | MT | traced on | $9,619 | $9,619 |
| Bitget Hot Wallet
0x1AB4973a48dc892Cd9971ECE8e01DcC7688f8F23 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | -- | traced on | $9,532 | $9,532 |
| RollHigh Casino (ETH)
0xfc57ee072f596a736c8017fbfc30bb830468e939 |
Gambling or betting service
synthetic
(0.90)
|
Ethereum | indirect
via 0xad50728fac… |
CW | traced on | $15,586 | $7,793 |
| Binance Hot Wallet 8
0x56Eddb7aa87536c09CCc2793473599fD21A8b17F |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | MT | traced on | $7,039 | $7,039 |
| Crypto.com Hot Wallet
0xcFfAd3200574698b78f32232aa9D63eABD290703 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x31d56b4f01… |
-- | traced on | $12,802 | $6,401 |
| Bitget Hot Wallet
0x1AB4973a48dc892Cd9971ECE8e01DcC7688f8F23 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0xad50728fac… |
-- | traced on | $12,125 | $6,063 |
| Bitstamp Hot Wallet
0x1522900b6daFac587d499a862861C0869Be6e428 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | -- | traced on | $5,230 | $5,230 |
| Wormlink Bridge (ETH)
0x1c66da8512aaa55e1232d2be61d347207705f03d |
Cross-chain bridge
synthetic
(0.90)
|
Ethereum | direct | -- | traced on | $3,913 | $3,913 |
| Portal Cross-Chain (ETH)
0xee2b6e1d476c5d3f3660a09263acd65165fb2945 |
Cross-chain bridge
synthetic
(0.90)
|
Ethereum | indirect
via 0x2bdc25d671… |
SG | traced on | $7,771 | $3,885 |
| Binance 3
0x564286362092D8e7936f0549571a80374AddfA4B |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x31634a449e… |
MT | traced on | $7,760 | $3,880 |
| Coinbase 6
0xA090e606E30bD747d4E6245a1517EbE430F0057e |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | US | traced on | $3,853 | $3,853 |
| Minsk Logistics Sanctioned
0x20ebede3c495abeb063c09ad15bd893c8c9e6260 |
Sanctioned entity or designated address
synthetic
(0.90)
|
Ethereum | direct | BY | traced on | $3,829 | $3,829 |
| CloudHost Billing
0xd89f75a71eff5b28169044265ab6e8c64e22c477 |
Merchant or payment processor
synthetic
(0.90)
|
Ethereum | direct | US | traced on | $3,612 | $3,612 |
| Bitget Hot Wallet
0x1AB4973a48dc892Cd9971ECE8e01DcC7688f8F23 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x9f91938ca0… |
-- | traced on | $7,127 | $3,563 |
| SportsEdge Book
0xf0a31f7d1c193fee9b5937c6d4c3d0716c9de775 |
Gambling or betting service
synthetic
(0.90)
|
Ethereum | indirect
via 0x31634a449e… |
MT | traced on | $6,143 | $3,071 |
| Coinbase 10
0xA9D1e08C7793af67e9d92fe308d5697FB81d3E43 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | US | traced on | $2,368 | $2,368 |
| Base Bridge
0x3154Cf16ccdb4C6d922629664174b904d80F2C35 |
Cross-chain bridge
public
(1.00)
|
Ethereum | indirect
via 0x9f91938ca0… |
-- | traced on | $3,734 | $1,867 |
| Arbitrum Delayed Inbox
0x4Dbd4fc535Ac27206064B68FfCf827b0A60BAB3f |
Cross-chain bridge
public
(1.00)
|
Ethereum | direct | -- | traced on | $1,729 | $1,729 |
| Optimism Gateway
0x99C9fc46f92E8a1c0deC1b1747d010903E884bE1 |
Cross-chain bridge
public
(1.00)
|
Ethereum | direct | -- | traced on | $1,679 | $1,679 |
| Vilnius Digital UAB (ETH)
0x8a9e6bcbda4a89fef93a76cb71645f26d09ffa69 |
Regulated exchange or VASP
synthetic
(0.90)
|
Ethereum | direct | LT | traced on | $1,248 | $1,248 |
| Gate.io Hot Wallet
0x0D0707963952f2fBA59dD06f2b425ace40b492Fe |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | KY | traced on | $1,174 | $1,174 |
| Crypto.com Hot Wallet
0xcFfAd3200574698b78f32232aa9D63eABD290703 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | -- | traced on | $1,073 | $1,073 |
| ShopChain Gateway (ETH)
0xd8025335f629b4e7c8ba534864887bf543dc6db3 |
Merchant or payment processor
synthetic
(0.90)
|
Ethereum | direct | DE | traced on | $1,045 | $1,045 |
| Portal Cross-Chain (ETH)
0xee2b6e1d476c5d3f3660a09263acd65165fb2945 |
Cross-chain bridge
synthetic
(0.90)
|
Ethereum | direct | SG | traced on | $1,027 | $1,027 |
| Tornado Cash 1 ETH Pool
0x47CE0C6eD5B0Ce3d3A51fdb1C52DC66a7c3C2936 |
Mixing or anonymising service
public
(1.00)
|
Ethereum | direct | -- | traced on | $840 | $840 |
| Coinbase 3
0xddfAbCdc4D8FfC6d5beaf154f18B778f892A0740 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | US | traced on | $793 | $793 |
| Sunset Swap (OPTIMISM)
0xe819abad0bb6f7fc3b66ca788ca9cfc27c9adf87 |
Exchange with weak or absent KYC
synthetic
(0.90)
|
Optimism | bridge
via 0x1c66da8512… |
PA | traced on | $1,017 | $712 |
| Binance 1
0x3f5CE5FBFe3E9af3971dD833D26bA9b5C936f0bE |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x20ebede3c4… |
MT | traced on | $1,403 | $701 |
| Coinbase 4
0x71660c4005BA85c37ccec55d0C4493E66Fe775d3 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x1c66da8512… |
US | traced on | $1,285 | $643 |
Transfer sample
| When | Chain | Direction | Counterparty | Amount | Value |
|---|---|---|---|---|---|
| 2026-08-27 | ethereum | in | 0x3f5CE5FBFe3E9af3971dD833D26bA9b5C936f0bE | 0.006909 | $17 |
| 2026-08-24 | ethereum | out | 0x7008cefe86e049fc810477a31280b5795ddff7a4 | 0.077898 | $195 |
| 2026-08-03 | ethereum | out | 0x8a9e6bcbda4a89fef93a76cb71645f26d09ffa69 | 0.258915 | $647 |
| 2026-07-30 | ethereum | in | 0x31634a449e1d7b0b8871a4a57d5049c151b79072 | 11.754446 | $29,386 |
| 2026-07-10 | ethereum | in | 0x6cc5f688a315f3dc28a7781717a9a798a59fda7b | 0.004404 | $11 |
| 2026-07-06 | ethereum | out | 0xA160cdAB225685dA1d56aa342Ad8841c3b53f291 | 0.010240 | $26 |
| 2026-07-04 | ethereum | out | 0xdAC17F958D2ee523a2206206994597C13D831ec7 | 15.766081 | $39,415 |
| 2026-07-02 | ethereum | in | 0x1AB4973a48dc892Cd9971ECE8e01DcC7688f8F23 | 3.812763 | $9,532 |
| 2026-06-29 | ethereum | out | 0x4Dbd4fc535Ac27206064B68FfCf827b0A60BAB3f | 0.691500 | $1,729 |
| 2026-06-25 | ethereum | out | 0xddfAbCdc4D8FfC6d5beaf154f18B778f892A0740 | 0.073797 | $184 |
| 2026-06-11 | ethereum | out | 0x28C6c06298d514Db089934071355E5743bf21d60 | 4.955618 | $12,389 |
| 2026-05-21 | ethereum | in | 0x060deacd219b774f0db28ccb33499f6566a991a8 | 0.218196 | $545 |
| 2026-04-14 | ethereum | out | 0x0681d8Db095565FE8A346fA0277bFfdE9C0eDBBF | 7.288321 | $18,221 |
| 2026-03-22 | ethereum | in | 0x4E9aA1FB3F77BFAe8406a102E75609f970908f81 | 0.014238 | $36 |
| 2026-03-15 | ethereum | out | 0x58745a17ae3a237615df23a19e1ad4628af8e4c2 | 0.047074 | $118 |
| 2026-03-10 | ethereum | in | 0x910Cbd523D972eb0a6f4cAe4618aD62622b39DbF | 0.069530 | $174 |
| 2026-02-13 | ethereum | in | 0xDFd5293D8e347dFe59E90eFd55b2956a1343963d | 3.847551 | $9,619 |
| 2026-02-12 | ethereum | out | 0xe862edce9785d3a5ba619807dfec5546e9a38a9c | 0.075019 | $188 |
| 2026-02-07 | ethereum | out | 0x1522900b6daFac587d499a862861C0869Be6e428 | 2.087978 | $5,220 |
| 2026-02-06 | ethereum | out | 0x96d5de8718b60e4e8f369ece59fa06851c311b65 | 4.153575 | $10,384 |
Risk level (1–5)
1
minimal
below 2.0
2
low
2.0 to 4.0
3
medium
4.0 to 6.0
4
high
6.0 to 8.0
5
prohibited
8.0 and above
Continuous score 10.00 falls in the level 5 band (8.0 and above) under the balanced tolerance.
Reject. Exposure is outside any acceptable tolerance. Level 5 is above this institution's 3 auto-accept limit, so a human has to sign this off.
Policy: Balanced, boundaries 2.0 / 4.0 / 6.0 / 8.0. Change the risk tolerance →
The 1-5 level is the institution's policy applied to the 0-10 score, not a second measurement. Re-grading under a different tolerance changes the level and never the score.
Rules triggered
10 of 19 enabled rules matched. Tune the rule set →
block
Any sanctions exposure
$48,143
(11.951% of traced value, any
layer) against a 0.00% threshold.
Sanctions liability does not scale with the amount.
block
Direct sanctions list match
3 direct sanctions
match(es) against OFAC, EU, UK-HMT.
A direct match is a prohibited dealing, not a risk rating.
block
Direct ransomware exposure
$18,046
(4.480% of traced value, direct
layer) against a 0.00% threshold.
block
Direct darknet market exposure
$23,472
(5.827% of traced value, direct
layer) against a 0.00% threshold.
block
Score of 8.0 or above
Score 10.00 reached the
8.0 floor.
review
Any mixer exposure
$1,203
(0.299% of traced value, any
layer) against a 0.00% threshold.
review
Scam exposure above 2%
$30,047
(7.459% of traced value, any
layer) against a 2.00% threshold.
review
Score of 6.0 or above
Score 10.00 reached the
6.0 floor.
review
Deposit above $10,000 with indirect darknet exposure above 2%
All 2 conditions were met:
- Inbound flow of $123,423 across 28 transfer(s), largest $29,386, against a $10,000 single-transfer floor.
- $23,472 (5.827% of traced value, any layer) against a 2.00% threshold.
flag
Score of 4.0 or above
Score 10.00 reached the
4.0 floor.
Subject attribution
| Name | Unattributed address 0xcba4...10A0 |
|---|---|
| Category | Unattributed address weight 2 |
| Jurisdiction | Unattributed (--) |
| Source | unlabelled · confidence 0.00 |
| Cluster | unlabelled-9fd010a0
A named group in the attribution source, not a
co-spend cluster inferred from this wallet's transactions. |
Score history
| Screened | Score | Band |
|---|---|---|
| 2026-09-13 19:48 | 2.0 | low |
| 2026-09-12 17:11 | 2.0 | low |
| 2026-08-29 15:23 | 10.0 | critical |
| 2026-08-29 15:11 | 2.4 | low |
| 2026-08-28 20:37 | 2.4 | low |
| 2026-08-28 18:57 | 10.0 | critical |
| 2026-08-28 18:41 | 10.0 | critical |
| 2026-08-28 18:30 | 10.0 | critical |
| 2026-08-28 18:22 | 10.0 | critical |
| 2026-08-28 18:12 | 10.0 | critical |
Provenance
| ethereum | deterministic-fallback
offline mode forced | profile=severe |
|---|---|
| Label set | 187 entities, 19 categories, 85 clusters |
Informative
Notice / Disclaimer
Limits that apply to this artefact as a whole. Sources and hashes stay in provenance; this section is how to read them.
- Holistix scores combine public blockchain data with a seeded label set. Direct counterparties are observed on every screened chain. Onward and bridge hops are observed from a live indexer walk; they are modelled from the seed only when SAFESCORE_OFFLINE=1. Unlabelled counterparties stay unknown. Synthetic seed entities are demonstration labels, not live attribution. IP/node geolocation is not inferred.
- direct counterparties are observed from chain data on every screened chain. Hop-2 and hop-3 same-chain walks are observed from a live indexer when online (budgets split inbound/outbound so Source and Hop columns both receive inputs), and modelled from the label seed only when SAFESCORE_OFFLINE=1. The far side of a bridge is always modelled: the crossing into the bridge is observed, but no transfer links it to a specific address on the destination chain, so value is attributed across that bridge cluster's known addresses there. Modelled hops cannot carry sanctions or terrorism-financing categories. IP/node geolocation is not inferred from first-seen time.