chainscore.netHolistix

Holistic wallet report

0x8589427373D6D84E98730D7795D8f6f8731FDA16

HX-5a46b1b3bdd7 · screened 2026-09-12 17:10:22+00:00 · 6 chain(s) in one call · data source: live

Forensic report
10.0 of 10 CRITICAL

Not a reliable summary of this wallet

Block Block the transaction and escalate.

Holistix scores this wallet 10.0 of 10 (critical risk) from a single screen across 6 chain(s), with activity on Ethereum, Base, BNB Smart Chain, Polygon. The wallet is itself attributed to Tornado Cash Donation, which forces the maximum score regardless of flow analysis. $119,254 of traced value breaks down as $54,451 direct, $64,803 one hop away and $0 beyond 0 bridge crossing(s). The score is driven by sanctioned entity or designated address (59% of the score), mixing or anonymising service (38% of the score), unattributed address (2% of the score).

Do not transact. Direct or heavy illicit exposure.

Level 5 of 5 · prohibited Balanced tolerance
Partial attribution · 31.1% of traced value

Only 31% of traced value resolves to an identified counterparty. The score is real but partial: it measures the identified minority of this wallet's activity. Inbound coverage is 99%; outbound is 31%. The headline quotes the weaker side, because pooling the two would hide an unidentified half behind a pass-through.

Inbound 99.3% of traced value · outbound 31.1%. The headline quotes the weaker side so a pass-through cannot pin at 50%.

59 of 254 counterparties (23.2%) resolve to an identified entity. This screen cannot auto-clear: attribution is below the sufficient floor (70% of traced value). Unattributed exposure is scored, lightly: the 'unknown' category has weight 2 of 10, so unidentified counterparties raise the score but cannot on their own push it past 2.0. Allow recommendations are withheld below the sufficient attribution floor.

Traced value
$119,254
Direct
$54,451
observed on chain
One hop away
$64,803
weighted 50%
Across bridges
$0
0 crossing(s)
Balance held
$31
Chains active
4 / 6
ethereum, base, bsc, polygon

What the score is made of

Each category contributes on the same 0–10 scale and the score is the quadratic mean of those contributions, so the share of the score each category owns is exact — the percentages below sum to 100%.

direct exposure one hop away across a bridge
Sanctioned entity or designated address weight 10 10.00 of 10 · 59% of score
Sanctioned entity or designated address contributes 10.00 of 10: $3,210 directly and $7,593 one hop away on Ethereum ($10,803). Weighted exposure is 8.067% of traced value, at the 0.050% saturation point for this category.
SEMENOV, Roman · ethereum · $7,593 SEMENOV, Roman · ethereum · $3,210 Tornado Cash Router · ethereum · $0
Mixing or anonymising service weight 8 8.00 of 10 · 38% of score
Mixing or anonymising service contributes 8.00 of 10: $2,531 directly and $133 one hop away on Ethereum ($2,664). Weighted exposure is 2.991% of traced value, at the 1.000% saturation point for this category.
TornadoProxy · ethereum · $2,531 TornadoProxy · ethereum · $133
Unattributed address weight 2 2.00 of 10 · 2% of score
Unattributed address contributes 2.00 of 10: $47,444 directly and $46,156 one hop away on Ethereum ($93,594), BNB Smart Chain ($7), Base ($0). Weighted exposure is 81.198% of traced value, at the 80.000% saturation point for this category.
Unattributed address 0x9813...ac0f · ethereum · $10,000 Unattributed address 0x38d6...bdee · ethereum · $7,774 Unattributed address 0xd130...0dd6 · ethereum · $7,593
Decentralised finance protocol weight 2 0.39 of 10 · 0% of score
Decentralised finance protocol contributes 0.39 of 10: $1,265 directly and $2,873 one hop away on Ethereum ($4,139). Weighted exposure is 3.111% of traced value, below the 80.000% saturation point for this category.
1inch Aggregation Router V3 · ethereum · $1,265 1inch Aggregation Router V4 · ethereum · $1,012 1inch V5 Router · ethereum · $806
Regulated exchange or VASP weight 1 0.24 of 10 · 0% of score
Regulated exchange or VASP contributes 0.24 of 10: $8,022 one hop away on Ethereum ($8,022). Weighted exposure is 4.618% of traced value, below the 80.000% saturation point for this category.
Bybit Hot Wallet · ethereum · $3,307 Binance Hot Wallet 14 · ethereum · $2,543 Binance Hot Wallet 14 · ethereum · $1,475
Cross-chain bridge weight 3 0.05 of 10 · 0% of score
Cross-chain bridge contributes 0.05 of 10: $26 one hop away on Ethereum ($26). Weighted exposure is 0.015% of traced value, below the 50.000% saturation point for this category.
Polygon (PoS) Bridge · ethereum · $26
Merchant or payment processor weight 1 0.00 of 10 · 0% of score
Merchant or payment processor carries no scoring weight in this model, so its $0 of flow does not affect the score.
Tether USD (USDT) · ethereum · $0 USDC Token Contract · ethereum · $0
Token contract weight 1 0.00 of 10 · 0% of score
Token contract carries no scoring weight in this model, so its $0 of flow does not affect the score.
Ethereum Name Service (ENS) · ethereum · $0 Dai Stablecoin (DAI) · ethereum · $0 USD Coin (USDC) · base · $0

Flow of funds

Source and destination are kept apart on purpose. Illicit money arriving is a source-of-funds question the institution must report; clean money leaving towards a risky party is a destination question it may still be able to prevent.

Source of funds

Total
$7,308
165 transfer(s)
Largest single
$657
mean $44
Risk-relevant
0.0%
$0
Counterparties
27
100.0% unattributed
CategoryShareValue TransfersCustodyTop entities
Sanctioned entity or designated address risk-relevant 0.0% $0 1 unhosted Tornado Cash Router
Unattributed address 100.0% $7,308 162 unhosted Privacy, Unattributed address 0xbdd6...da0a, Unattributed address 0x1dff...6a37, Unattributed address 0x6ff8...cbdc, Unattributed address 0x0000...0000
Token contract 0.0% $0 2 unhosted USD Coin (USDC), Tether USD (USDT)

Destination of funds

Total
$47,142
151 transfer(s)
Largest single
$7,745
mean $312
Risk-relevant
12.178%
$5,741
Counterparties
24
85.138% unattributed
CategoryShareValue TransfersCustodyTop entities
Sanctioned entity or designated address risk-relevant 6.809% $3,210 2 unhosted SEMENOV, Roman, Tornado Cash Donation
Mixing or anonymising service risk-relevant 5.369% $2,531 1 protocol TornadoProxy
Unattributed address 85.138% $40,136 134 unhosted Unattributed address 0x9813...ac0f, Unattributed address 0x38d6...bdee, Unattributed address 0xd130...0dd6, pavlik.eth, Unattributed address 0x7759...4219
Decentralised finance protocol 2.684% $1,265 3 protocol 1inch Aggregation Router V3
Merchant or payment processor 0.0% $0 7 hosted Tether USD (USDT), USDC Token Contract
Token contract 0.0% $0 4 unhosted Ethereum Name Service (ENS), Dai Stablecoin (DAI)

Funds arrived mainly from unattributed address (100.0%) across 165 inbound transfer(s) totalling $7,308. Funds left mainly to unattributed address (85.138%) across 151 outbound transfer(s) totalling $47,142. 12.178% of outbound value went to categories that carry material risk weight, which is a destination-of-funds question and may be preventable.

Both sides are computed from observed transfers only, so the percentages describe funds this screen actually saw move. Modelled hops are excluded here deliberately: a source-of-funds statement should not rest on an inferred counterparty.

Typology indicators

Exposure says who the wallet touched; these say what it was doing. A clean counterparty set does not rule out structuring.

4 indicator(s) triggered, 3 not observable with the data available.

IndicatorFamilyStatusWhat was found
Mixing or anonymising service use privacy critical $2,664 (2.234% of traced value) is connected to an anonymising service, of which $2,531 is a direct transfer.
CoinJoin-shaped joint spend privacy high 5 transfers of near-identical value inside a 6-hour window, the shape of a collaborative mix rather than ordinary payments.
Peel chain structuring clear Longest shrinking run is 2 transfer(s), below the 3 needed to call a peel chain.
Deposit splitting below a reporting threshold structuring clear No counterparty received 3 or more transfers in the band beneath the reporting threshold.
Rapid pass-through structuring clear Median dwell is 400.12h, which does not indicate pass-through layering.
Bridge and cross-chain swap routing cross chain clear No bridge crossing appears in this screen.
Swap and protocol routing concentration cross chain clear Protocol routing accounts for 3.5% of flow, within normal range.
Burst transaction scheduling network medium 13 transfers were broadcast inside a 5-minute window, which is automation rather than a person transacting.
Mempool and fee irregularities network unavailable Zero-confirmation transactions, fee spikes and confirmation depth are not exposed on the chains in this screen, so this indicator is reported as unavailable rather than inferred. Bitcoin mempool.space is the exception, and it was not read here.
Unhosted wallet interaction custody medium 93.0% of directly transacted value went to or from self-custodied addresses with no regulated operator behind them, so no counterparty holds identity information for that flow.
Deviation from stated customer profile profile unavailable No stated customer profile was supplied, so deviation from expected behaviour cannot be scored. The wallet's own history is still in the report.
Opening deposit inconsistent with stated identity identity unavailable No stated identity (account opening date, new-customer flag, or declared income) was supplied, so an opening deposit cannot be judged inconsistent and a new-user full withdrawal cannot be scored. PEP/RCA name screening and source-of-wealth documents are not in this product. The institution's own identity stack still has to sit beside this screen.
Many-to-one inbound wallet shape identity clear Busiest 24-hour inbound window holds 3 distinct wallet(s), below the 8 needed to call a many-to-one shape. Shared IP remains unobservable.

Indicators are computed from the observed transfer set and the composed exposure view. They describe transaction shape, not intent: a triggered indicator is a reason to look, not a finding of wrongdoing. Profile deviation is scored only when the institution supplies a stated customer profile; without one the indicator is not observable rather than clear. Opening-deposit is scored only when account age or declared income is supplied. Many-to-one names inbound wallets, not people or a shared IP.

Sanctions and watchlist screening

4 direct match(es), 1 indirect exposure(s) 4 direct match(es) against SEMENOV, Roman, Tornado Cash Donation, Tornado Cash Router. Dealing with a designated party is prohibited irrespective of value, so this is a block decision rather than a risk judgement. 1 indirect exposure(s) totalling $7,593 sit one or more hops from a designated party. These are reportable findings, not prohibited dealings. Lists matched: OFAC, EU, UN, UK-HMT.
EntityMatchSeverityLists ValueShare
SEMENOV, Roman
0xdcbeffbecce100cce9e4b153c4e15cb885643193
direct counterparty critical
OFAC SDN · DPRK3 · OFAC-SDN-44718
$3,210 2.692%
Tornado Cash Donation
0x8589427373D6D84E98730D7795D8f6f8731FDA16
direct subject critical
OFAC SDN · CYBER2 · OFAC-2DE39D7B9C
EU CFSP consolidated · 2019/796 · EU-B14E4A3AB0
UN Consolidated · 1267/1989/2253 · UN-0CCF190BFF
UK-HMT UK Sanctions List · CYB · UK-HMT-5596380580
$31 100.0%
Tornado Cash Router
0xd90e2f925da726b50c4ed8d0fb90ad053324f31b
direct counterparty critical
OFAC SDN · CYBER2 · OFAC-2DE39D7B9C
EU CFSP consolidated · 2019/796 · EU-B14E4A3AB0
UN Consolidated · 1267/1989/2253 · UN-0CCF190BFF
UK-HMT UK Sanctions List · CYB · UK-HMT-5596380580
$0 0.0%
Tornado Cash Donation
0x8589427373d6d84e98730d7795d8f6f8731fda16
direct counterparty critical
OFAC SDN · CYBER2 · OFAC-2DE39D7B9C
EU CFSP consolidated · 2019/796 · EU-B14E4A3AB0
UN Consolidated · 1267/1989/2253 · UN-0CCF190BFF
UK-HMT UK Sanctions List · CYB · UK-HMT-5596380580
$0 0.0%
SEMENOV, Roman
0xdcbeffbecce100cce9e4b153c4e15cb885643193
indirect exposure high
OFAC SDN · DPRK3 · OFAC-SDN-44718
$7,593 6.367%

Addresses are matched against the seeded watchlist by cluster, so a designation applies to every address attributed to the same entity. Direct matches are observed on chain; indirect and bridged findings include modelled hops and must be confirmed before they are relied on.

Only the Tornado Cash and Lazarus clusters reflect real designations. Every other listing is fabricated for demonstration and must never be used as a sanctions determination.

Forensic tracing

8 path(s) traced, 8 of them fully observed on chain; deepest is 2 hop(s).

Source of funds Subject wallet Destination of funds Onward and cross-chain $7,280 $20 $7 $1 $1 $0 $10,000 $7,774 $7,593 $7,293 $3,687 $3,210 $7,742 $7,593 $6,504 $5,356 $3,452 $3,307 $7,280 $10,000 $7,774 $7,593 $7,293 $3,687 $3,210 $7,742 $7,593 $6,504 $5,356 $3,452 $3,307 Privacy | Unattributed address | Ethereum | direct | $7,280 Privacy Ethereum $7,280 Unattributed address 0xbdd6...da0a | Unattributed address | Ethereum | direct | $20 Unattributed address 0xb... Ethereum $20 Unattributed address 0xbdd6...da0a | Unattributed address | BNB Smart Chain | direct | $7 Unattributed address 0xb... BNB Smart Chain $7 Unattributed address 0x1dff...6a37 | Unattributed address | Ethereum | direct | $1 Unattributed address 0x1... Ethereum $1 Unattributed address 0x6ff8...cbdc | Unattributed address | Ethereum | direct | $1 Unattributed address 0x6... Ethereum $1 Unattributed address 0x6627...7db2 | Unattributed address | Ethereum | direct | $0 Unattributed address 0x6... Ethereum $0 Unattributed address 0x9813...ac0f | Unattributed address | Ethereum | direct | $10,000 Unattributed address 0x9... Ethereum $10,000 Unattributed address 0x38d6...bdee | Unattributed address | Ethereum | direct | $7,774 Unattributed address 0x3... Ethereum $7,774 Unattributed address 0xd130...0dd6 | Unattributed address | Ethereum | direct | $7,593 Unattributed address 0xd... Ethereum $7,593 pavlik.eth | Unattributed address | Ethereum | direct | $7,293 pavlik.eth Ethereum $7,293 Unattributed address 0x7759...4219 | Unattributed address | Ethereum | direct | $3,687 Unattributed address 0x7... Ethereum $3,687 SEMENOV, Roman | Sanctioned entity or designated address | Ethereum | direct | $3,210 SEMENOV, Roman Ethereum $3,210 Unattributed address 0xbf2f...9775 | Unattributed address | Ethereum | indirect | $7,742 Unattributed address 0xb... Ethereum $7,742 SEMENOV, Roman | Sanctioned entity or designated address | Ethereum | indirect | $7,593 SEMENOV, Roman Ethereum $7,593 Unattributed address 0x89e5...7c40 | Unattributed address | Ethereum | indirect | $6,504 Unattributed address 0x8... Ethereum $6,504 Unattributed address 0x67a7...2fef | Unattributed address | Ethereum | indirect | $5,356 Unattributed address 0x6... Ethereum $5,356 Unattributed address 0x17f9...7d91 | Unattributed address | Ethereum | indirect | $3,452 Unattributed address 0x1... Ethereum $3,452 Bybit Hot Wallet | Regulated exchange or VASP | Ethereum | indirect | $3,307 Bybit Hot Wallet Ethereum $3,307 0x85894273...
Counterparty category Sanctioned entity or designated address Regulated exchange or VASP Unattributed address

Value flows left to right. Solid edges are observed transfers; dashed edges are modelled onward hops. Circle area is proportional to value, not to risk. Node colour is the counterparty category — see the key below the diagram. 236 lower-value node(s) omitted for legibility.

Multi-hop transfer diagram

Fund flow by hop and first transfer time. Orange arrows cross chains; dashed arrows are onward or bridged hops.

Source 3 Source 2 Hop 1 · sources Subject Hop 1 · destinations Hop 2 Hop 3+ $6 · hop 3 · Ethereum · 2021-06-21 12:31 $3 · hop 3 · Ethereum · 2021-06-21 12:31 $0 · hop 3 · Ethereum · 2021-10-15 23:51 $0 · hop 3 · Ethereum · 2022-01-30 13:39 $0 · hop 3 · Ethereum · 2022-08-11 13:13 $1 · hop 3 · Ethereum · 2022-09-15 21:08 $0 · hop 3 · Ethereum · 2022-09-23 22:05 $1 · hop 2 · Ethereum · 2017-09-25 14:20 $0 · hop 2 · Ethereum · 2020-11-15 21:03 $0 · hop 2 · Ethereum · 2022-10-06 12:44 $0 · hop 2 · Ethereum · 2022-10-18 13:18 $0 · hop 2 · Ethereum · 2024-06-03 17:21 $0 · hop 2 · Ethereum · 2025-01-07 00:43 $0 · hop 2 · Ethereum · 2025-05-22 13:03 $0 · hop 1 · Polygon · 2021-09-19 08:40 $0 · hop 1 · Polygon · 2021-09-19 08:41 $0 · hop 1 · Polygon · 2022-01-18 20:13 $7,280 · hop 1 · Ethereum · 2022-08-13 01:15 $0 · hop 1 · Ethereum · 2022-10-29 16:46 $0 · hop 1 · Ethereum · 2022-11-05 16:05 $0 · hop 1 · Ethereum · 2022-11-28 02:13 $0 · hop 1 · Ethereum · 2021-03-31 02:28 $0 · hop 1 · Ethereum · 2021-03-31 03:10 $1,265 · hop 1 · Ethereum · 2021-03-31 03:12 $0 · hop 1 · Ethereum · 2021-03-31 03:12 $7,593 · hop 1 · Ethereum · 2021-03-31 18:14 $3,687 · hop 1 · Ethereum · 2021-04-01 07:13 $0 · hop 1 · Ethereum · 2021-04-01 18:12 $198 · hop 2 · Ethereum · 2020-09-21 07:16 $146 · hop 2 · Ethereum · 2020-09-21 07:16 $7,593 · hop 2 · Ethereum · 2021-04-05 12:05 $101 · hop 2 · Ethereum · 2021-04-17 22:19 $122 · hop 2 · Ethereum · 2021-04-17 22:23 $914 · hop 2 · Ethereum · 2021-04-23 02:41 $2 · hop 2 · Ethereum · 2021-04-23 21:17 $685 · hop 3 · Ethereum · 2020-12-26 04:30 $2,543 · hop 3 · Ethereum · 2021-06-21 12:31 $1,475 · hop 3 · Ethereum · 2021-06-21 12:31 $35 · hop 3 · Ethereum · 2022-05-11 10:56 $1,273 · hop 3 · Ethereum · 2022-05-12 12:12 $8 · hop 3 · Ethereum · 2022-05-30 13:01 $879 · hop 3 · Ethereum · 2022-06-21 13:03 $7,280 $7,593 $3,687 $7,593 $2,543 Binance Hot Wallet 14 | Regulated exchange or VASP | Ethereum | indirect | $6 | first 2021-06-21 12:31 Binance Hot Wallet 14 Ethereum · 06-21 12:31 $6 Binance Hot Wallet 14 | Regulated exchange or VASP | Ethereum | indirect | $3 | first 2021-06-21 12:31 Binance Hot Wallet 14 Ethereum · 06-21 12:31 $3 Unattributed address 0x9c90...840b | Unattributed address | Ethereum | indirect | $0 | first 2021-10-15 23:51 Unattributed address 0... Ethereum · 10-15 23:51 $0 Unattributed address 0x7f48...b583 | Unattributed address | Ethereum | indirect | $0 | first 2022-01-30 13:39 Unattributed address 0... Ethereum · 01-30 13:39 $0 Unattributed address 0x9962...8e75 | Unattributed address | Ethereum | indirect | $0 | first 2022-08-11 13:13 Unattributed address 0... Ethereum · 08-11 13:13 $0 Unattributed address 0x00bd...f312 | Unattributed address | Ethereum | indirect | $1 | first 2022-09-15 21:08 Unattributed address 0... Ethereum · 09-15 21:08 $1 Unattributed address 0x00e8...a20a | Unattributed address | Ethereum | indirect | $0 | first 2022-09-23 22:05 Unattributed address 0... Ethereum · 09-23 22:05 $0 Unattributed address 0x52bc...e3b5 | Unattributed address | Ethereum | indirect | $1 | first 2017-09-25 14:20 Unattributed address 0... Ethereum · 09-25 14:20 $1 Unattributed address 0xc627...b945 | Unattributed address | Ethereum | indirect | $0 | first 2020-11-15 21:03 Unattributed address 0... Ethereum · 11-15 21:03 $0 Unattributed address 0xd3c9...b8c0 | Unattributed address | Ethereum | indirect | $0 | first 2022-10-06 12:44 Unattributed address 0... Ethereum · 10-06 12:44 $0 Unattributed address 0xb13b...4535 | Unattributed address | Ethereum | indirect | $0 | first 2022-10-18 13:18 Unattributed address 0... Ethereum · 10-18 13:18 $0 Unattributed address 0x04f3...9712 | Unattributed address | Ethereum | indirect | $0 | first 2024-06-03 17:21 Unattributed address 0... Ethereum · 06-03 17:21 $0 Binance Hot Wallet 15 | Regulated exchange or VASP | Ethereum | indirect | $0 | first 2025-01-07 00:43 Binance Hot Wallet 15 Ethereum · 01-07 00:43 $0 Unattributed address 0x0166...49ee | Unattributed address | Ethereum | indirect | $0 | first 2025-05-22 13:03 Unattributed address 0... Ethereum · 05-22 13:03 $0 ERC20 | Unattributed address | Polygon | direct | $0 | first 2021-09-19 08:40 ERC20 Polygon · 09-19 08:40 $0 Zepe.io | Unattributed address | Polygon | direct | $0 | first 2021-09-19 08:41 Zepe.io Polygon · 09-19 08:41 $0 Unattributed address 0xa1a6...33ea | Unattributed address | Polygon | direct | $0 | first 2022-01-18 20:13 Unattributed address 0... Polygon · 01-18 20:13 $0 Privacy | Unattributed address | Ethereum | direct | $7,280 | first 2022-08-13 01:15 Privacy Ethereum · 08-13 01:15 $7,280 Tornado Cash Router | Sanctioned entity or designated address | Ethereum | direct | $0 | first 2022-10-29 16:46 Tornado Cash Router Ethereum · 10-29 16:46 $0 Unattributed address 0xb91a...0668 | Unattributed address | Ethereum | direct | $0 | first 2022-11-05 16:05 Unattributed address 0... Ethereum · 11-05 16:05 $0 GnosisSafeProxy | Unattributed address | Ethereum | direct | $0 | first 2022-11-28 02:13 GnosisSafeProxy Ethereum · 11-28 02:13 $0 AdminUpgradeableProxy | Unattributed address | Ethereum | direct | $0 | first 2021-03-31 02:28 AdminUpgradeableProxy Ethereum · 03-31 02:28 $0 cUSDC | Unattributed address | Ethereum | direct | $0 | first 2021-03-31 03:10 cUSDC Ethereum · 03-31 03:10 $0 1inch Aggregation Router V3 | Decentralised finance protocol | Ethereum | direct | $1,265 | first 2021-03-31 03:12 1inch Aggregation Rout... Ethereum · 03-31 03:12 $1,265 Unattributed address 0xdb38...5944 | Unattributed address | Ethereum | direct | $0 | first 2021-03-31 03:12 Unattributed address 0... Ethereum · 03-31 03:12 $0 Unattributed address 0xd130...0dd6 | Unattributed address | Ethereum | direct | $7,593 | first 2021-03-31 18:14 Unattributed address 0... Ethereum · 03-31 18:14 $7,593 Unattributed address 0x7759...4219 | Unattributed address | Ethereum | direct | $3,687 | first 2021-04-01 07:13 Unattributed address 0... Ethereum · 04-01 07:13 $3,687 Tornado Cash Donation | Sanctioned entity or designated address | Ethereum | direct | $0 | first 2021-04-01 18:12 Tornado Cash Donation Ethereum · 04-01 18:12 $0 Uniswap V2 Router | Decentralised finance protocol | Ethereum | indirect | $198 | first 2020-09-21 07:16 Uniswap V2 Router Ethereum · 09-21 07:16 $198 Uniswap V2 Router | Decentralised finance protocol | Ethereum | indirect | $146 | first 2020-09-21 07:16 Uniswap V2 Router Ethereum · 09-21 07:16 $146 SEMENOV, Roman | Sanctioned entity or designated address | Ethereum | indirect | $7,593 | first 2021-04-05 12:05 SEMENOV, Roman Ethereum · 04-05 12:05 $7,593 Spender | Unattributed address | Ethereum | indirect | $101 | first 2021-04-17 22:19 Spender Ethereum · 04-17 22:19 $101 Unattributed address 0x35eb...e995 | Unattributed address | Ethereum | indirect | $122 | first 2021-04-17 22:23 Unattributed address 0... Ethereum · 04-17 22:23 $122 Unattributed address 0x1d7e...485c | Unattributed address | Ethereum | indirect | $914 | first 2021-04-23 02:41 Unattributed address 0... Ethereum · 04-23 02:41 $914 Unattributed address 0x3299...7815 | Unattributed address | Ethereum | indirect | $2 | first 2021-04-23 21:17 Unattributed address 0... Ethereum · 04-23 21:17 $2 Binance 1 | Regulated exchange or VASP | Ethereum | indirect | $685 | first 2020-12-26 04:30 Binance 1 Ethereum · 12-26 04:30 $685 Binance Hot Wallet 14 | Regulated exchange or VASP | Ethereum | indirect | $2,543 | first 2021-06-21 12:31 Binance Hot Wallet 14 Ethereum · 06-21 12:31 $2,543 Binance Hot Wallet 14 | Regulated exchange or VASP | Ethereum | indirect | $1,475 | first 2021-06-21 12:31 Binance Hot Wallet 14 Ethereum · 06-21 12:31 $1,475 Unattributed address 0x92d2...98b9 | Unattributed address | Ethereum | indirect | $35 | first 2022-05-11 10:56 Unattributed address 0... Ethereum · 05-11 10:56 $35 Unattributed address 0x15fe...4240 | Unattributed address | Ethereum | indirect | $1,273 | first 2022-05-12 12:12 Unattributed address 0... Ethereum · 05-12 12:12 $1,273 Unattributed address 0x56f4...9e18 | Unattributed address | Ethereum | indirect | $8 | first 2022-05-30 13:01 Unattributed address 0... Ethereum · 05-30 13:01 $8 Unattributed address 0xf816...8ad0 | Unattributed address | Ethereum | indirect | $879 | first 2022-06-21 13:03 Unattributed address 0... Ethereum · 06-21 13:03 $879 0x85894273...
Counterparty category Sanctioned entity or designated address Decentralised finance protocol Regulated exchange or VASP Unattributed address

Transfer diagram: Source 3 → Source 2 → Hop 1 sources feed the subject; Hop 1 destinations → Hop 2 → Hop 3+ leave to the right. Nodes in a column are ordered by first transfer time. Circle area tracks USD. Solid arrows are observed; dashed arrows are onward or bridged hops. Orange arrows cross chains. Node colour is the counterparty category — see the key below the diagram. 212 lower-value node(s) omitted for legibility. 42 arrow(s) · 28 multi-hop.

When the funds moved

51% of inbound USD arrived in a 4-hour window starting 07 Oct 2022 08:31 UTC ($3,731 of $7,308). The lower chart is activity on counterparties (hop 2+), not funds through this address.

Full history: every transfer this wallet has on the screened chains was read.

Hop 1 — this address (inbound above, outbound below) Inbound 0 $5.0k $10.0k $5.0k $10.0k Outbound 29 Mar · outbound · Unattributed address · $8.5k 12 Apr · outbound · Unattributed address · $1.4k 26 Apr · outbound · Unattributed address · $886 21 Jun · outbound · Mixing or anonymising service · $2.5k 21 Jun · outbound · Unattributed address · $1.5k 28 Jun · outbound · Decentralised finance protocol · $1.3k 28 Jun · outbound · Unattributed address · $5.7k 19 Jul · outbound · Unattributed address · $4.0k 02 Aug · outbound · Unattributed address · $2.5k 16 Aug · outbound · Unattributed address · $6.0k 23 Aug · outbound · Sanctioned entity or designated address · $3.2k 30 Aug · outbound · Unattributed address · $1.2k 13 Sep · outbound · Unattributed address · $631 08 Aug · inbound · Unattributed address · $3.0k 15 Aug · inbound · Unattributed address · $8 05 Sep · inbound · Unattributed address · $8 19 Sep · inbound · Unattributed address · $7 03 Oct · inbound · Unattributed address · $4.1k 10 Oct · inbound · Unattributed address · $137 26 Dec · inbound · Unattributed address · $1 13 Feb · outbound · Unattributed address · $7.8k Hop 2+ — activity on counterparties, not through this address 0 $10.0M 05 Apr · hop 2+ peer activity · $11.5k 12 Apr · hop 2+ peer activity · $12.0k 19 Apr · hop 2+ peer activity · $56.0k 26 Apr · hop 2+ peer activity · $8.1k 03 May · hop 2+ peer activity · $1.8k 10 May · hop 2+ peer activity · $581.0k 24 May · hop 2+ peer activity · $50.2k 21 Jun · hop 2+ peer activity · $33.0k 05 Jul · hop 2+ peer activity · $1.2k 26 Jul · hop 2+ peer activity · $3.9k 02 Aug · hop 2+ peer activity · $26.1k 23 Aug · hop 2+ peer activity · $4.9k 13 Sep · hop 2+ peer activity · $28.3k 27 Sep · hop 2+ peer activity · $150.0k 11 Oct · hop 2+ peer activity · $87.1k 18 Oct · hop 2+ peer activity · $202.0k 25 Oct · hop 2+ peer activity · $148.1k 01 Nov · hop 2+ peer activity · $420.0k 08 Nov · hop 2+ peer activity · $51.2k 15 Nov · hop 2+ peer activity · $185.5k 29 Nov · hop 2+ peer activity · $117.6k 06 Dec · hop 2+ peer activity · $18.7k 13 Dec · hop 2+ peer activity · $20.2k 20 Dec · hop 2+ peer activity · $38.3k 27 Dec · hop 2+ peer activity · $18.0k 03 Jan · hop 2+ peer activity · $35.9k 10 Jan · hop 2+ peer activity · $30.1k 17 Jan · hop 2+ peer activity · $3.9k 24 Jan · hop 2+ peer activity · $176.4k 31 Jan · hop 2+ peer activity · $610.6k 21 Feb · hop 2+ peer activity · $40.6k 28 Feb · hop 2+ peer activity · $5.1k 07 Mar · hop 2+ peer activity · $21.3k 14 Mar · hop 2+ peer activity · $109.1k 21 Mar · hop 2+ peer activity · $34.1k 28 Mar · hop 2+ peer activity · $128.3k 04 Apr · hop 2+ peer activity · $27.8k 11 Apr · hop 2+ peer activity · $27.1k 25 Apr · hop 2+ peer activity · $135.8k 02 May · hop 2+ peer activity · $20.0k 09 May · hop 2+ peer activity · $172.5k 16 May · hop 2+ peer activity · $27.8k 30 May · hop 2+ peer activity · $33.0k 06 Jun · hop 2+ peer activity · $30.5k 13 Jun · hop 2+ peer activity · $41.9k 20 Jun · hop 2+ peer activity · $95.3k 27 Jun · hop 2+ peer activity · $13.6k 04 Jul · hop 2+ peer activity · $30.4k 11 Jul · hop 2+ peer activity · $14.9k 18 Jul · hop 2+ peer activity · $130.0k 25 Jul · hop 2+ peer activity · $12.5k 01 Aug · hop 2+ peer activity · $11.9k 08 Aug · hop 2+ peer activity · $25.8k 15 Aug · hop 2+ peer activity · $17.5k 22 Aug · hop 2+ peer activity · $177.4k 29 Aug · hop 2+ peer activity · $106.5k 05 Sep · hop 2+ peer activity · $32.4k 12 Sep · hop 2+ peer activity · $8.2M 19 Sep · hop 2+ peer activity · $12.2k 26 Sep · hop 2+ peer activity · $13.2k 03 Oct · hop 2+ peer activity · $100.5k 17 Oct · hop 2+ peer activity · $3 24 Oct · hop 2+ peer activity · $4.6k 31 Oct · hop 2+ peer activity · $50.0k 07 Nov · hop 2+ peer activity · $60.9k 05 Dec · hop 2+ peer activity · $40.0k 12 Dec · hop 2+ peer activity · $2.5k 19 Dec · hop 2+ peer activity · $21.3k 26 Dec · hop 2+ peer activity · $38.1k 02 Jan · hop 2+ peer activity · $4.9k 09 Jan · hop 2+ peer activity · $1.5M 23 Jan · hop 2+ peer activity · $30.3k 13 Feb · hop 2+ peer activity · $94.0k 20 Feb · hop 2+ peer activity · $11.6k 27 Feb · hop 2+ peer activity · $30.0k 06 Mar · hop 2+ peer activity · $34.2k 13 Mar · hop 2+ peer activity · $13.6k 27 Mar · hop 2+ peer activity · $171.3k 03 Apr · hop 2+ peer activity · $34.3k 10 Apr · hop 2+ peer activity · $40.5k 17 Apr · hop 2+ peer activity · $31.5k 24 Apr · hop 2+ peer activity · $152 01 May · hop 2+ peer activity · $32.0k 08 May · hop 2+ peer activity · $60.1k 05 Jun · hop 2+ peer activity · $299 12 Jun · hop 2+ peer activity · $30.0k 19 Jun · hop 2+ peer activity · $5.5k 26 Jun · hop 2+ peer activity · $158.4k 03 Jul · hop 2+ peer activity · $632 10 Jul · hop 2+ peer activity · $6.3k 29 Mar 12 Jul 25 Oct 07 Feb 23 May 05 Sep 19 Dec 03 Apr 10 Jul
Hop 1 category Sanctioned entity or designated address Mixing or anonymising service Decentralised finance protocol Unattributed address

Traced paths

observed SEMENOV, Roman · Sanctioned entity or designated address $7,593
1. Unattributed address 0xd130...0dd6 · Ethereum · observed 2. SEMENOV, Roman · Ethereum · observed
$7,593 traced across 2 hop(s): Unattributed address 0xd130...0dd6 to SEMENOV, Roman, ending at a sanctioned entity or designated address on Ethereum. The endpoint is not a hosted service, so there is no operator to ask for the beneficiary's identity.
observed SEMENOV, Roman · Sanctioned entity or designated address $3,210
1. SEMENOV, Roman · Ethereum · observed
$3,210 traced across 1 hop(s): SEMENOV, Roman, ending at a sanctioned entity or designated address on Ethereum. The endpoint is not a hosted service, so there is no operator to ask for the beneficiary's identity.
observed Tornado Cash Router · Sanctioned entity or designated address $0
1. Tornado Cash Router · Ethereum · observed
$0 traced across 1 hop(s): Tornado Cash Router, ending at a sanctioned entity or designated address on Ethereum. The endpoint is not a hosted service, so there is no operator to ask for the beneficiary's identity.
observed Tornado Cash Donation · Sanctioned entity or designated address $0
1. Tornado Cash Donation · Ethereum · observed
$0 traced across 1 hop(s): Tornado Cash Donation, ending at a sanctioned entity or designated address on Ethereum. The endpoint is not a hosted service, so there is no operator to ask for the beneficiary's identity.
observed TornadoProxy · Mixing or anonymising service $2,531
1. TornadoProxy · Ethereum · observed
$2,531 traced across 1 hop(s): TornadoProxy, ending at a mixing or anonymising service on Ethereum. The endpoint is not a hosted service, so there is no operator to ask for the beneficiary's identity.
observed TornadoProxy · Mixing or anonymising service $133
1. Unattributed address 0x7759...4219 · Ethereum · observed 2. TornadoProxy · Ethereum · observed
$133 traced across 2 hop(s): Unattributed address 0x7759...4219 to TornadoProxy, ending at a mixing or anonymising service on Ethereum. The endpoint is not a hosted service, so there is no operator to ask for the beneficiary's identity.
observed Tether USD (USDT) · Merchant or payment processor $0
1. Tether USD (USDT) · Ethereum · observed
$0 traced across 1 hop(s): Tether USD (USDT), ending at a merchant or payment processor on Ethereum. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request.
observed USDC Token Contract · Merchant or payment processor $0
1. USDC Token Contract · Ethereum · observed
$0 traced across 1 hop(s): USDC Token Contract, ending at a merchant or payment processor on Ethereum. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request.

8 path(s) from this wallet reach an identified endpoint, of which 8 are fully observed on chain. $7,593 traced across 2 hop(s): Unattributed address 0xd130...0dd6 to SEMENOV, Roman, ending at a sanctioned entity or designated address on Ethereum. The endpoint is not a hosted service, so there is no operator to ask for the beneficiary's identity. 2 path(s) terminate at a hosted service, which is where an investigation can realistically recover identity information or freeze funds.

Timeline

WhenChainDirection CounterpartyValue
2021-03-31 02:28 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 02:30 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 02:33 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 02:35 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 02:37 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 02:39 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 02:41 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 02:43 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 02:45 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 02:46 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 02:48 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 02:51 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 03:10 Ethereum out 0x39aa39c021dfbae8fac545936693ac917d5e7563 $0
2021-03-31 03:12 Ethereum out 0x11111112542d85b3ef69ae05771c2dccff4faa26 $0
2021-03-31 03:12 Ethereum out 0xdb38ae75c5f44276803345f7f02e95a0aeef5944 $0
2021-03-31 03:18 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 03:38 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 03:40 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 04:07 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0
2021-03-31 04:15 Ethereum out 0x527653ea119f3e6a1f5bd18fbf4714081d7b31ce $0

Exhibits

AddressEntityCluster AttributionBasis
0xd1300054ea25892e0b12ddcbad22038102f50dd6 Unattributed address 0xd130...0dd6
Unattributed address
unlabelled-02f50dd6
0 address(es)
unlabelled observed on chain
0xdcbeffbecce100cce9e4b153c4e15cb885643193 SEMENOV, Roman
Sanctioned entity or designated address
ofac-sdn-44718
0 address(es)
ofac observed on chain
0x7759e9093463c049aac1400d5b556e6c7fa24219 Unattributed address 0x7759...4219
Unattributed address
unlabelled-7fa24219
0 address(es)
unlabelled observed on chain
0x722122df12d4e14e13ac3b6895a86e84145b6967 TornadoProxy
Mixing or anonymising service
tornadoproxy
0 address(es)
blockscout observed on chain
0xd90e2f925da726b50c4ed8d0fb90ad053324f31b Tornado Cash Router
Sanctioned entity or designated address
tornado-cash
3 address(es)
public observed on chain
0x8589427373d6d84e98730d7795d8f6f8731fda16 Tornado Cash Donation
Sanctioned entity or designated address
tornado-cash
3 address(es)
public observed on chain
0xdac17f958d2ee523a2206206994597c13d831ec7 Tether USD (USDT)
Merchant or payment processor
tether
0 address(es)
public observed on chain
0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 USDC Token Contract
Merchant or payment processor
circle
1 address(es)
public observed on chain

Paths are assembled from the composed exposure view, walking each endpoint back to the subject. Direct hops are observed on chain. Onward and bridged hops are observed from a live indexer walk, or modelled from the seed when SAFESCORE_OFFLINE=1, and are marked as such on every hop. The transfer map lays those hops on chain lanes ordered by fund size and transfer timestamp.

Counterparty services

The same exposure means different things through a licensed custodian and a no-KYC venue, so each service a wallet touched is scored on its own controls.

2 directory-listed service(s) appear in this screen; 0 of them are high risk or prohibited, carrying 0.0% of traced value.

ServiceJurisdictionLicenceKYC LayersValueEntity risk
Binance Holdings Ltd
Regulated exchange or VASP
Malta licensed strict indirect $4,715 2.1 low
Circle Internet Financial
Merchant or payment processor
United States registered standard direct $0 4.9 medium

Only counterparties with a directory entry are profiled here. Everything else is covered by category exposure.

Cross-chain picture

Ethereum ETH

Traced value$54,444
In / out$7,302 / $47,142
Transfers300
Balance$19
Sourcelive:alchemy

Base ETH

Traced value$0
In / out$0 / $0
Transfers2
Balance$0
Sourcelive:alchemy

Optimism ETH

Traced value$0
In / out$0 / $0
Transfers0
Balance$0
Sourcelive:alchemy

BNB Smart Chain BNB

Traced value$7
In / out$7 / $0
Transfers2
Balance$12
Sourcelive:alchemy

Polygon POL

Traced value$0
In / out$0 / $0
Transfers12
Balance$0
Sourcelive:alchemy

Arbitrum ETH

Traced value$0
In / out$0 / $0
Transfers0
Balance$0
Sourcelive:alchemy

Bridge crossings

Bridged value does not stop at the bridge contract, so Holistix follows it onto the chains the bridge connects and weights what it finds there at 70%.

No bridge crossings observed, so all exposure stays on the chains screened.

Counterparties

CounterpartyCategoryChainLayer JurisdictionVisibility ValueWeighted
Unattributed address 0x9813...ac0f
0x98138788220cd08e17e364685d8af4edcea6ac0f
Unattributed address
unlabelled (0.00)
Ethereum direct -- traced on $10,000 $10,000
Unattributed address 0x38d6...bdee
0x38d6e3e06c5d3c018acbbf2482d63dc376bebdee
Unattributed address
unlabelled (0.00)
Ethereum direct -- traced on $7,774 $7,774
Unattributed address 0xd130...0dd6
0xd1300054ea25892e0b12ddcbad22038102f50dd6
Unattributed address
unlabelled (0.00)
Ethereum direct -- traced on $7,593 $7,593
pavlik.eth
ENS pavlik.eth
0x27e82ba6afebf3eee3a8e1613c2af5987929a546
Unattributed address
ens (0.75)
Ethereum direct -- traced on $7,293 $7,293
Privacy
0xc479c31aca1ba077899ca5dec4f3a8e8ece1f57e
Unattributed address
blockscout (0.70)
Ethereum direct -- traced on $7,280 $7,280
Unattributed address 0xbf2f...9775
0xbf2fc60ba9c0d247edbaff760392797a2d969775
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x38d6e3e06c…
-- traced on $7,742 $3,871
SEMENOV, Roman
0xdcbeffbecce100cce9e4b153c4e15cb885643193
Sanctioned entity or designated address
ofac (1.00)
Ethereum indirect
via 0xd1300054ea…
-- traced on $7,593 $3,796
Unattributed address 0x7759...4219
0x7759e9093463c049aac1400d5b556e6c7fa24219
Unattributed address
unlabelled (0.00)
Ethereum direct -- traced on $3,687 $3,687
Unattributed address 0x89e5...7c40
0x89e51fa8ca5d66cd220baed62ed01e8951aa7c40
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0xbf2fc60ba9…
-- traced on $6,504 $3,252
SEMENOV, Roman
0xdcbeffbecce100cce9e4b153c4e15cb885643193
Sanctioned entity or designated address
ofac (1.00)
Ethereum direct -- traced on $3,210 $3,210
Unattributed address 0x67a7...2fef
0x67a7229e68ea48614fa6ae774ecbd0a8580d2fef
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x27e82ba6af…
-- traced on $5,356 $2,678
TornadoProxy
0x722122df12d4e14e13ac3b6895a86e84145b6967
Mixing or anonymising service
blockscout (0.85)
Ethereum direct -- out of sight — mixer internals $2,531 $2,531
Unattributed address 0x17f9...7d91
0x17f90828535d5aa2198ca4734827ed6a559c7d91
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x9813878822…
-- traced on $3,452 $1,726
Bybit Hot Wallet
0xf89d7b9c864f589bbf53a82105107622b35eaa40
Regulated exchange or VASP
public (1.00)
Ethereum indirect
via 0x67a7229e68…
-- out of sight — exchange-internal $3,307 $1,653
Unattributed address 0x744a...2811
0x744accf0a127c54f7dcee4fff87f9d7881ce2811
Unattributed address
unlabelled (0.00)
Ethereum direct -- traced on $1,500 $1,500
Unattributed address 0xfeee...81e2
0xfeeeb7e293187bdc2d8d31880c6706d3b8f781e2
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x9813878822…
-- traced on $2,594 $1,297
Binance Hot Wallet 14
PoR Binance historical w=0.00
0x28c6c06298d514db089934071355e5743bf21d60
Regulated exchange or VASP
public (1.00)
Ethereum indirect
via 0xfeeeb7e293…
MT out of sight — exchange-internal $2,543 $1,271
1inch Aggregation Router V3
0x11111112542d85b3ef69ae05771c2dccff4faa26
Decentralised finance protocol
public (1.00)
Ethereum direct -- traced on $1,265 $1,265
Unattributed address 0xcf14...0ee6
0xcf148146a24a2ddc7c6fcc01f1b465a3c7660ee6
Unattributed address
unlabelled (0.00)
Ethereum direct -- traced on $1,139 $1,139
Unattributed address 0x975a...83da
0x975af4f2006be99d14042cdc56dfc36e74f883da
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x9813878822…
-- traced on $2,160 $1,080
Unattributed address 0x7903...41a9
0x7903bdfb222672ba488605945887c3fd822141a9
Unattributed address
unlabelled (0.00)
Ethereum direct -- traced on $886 $886
Binance Hot Wallet 14
PoR Binance historical w=0.00
0x28c6c06298d514db089934071355e5743bf21d60
Regulated exchange or VASP
public (1.00)
Ethereum indirect
via 0x975af4f200…
MT out of sight — exchange-internal $1,475 $738
Unattributed address 0x15fe...4240
0x15feecbfd8688d43462eeaa1ccdd386de6724240
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x17f9082853…
-- traced on $1,273 $637
Unattributed address 0x5171...4283
0x517104583428b06de592896411a300e995094283
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x27e82ba6af…
-- traced on $1,264 $632
Unattributed address 0x18e2...82f6
0x18e296053cbdf986196903e889b7dca7a73882f6
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x5171045834…
-- traced on $1,264 $632
ERC20Locker
0x23ddd3e3692d1861ed57ede224608875809e127f
Unattributed address
blockscout (0.70)
Ethereum indirect
via 0xdcbeffbecc…
-- traced on $1,224 $612
Unattributed address 0x18e2...82f6
0x18e296053cbdf986196903e889b7dca7a73882f6
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x67a7229e68…
-- traced on $1,024 $512
Unattributed address 0x0c23...98d5
0x0c23ff22648580c59e1e68f6ca8ae37551b198d5
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0xcf148146a2…
-- traced on $1,018 $509
1inch Aggregation Router V4
0x1111111254fb6c44bac0bed2854e76f90643097d
Decentralised finance protocol
public (1.00)
Ethereum indirect
via 0x7759e90934…
-- traced on $1,012 $506
Unattributed address 0x260b...4cea
0x260b364fe0d3d37e6fd3cda0fa50926a06c54cea
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x67a7229e68…
-- traced on $1,001 $501
Unattributed address 0x868b...4e4e
0x868bc50f77a9edad42a4e0f5ba338cbf508c4e4e
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x17f9082853…
-- traced on $921 $461
Unattributed address 0x1d7e...485c
0x1d7e9e9d107cfefa4db33e27447708bc2122485c
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x744accf0a1…
-- traced on $914 $457
Unattributed address 0xf816...8ad0
0xf816b8ea458f3114c9829681ac96102544998ad0
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x17f9082853…
-- traced on $879 $440
Unattributed address 0xdad1...d930
0xdad1c12c5ef30c25d908ddaf4d435fbd0fcad930
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x9813878822…
-- traced on $844 $422
1inch V5 Router
0x1111111254eeb25477b68fb85ed929f73a960582
Decentralised finance protocol
public (1.00)
Ethereum indirect
via 0x7759e90934…
-- traced on $806 $403
Unattributed address 0xe9aa...70b4
0xe9aa46f0e94ec2d61354befd8669f60979d970b4
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0xdcbeffbecc…
-- traced on $765 $382
Binance 1
0x3f5ce5fbfe3e9af3971dd833d26ba9b5c936f0be
Regulated exchange or VASP
public (1.00)
Ethereum indirect
via 0x975af4f200…
MT out of sight — exchange-internal $685 $342
Unattributed address 0x8531...5807
0x8531f6d1a8d38dbe5903516c7e313662816c5807
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x27e82ba6af…
-- traced on $586 $293
Unattributed address 0xa082...2a77
0xa082b783d16395800977726627ea43234bf02a77
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x7759e90934…
-- traced on $538 $269
Unattributed address 0xb02f...77b5
0xb02f39e382c90160eb816de5e0e428ac771d77b5
Unattributed address
unlabelled (0.00)
Ethereum indirect
via 0x9813878822…
-- traced on $507 $253

Transfer sample

WhenChainDirectionCounterparty AmountValue
2026-08-31 ethereum in 0x0000000000000000000000000000000000000000 10000.000000 $0
2026-04-13 ethereum in 0xd86f4f7dbd63f350c884b23c0e5c3df70082524c 0.000000 $0
2026-04-13 ethereum in 0xd86f4f7dbd63f350c884b23c0e5c3df70082524c 0.000000 $0
2026-04-13 ethereum in 0xd86f4f7dbd63f350c884b23c0e5c3df70082524c 0.000000 $0
2026-02-01 ethereum in 0xc479c31aca1ba077899ca5dec4f3a8e8ece1f57e 0.000113 $0
2026-02-01 ethereum in 0xc479c31aca1ba077899ca5dec4f3a8e8ece1f57e 0.000218 $1
2025-12-24 ethereum in 0x4d723a2d19bff1e08b3d60347a9cd48970e9dbab 0.000000 $0
2025-11-28 ethereum in 0xbdd68ccc0a295d95845eea0e9eea15b5e8cdda0a 0.006524 $20
2025-09-17 ethereum in 0xc479c31aca1ba077899ca5dec4f3a8e8ece1f57e 0.000230 $1
2025-08-27 ethereum in 0x6a56aebe538c8a6b502bcf20e8b63ae418452833 0.000000 $0
2025-08-01 ethereum in 0x6ff8d3e416ec0a7e6611674b9c4344641bedcbdc 0.900000 $1
2025-06-10 ethereum in 0x6627c488e5cd393e20b1c43d267e5a91236d7db2 0.000001 $0
2025-05-25 ethereum in 0x9adc3f7e8b7e4e0d31bf7443c9815c1dcbf3c168 0.168888 $0
2024-10-18 ethereum in 0x20f8320addd70439b67df27389bbebd7a998e5bb 202104.000000 $0
2024-10-05 ethereum in 0x2072c65d8a599cdc48325bfd81c9725382828f2c 20878.230000 $0
2024-07-07 ethereum in 0x1dff7cd0e7ff958c3517da1747e7c556e1ae6a37 0.000399 $1
2024-06-13 ethereum in 0x0000000000000000000000000000000000000000 250000.000000 $0
2024-06-13 ethereum in 0x0000000000000000000000000000000000000000 2500.000000 $0
2023-02-17 ethereum out 0x38d6e3e06c5d3c018acbbf2482d63dc376bebdee 3.059895 $7,745
2023-02-17 ethereum out 0xdac17f958d2ee523a2206206994597c13d831ec7 0.000000 $0
2025-08-01 base in 0x833589fcd6edb6e08f4c7c32d4f71b54bda02913 1250.000000 $0
2025-01-22 base in 0xb063fbe607d03c787b2842f2af926ea632a61d85 1.000000 $0
2025-11-28 bsc in 0xbdd68ccc0a295d95845eea0e9eea15b5e8cdda0a 0.011145 $7
2024-05-09 bsc in 0x220a8074809598e5eda6d69235994b1563954854 50001.000000 $0
2025-12-08 polygon in 0x25c608acc7075abc30199224135b0c3f1181cb45 1.000000 $0

Risk level (1–5)

1 minimal below 2.0
2 low 2.0 to 4.0
3 medium 4.0 to 6.0
4 high 6.0 to 8.0
5 prohibited 8.0 and above

Continuous score 10.00 falls in the level 5 band (8.0 and above) under the balanced tolerance.

Reject. Exposure is outside any acceptable tolerance. Level 5 is above this institution's 3 auto-accept limit, so a human has to sign this off.

Policy: Balanced, boundaries 2.0 / 4.0 / 6.0 / 8.0. Change the risk tolerance →

The 1-5 level is the institution's policy applied to the 0-10 score, not a second measurement. Re-grading under a different tolerance changes the level and never the score.

Rules triggered

7 of 19 enabled rules matched. Tune the rule set →

block Any sanctions exposure
$10,803 (9.059% of traced value, any layer) against a 0.00% threshold. Sanctions liability does not scale with the amount.
block Direct sanctions list match
4 direct sanctions match(es) against OFAC, EU, UN, UK-HMT. A direct match is a prohibited dealing, not a risk rating.
block Mixer exposure above 1%
$2,664 (2.234% of traced value, any layer) against a 1.00% threshold.
block Score of 8.0 or above
Score 10.00 reached the 8.0 floor.
review Any mixer exposure
$2,664 (2.234% of traced value, any layer) against a 0.00% threshold.
review Score of 6.0 or above
Score 10.00 reached the 6.0 floor.
flag Score of 4.0 or above
Score 10.00 reached the 4.0 floor.

Subject attribution

NameTornado Cash Donation
CategorySanctioned entity or designated address weight 10
JurisdictionUnattributed (--)
Sourcepublic · confidence 1.00
Clustertornado-cash
recorded on ETH
A named group in the attribution source, not a co-spend cluster inferred from this wallet's transactions.

Score history

ScreenedScoreBand
2026-09-13 19:46 10.0 critical
2026-09-12 17:10 10.0 critical
2026-08-28 17:28 10.0 critical
2026-08-25 17:12 10.0 critical
2026-08-25 15:10 10.0 critical

Provenance

ethereumlive:alchemy
https://eth-mainnet.g.alchemy.com/v2/… | native=142 token=26 internal=132 | unpriced_tokens=16
baselive:alchemy
https://base-mainnet.g.alchemy.com/v2/… | native=0 token=2 internal=0 | unpriced_tokens=2
optimismlive:alchemy
https://opt-mainnet.g.alchemy.com/v2/… | native=0 token=0 internal=0 | internal transfers unavailable on this network
bsclive:alchemy
https://bnb-mainnet.g.alchemy.com/v2/… | native=1 token=1 internal=0 | internal transfers unavailable on this network; unpriced_tokens=1
polygonlive:alchemy
https://polygon-mainnet.g.alchemy.com/v2/… | native=1 token=11 internal=0 | unpriced_tokens=10
arbitrumlive:alchemy
https://arb-mainnet.g.alchemy.com/v2/… | native=0 token=0 internal=0 | internal transfers unavailable on this network
Label set 2463 entities, 20 categories, 85 clusters

Label sources

  • Sanctions: 943 designated addresses from the US Treasury OFAC SDN list, published 08/28/2026.
  • Token contracts: 927 identified from public token lists.
  • Cited public labels: 519 addresses from 34 source(s), each with a URL.
    • Aave address book: V3 Ethereum (98 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Ethereum.json
    • FBI/IC3 PSA: North Korea responsible for $1.5 billion Bybit hack (51 addresses) — https://www.ic3.gov/PSA/2025/PSA250226
    • Aave address book: AaveV3Polygon (45 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Polygon.json
    • Aave address book: V2 Ethereum (40 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV2Ethereum.json
    • Aave address book: AaveV3Arbitrum (39 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Arbitrum.json
    • Aave address book: AaveV3Optimism (31 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Optimism.json
    • Aave address book: AaveV3Base (25 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Base.json
    • Tornado Cash smart contracts (24 addresses) — https://docs.tornado.cash/general/tornado-cash-smart-contracts
    • Bybit: wallet addresses ownership explained (21 addresses) — https://www.bybit.com/en/help-center/article/Bybit-Wallet-Addresses-Ownership-Explained
    • Circle CCTP EVM contract addresses (20 addresses) — https://developers.circle.com/cctp/evm-smart-contracts
    • Aave address book: AaveV3BNB (18 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3BNB.json
    • Bitfinex: published public wallets (16 addresses) — https://github.com/bitfinexcom/pub/blob/main/wallets.txt
    • Aave address book: AaveV2Polygon (16 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV2Polygon.json
    • Aave address book: AaveV3EthereumLido (12 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3EthereumLido.json
    • Crypto.com: Transparency First cold-wallet list (10 addresses) — https://crypto.com/en/company-news/transparency-first
    • Uniswap v3 Arbitrum deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/arbitrum-deployments
    • Uniswap v3 Optimism deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/optimism-deployments
    • Uniswap v3 Polygon deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/polygon-deployments
    • Lido deployed contracts (6 addresses) — https://docs.lido.fi/deployed-contracts/
    • Uniswap v3 Base deployments (6 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/base-deployments
    • Uniswap v3 Ethereum deployments (3 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/ethereum-deployments
    • Chainalysis: Euler Finance flash loan attack (2 addresses) — https://www.chainalysis.com/blog/euler-finance-flash-loan-attack/
    • Morpho deployed contracts (2 addresses) — https://docs.morpho.org/get-started/resources/addresses
    • Compound III USDC Ethereum roots (2 addresses) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usdc/roots.json
    • Aave address book: GhoEthereum (2 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/GhoEthereum.json
    • Railgun privacy system contracts (1 address) — https://docs.railgun.org/wiki/learn/helpful-links
    • Linea network contracts (1 address) — https://docs.linea.build/network/build/contracts
    • Starknet L1-L2 messaging (1 address) — https://docs.starknet.io/documentation/architecture_and_concepts/Network_Architecture/l1-l2-messaging/
    • Chainalysis: Wormhole hack February 2022 (1 address) — https://www.chainalysis.com/blog/wormhole-hack-february-2022/
    • Compound III USDS Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usds/roots.json
    • Compound III USDT Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usdt/roots.json
    • Compound III WBTC Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/wbtc/roots.json
    • Compound III WETH Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/weth/roots.json
    • Compound III WSTETH Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/wsteth/roots.json
  • Demonstration data: excluded — 118 synthetic entities were not scored.

Proof-of-reserves feed

Screen window

  • Up to 500 transfers across 3 indexer page(s) · default 2 hops · hop-2 budget 16 · hop-3 budget 12.

Artefact integrity

  • sha256+hmac · SHA-256 0546d3e72312626bef1cfd1c09df0a8dd18fa6878b04f6dfda25e36255876a1e · sealed 2026-09-12T17:10:23+00:00 · HMAC present.

Informative

Notice / Disclaimer

Limits that apply to this artefact as a whole. Sources and hashes stay in provenance; this section is how to read them.

  • Holistix scores combine public blockchain data with a seeded label set. Direct counterparties are observed on every screened chain. Onward and bridge hops are observed from a live indexer walk; they are modelled from the seed only when SAFESCORE_OFFLINE=1. Unlabelled counterparties stay unknown. Synthetic seed entities are demonstration labels, not live attribution. IP/node geolocation is not inferred.
  • direct counterparties are observed from chain data on every screened chain. Hop-2 and hop-3 same-chain walks are observed from a live indexer when online (budgets split inbound/outbound so Source and Hop columns both receive inputs), and modelled from the label seed only when SAFESCORE_OFFLINE=1. The far side of a bridge is always modelled: the crossing into the bridge is observed, but no transfer links it to a specific address on the destination chain, so value is attributed across that bridge cluster's known addresses there. Modelled hops cannot carry sanctions or terrorism-financing categories. IP/node geolocation is not inferred from first-seen time.
  • Token-contract labels name contracts, not wallet owners.
  • Demonstration data was excluded — 118 synthetic entities were not scored.
  • 211812 reserve-list address(es) from 2 ingested file(s). A hit is a snapshot claim, not a verification and not a host. Pages without an extractable address list stay in the bibliography only.
  • OKX: Landing page. The address list is the reserves zip linked from the download table, not this page.
  • OKX: Index of reserve and liability zips. Hits come from the zip.
  • OKX: Bulk reserve list. Indexed locally; not a cited label.
  • Binance: Live Merkle / Download All Address page. No public address file was extractable from this URL (WAF / account flow).
  • Binance: Addresses printed in the appendix, claimed as of the 22 Nov 2022 reporting date. Snapshot, not a current named-wallet page.
  • Activity beyond the stated screen window is not in the score.
  • Recompute the sha256+hmac digest against the JSON export to confirm this copy matches what was stored.