Holistic wallet report
0x21a31Ee1afC51d94C2eFcCAa2092aD1028285549
HX-844aac9f980f · screened 2026-08-28 16:12:35+00:00 · 6 chain(s) in one call · data source: unavailable
Holistix scores this wallet 1.0 of 10 (minimal risk) from a single screen across 6 chain(s), with activity on Ethereum, Polygon, Arbitrum. $238,093,195 of traced value breaks down as $238,093,195 direct, $681,074 one hop away and $0 beyond 0 bridge crossing(s). The score is driven by regulated exchange or vasp (98% of the score), unattributed address (2% of the score).
No material risk exposure identified.
What the score is made of
Each category contributes on the same 0–10 scale and the score is the quadratic mean of those contributions, so the share of the score each category owns is exact — the percentages below sum to 100%.
Flow of funds
Source and destination are kept apart on purpose. Illicit money arriving is a source-of-funds question the institution must report; clean money leaving towards a risky party is a destination question it may still be able to prevent.
Source of funds
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Cross-chain bridge | 0.0% | $0 | 3 | protocol | Bridged USDC (Polygon PoS Bridge) |
| Unattributed address | 0.0% | $242 | 401 | unhosted | Unattributed address 0x5635...8c3c, Unattributed address 0x88a6...5cf4, Unattributed address 0xe3bc...e55d, Unattributed address 0x7f12...3597, Unattributed address 0x3a40...3361 |
| Decentralised finance protocol | 0.0% | $0 | 10 | protocol | UniswapV3Pool, Aave v3 WETH |
| Regulated exchange or VASP | 100.0% | $237,649,348 | 127 | hosted | Binance Hot Wallet 14 |
Destination of funds
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Unattributed address | 100.0% | $443,606 | 110 | unhosted | Unattributed address 0x02b6...8f51, Unattributed address 0x07ae...0e67, Unattributed address 0xc781...de0a, Unattributed address 0xa68e...2c73, Unattributed address 0xd451...158d |
| Decentralised finance protocol | 0.0% | $0 | 1 | protocol | Compound |
| Merchant or payment processor | 0.0% | $0 | 39 | hosted | Tether USD (USDT) |
Funds arrived mainly from regulated exchange or vasp (100.0%) across 541 inbound transfer(s) totalling $237,649,590. Funds left mainly to unattributed address (100.0%) across 150 outbound transfer(s) totalling $443,606.
Both sides are computed from observed transfers only, so the percentages describe funds this screen actually saw move. Modelled hops are excluded here deliberately: a source-of-funds statement should not rest on an inferred counterparty.
Typology indicators
Exposure says who the wallet touched; these say what it was doing. A clean counterparty set does not rule out structuring.
4 indicator(s) triggered, 1 not observable with the data available.
| Indicator | Family | Status | What was found |
|---|---|---|---|
| Mixing or anonymising service use | privacy | clear | No traced value connects to a mixing service. |
| CoinJoin-shaped joint spend | privacy | high | 79 transfers of near-identical value inside a 6-hour window, the shape of a collaborative mix rather than ordinary payments. |
| Peel chain | structuring | medium | Run of 4 successively smaller outbound transfers totalling $17,135, consistent with peeling a bulk balance into increments. |
| Deposit splitting below a reporting threshold | structuring | clear | No counterparty received 3 or more transfers in the band beneath the reporting threshold. |
| Rapid pass-through | structuring | high | 150 outbound transfer(s) left within an hour of funds arriving; median dwell is 0.11h across 150 sample(s). |
| Bridge and cross-chain swap routing | cross chain | clear | No bridge crossing appears in this screen. |
| Swap and protocol routing concentration | cross chain | clear | Protocol routing accounts for 0.0% of flow, within normal range. |
| Burst transaction scheduling | network | medium | 146 transfers were broadcast inside a 5-minute window, which is automation rather than a person transacting. |
| Mempool and fee irregularities | network | unavailable | Zero-confirmation transactions, fee spikes and confirmation depth are not exposed by the keyless public indexers this system reads, so this indicator is reported as unavailable rather than inferred from confirmed history. |
| Unhosted wallet interaction | custody | clear | Self-custodied counterparties account for 0.2% of directly transacted value; hosted services account for 99.8%. |
Indicators are computed from the observed transfer set and the composed exposure view. They describe transaction shape, not intent: a triggered indicator is a reason to look, not a finding of wrongdoing.
Sanctions and watchlist screening
No address in this screen matches a sanctions or watchlist entry, directly or through a traced hop.
Lists screened: EU, OFAC, UK-HMT, UN.
Counterparty services
The same exposure means different things through a licensed custodian and a no-KYC venue, so each service a wallet touched is scored on its own controls.
1 directory-listed service(s) appear in this screen; 0 of them are high risk or prohibited, carrying 0.0% of traced value.
| Service | Jurisdiction | Licence | KYC | Layers | Value | Entity risk |
|---|---|---|---|---|---|---|
| Binance Holdings Ltd
Regulated exchange or VASP |
Malta | licensed | strict | direct | $237,649,348 | 2.1 low |
Only counterparties with a directory entry are profiled here. Everything else is covered by category exposure.
Cross-chain picture
Transfer diagram
Multi-hop fund flow across screened chains. Columns are hops; nodes in a column are ordered by first transfer time; arrow thickness tracks USD.
Transfer diagram: Source 3 → Source 2 → Hop 1 sources feed the subject; Hop 1 destinations → Hop 2 → Hop 3+ leave to the right. Nodes in a column are ordered by first transfer time. Circle area tracks USD. Solid arrows are observed; dashed arrows are onward or bridged hops. Orange arrows cross chains. Node colour is the counterparty category — see the key below the diagram. 303 lower-value node(s) omitted for legibility. 42 arrow(s) · 28 multi-hop.
Ethereum ETH
Base ETH
Optimism ETH
BNB Smart Chain BNB
Polygon POL
Arbitrum ETH
Bridge crossings
Bridged value does not stop at the bridge contract, so Holistix follows it onto the chains the bridge connects and weights what it finds there at 70%.
No bridge crossings observed, so all exposure stays on the chains screened.
Counterparties
| Counterparty | Category | Chain | Layer | Jurisdiction | Visibility | Value | Weighted |
|---|---|---|---|---|---|---|---|
| Binance Hot Wallet 14
0x28c6c06298d514db089934071355e5743bf21d60 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | MT | traced on | $237,649,348 | $237,649,348 |
| Unattributed address 0x02b6...8f51
0x02b63dfe119120e8680cfc34070a343cc35f8f51 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $240,000 | $240,000 |
| Unattributed address 0xbc9f...6143
0xbc9fd8a100d1cd33d72bc7197ddff8d041da6143 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x02b63dfe11… |
-- | traced on | $240,000 | $120,000 |
| Unattributed address 0x06cb...a211
0x06cb3220ff257ed33b4a41a7346df5a2bdf8a211 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xbc9fd8a100… |
-- | traced on | $240,000 | $120,000 |
| Unattributed address 0x07ae...0e67
0x07ae8551be970cb1cca11dd7a11f47ae82e70e67 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $109,353 | $109,353 |
| Unattributed address 0xc781...de0a
0xc78167809f4364219b9de072c2dfd51d91e9de0a |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $27,985 | $27,985 |
| Wrapped Ether (WETH)
0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2 |
Decentralised finance protocol
public
(1.00)
|
Ethereum | indirect
via 0x07ae8551be… |
-- | traced on | $55,254 | $27,627 |
| Unattributed address 0xa68e...2c73
0xa68e4120bee2b8b9e816b57374f82097cee82c73 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $25,000 | $25,000 |
| Unattributed address 0x60ac...36e2
0x60ac95ec1153aa8199751917ede25d0ca49a36e2 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x07ae8551be… |
-- | traced on | $33,934 | $16,967 |
| Unattributed address 0xd451...158d
0xd451fd37bc1cd1d3e46515027b0dd12f3f95158d |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $11,780 | $11,780 |
| Unattributed address 0x083d...8d31
0x083d352d51f860f316c4ee3810d7afc602978d31 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x60ac95ec11… |
-- | traced on | $16,409 | $8,205 |
| Unattributed address 0xab8a...673f
0xab8a1592472b6d00164b985ee5ccb052d11d673f |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $8,000 | $8,000 |
| Unattributed address 0x6c96...1dee
0x6c96de32cea08842dcc4058c14d3aaad7fa41dee |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x07ae8551be… |
-- | traced on | $10,542 | $5,271 |
| Unattributed address 0x4cd0...bc31
0x4cd00e387622c35bddb9b4c962c136462338bc31 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xd451fd37bc… |
-- | traced on | $9,846 | $4,923 |
| Unattributed address 0xf70d...dbef
0xf70da97812cb96acdf810712aa562db8dfa3dbef |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x4cd00e3876… |
-- | traced on | $9,846 | $4,923 |
| Unattributed address 0x7042...b6c2
0x7042141b22f5d44c974729847f22b3ff8616b6c2 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xab8a159247… |
-- | traced on | $8,000 | $4,000 |
| Unattributed address 0x8893...6bb9
0x8893d58c1c3d9d20bf927ad7d01cf7c4b92e6bb9 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x7042141b22… |
-- | traced on | $7,737 | $3,869 |
| Unattributed address 0x258f...18d7
0x258fa4f477806587f2608a014b2fe796e98b18d7 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $3,624 | $3,624 |
| Unattributed address 0xa53b...d5bf
0xa53bfcb99abc856ba5b7143a7f31760683c6d5bf |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $3,201 | $3,201 |
| Unattributed address 0xf356...fd97
0xf356c5ae74b8f5f15b196844c56f1f7ff2b7fd97 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $3,001 | $3,001 |
| Unattributed address 0xfd78...d002
0xfd78ee919681417d192449715b2594ab58f5d002 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x07ae8551be… |
-- | traced on | $5,922 | $2,961 |
| Unattributed address 0x0000...0000
0x0000000000000000000000000000000000000000 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xfd78ee9196… |
-- | traced on | $5,922 | $2,961 |
| Unattributed address 0xd94c...04a3
0xd94c3ce927d22b2d90f82840ce1089a036b204a3 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $2,750 | $2,750 |
| Unattributed address 0x5c7b...35c5
0x5c7bcd6e7de5423a257d81b442095a1a6ced35c5 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x60ac95ec11… |
-- | traced on | $5,169 | $2,585 |
| Unattributed address 0xb708...0f79
0xb708cb9f7bbd603ab420c001f105936071020f79 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $2,300 | $2,300 |
| Unattributed address 0x65b3...9c76
0x65b382653f7c31bc0af67f188122035461ec9c76 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x60ac95ec11… |
-- | traced on | $3,715 | $1,857 |
| Coinbase 10
0xa9d1e08c7793af67e9d92fe308d5697fb81d3e43 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0xa53bfcb99a… |
US | traced on | $3,201 | $1,600 |
| Unattributed address 0x1361...5351
0x136119e2e3d7ffda9fdb279c2163622507675351 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x60ac95ec11… |
-- | traced on | $2,579 | $1,290 |
| Unattributed address 0x7149...d843
0x7149ea330b68b4879f4af39e5f265d4885abd843 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x60ac95ec11… |
-- | traced on | $2,516 | $1,258 |
| Unattributed address 0x08c6...364c
0x08c6f91e2b681faf5e17227f2a44c307b3c1364c |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x6c96de32ce… |
-- | traced on | $1,990 | $995 |
| Unattributed address 0x741f...8a13
0x741f477cdb8f42f7844f67d167a64950149b8a13 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xd451fd37bc… |
-- | traced on | $1,934 | $967 |
| Unattributed address 0x284b...c4b9
0x284b98a77153f4703b95fdc11b3dbcc2660fc4b9 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $928 | $928 |
| Unattributed address 0x41cc...be6a
0x41cce446e7bb1cc28b49480f3b1fb108ac46be6a |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x07ae8551be… |
-- | traced on | $1,819 | $909 |
| Unattributed address 0xa2df...4888
0xa2df7a25d36d05bdaf8dfbe80751ef7145164888 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x60ac95ec11… |
-- | traced on | $1,760 | $880 |
| Unattributed address 0xe37e...c878
0xe37e7088ec263a3111c55c409d5c00f880cdc878 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $746 | $746 |
| Unattributed address 0x170f...a665
0x170faa7ed5a496fb9d5089b797f4d8200323a665 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $745 | $745 |
| Unattributed address 0xadee...ba65
0xadeed59f446cb0a141837e8f7c22710d759cba65 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x6c96de32ce… |
-- | traced on | $1,325 | $662 |
| Unattributed address 0xc848...6682
0xc848b643d19beea82c739264080cdc8a751a6682 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x6c96de32ce… |
-- | traced on | $1,019 | $509 |
| Unattributed address 0x0f51...f51b
0x0f51f0af1d4cc5b6e2d8dc82b733712d8fa5f51b |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $500 | $500 |
| Unattributed address 0xbf1e...83f6
0xbf1ef7e8f2b091351ddd4d5ef57e3c94e26c83f6 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x6c96de32ce… |
-- | traced on | $981 | $490 |
Transfer sample
| When | Chain | Direction | Counterparty | Amount | Value |
|---|---|---|---|---|---|
| 2026-08-28 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-08-28 | ethereum | out | 0xbbe41d8306d05ac2734878d449ee717b584f4fff | 320.240513 | $320 |
| 2026-08-28 | ethereum | out | 0xa53f8feda84786d1a616e18ef0116c3cf701d5bf | 3201.000000 | $0 |
| 2026-08-28 | ethereum | out | 0x07a2bf366865efdfeb8a8ebab6aad883ad460e67 | 43.741075 | $0 |
| 2026-08-28 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-08-28 | ethereum | out | 0x68749665ff8d2d112fa859aa293f07a622782f38 | 0.000000 | $0 |
| 2026-08-28 | ethereum | out | 0x57e114b691db790c35207b2e685d4a43181e6061 | 0.000000 | $0 |
| 2026-08-28 | ethereum | out | 0xde4ee8057785a7e8e800db58f9784845a5c2cbd6 | 0.000000 | $0 |
| 2026-08-28 | ethereum | out | 0x95ad61b0a150d79219dcf64e1e6cc01f0b64c4ce | 0.000000 | $0 |
| 2026-08-28 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-08-28 | ethereum | out | 0xcbc279065b232a6922e1698d37460ba12f2aee52 | 0.676553 | $0 |
| 2026-08-28 | ethereum | out | 0xb708cb9f7bbd603ab420c001f105936071020f79 | 2299.700000 | $2,300 |
| 2026-08-28 | ethereum | out | 0x739acf29ad2cec2b2b190c7a742984e6521400b6 | 369258145.000000 | $0 |
| 2026-08-28 | ethereum | out | 0x12e43ef80da37a098811890ab867005f278376bd | 25.580000 | $26 |
| 2026-08-28 | ethereum | out | 0xa5cd68cb373a7df0597952505f209e3d0a54780a | 21940.269065 | $0 |
| 2026-08-28 | ethereum | out | 0x9b56c76dbd2f4824d0c12250e6c9d48b04b05163 | 1421.829500 | $0 |
| 2026-08-28 | ethereum | out | 0x4c1bdb443dd37393e07d6e16b69a4a6b5262a159 | 0.007852 | $20 |
| 2026-08-28 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-08-28 | ethereum | out | 0xc00e94cb662c3520282e6f5717214004a7f26888 | 0.000000 | $0 |
| 2026-08-28 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-08-27 | polygon | in | 0x12a78d709f02dd9a3a3fc9e6b248f0d51a912ba4 | 777.000000 | $0 |
| 2026-08-25 | polygon | in | 0x12a78d709f02dd9a3a3fc9e6b248f0d51a912ba4 | 777.000000 | $0 |
| 2026-06-21 | polygon | in | 0x55a7ef596e730f4e1b98372bf975b648a344e438 | 0.000000 | $0 |
| 2026-06-21 | polygon | in | 0x1d74b7adc347dec5451de5eb4ee1c4040bbdde86 | 0.000000 | $0 |
| 2026-05-28 | polygon | in | 0x75dd23ba3ba67f9663cbf6f9bdc7ab4923dd91d7 | 0.000000 | $0 |
Risk level (1–5)
Continuous score 1.01 falls in the level 1 band (below 2.0) under the balanced tolerance.
Accept. No material risk exposure identified.
Policy: Balanced, boundaries 2.0 / 4.0 / 6.0 / 8.0. Change the risk tolerance →
The 1-5 level is the institution's policy applied to the 0-10 score, not a second measurement. Re-grading under a different tolerance changes the level and never the score.
Rules triggered
0 of 19 enabled rules matched. Tune the rule set →
No rule matched, so the recommendation is to proceed.
Subject attribution
| Name | Binance Hot Wallet 15 |
|---|---|
| Category | Regulated exchange or VASP weight 1 |
| Jurisdiction | Malta (MT) |
| Source | public · confidence 1.00 |
| Cluster | binance
recorded on ETH, BTC
A named group in the attribution source, not a
co-spend cluster inferred from this wallet's transactions. |
Alerts from this screen
Score history
| Screened | Score | Band |
|---|---|---|
| 2026-09-13 19:48 | 1.0 | minimal |
| 2026-09-12 17:11 | 1.0 | minimal |
| 2026-08-28 16:22 | 1.1 | minimal |
| 2026-08-28 16:12 | 1.0 | minimal |
| 2026-08-28 16:02 | 8.8 | critical |
| 2026-08-28 16:02 | 8.8 | critical |
Provenance
| ethereum | live:alchemy
https://eth-mainnet.g.alchemy.com/v2/… | native=90 token=210 internal=0 | unpriced_tokens=165 |
|---|---|
| base | unavailable
provider unavailable (ProviderError: chain indexer unavailable for base: alchemy (HTTPStatusError: Client error '403 Forbidden' for url 'https://base-mainnet.g.alchemy.com/v2/Bcls2ULsLnWWiVd-ZUEuv'
For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/403); blockscout (HTTPStatusError: Server error '500 Internal Server Error' for url 'https://base.blockscout.com/api/v2/addresses/0x21a31Ee1afC51d94C2eFcCAa2092aD1028285549/transactions'
For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/500)) |
| optimism | unavailable
provider unavailable (ProviderError: chain indexer unavailable for optimism: alchemy (HTTPStatusError: Client error '403 Forbidden' for url 'https://opt-mainnet.g.alchemy.com/v2/Bcls2ULsLnWWiVd-ZUEuv'
For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/403); blockscout (HTTPStatusError: Redirect response '301 Moved Permanently' for url 'https://optimism.blockscout.com/api/v2/addresses/0x21a31Ee1afC51d94C2eFcCAa2092aD1028285549/transactions'
Redirect location: 'https://explorer.optimism.io/api/v2/addresses/0x21a31Ee1afC51d94C2eFcCAa2092aD1028285549/transactions'
For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/301)) |
| bsc | live:blockscout
https://bsc.blockscout.com | native=0 token=0 internal=0 |
| polygon | live:blockscout
https://polygon.blockscout.com | native=6 token=150 internal=138 |
| arbitrum | live:blockscout
https://arbitrum.blockscout.com | native=8 token=88 internal=1 |
| Label set | 187 entities, 19 categories, 85 clusters |
Informative
Notice / Disclaimer
Limits that apply to this artefact as a whole. Sources and hashes stay in provenance; this section is how to read them.
- Holistix scores combine public blockchain data with a seeded label set. Direct counterparties are observed on every screened chain. Onward and bridge hops are observed from a live indexer walk; they are modelled from the seed only when SAFESCORE_OFFLINE=1. Unlabelled counterparties stay unknown. Synthetic seed entities are demonstration labels, not live attribution. IP/node geolocation is not inferred.
- direct counterparties are observed from chain data on every screened chain. Hop-2 and hop-3 same-chain walks plus the far side of each bridge are observed from a live indexer when online (budgets split inbound/outbound so Source and Hop columns both receive inputs), and modelled from the label seed only when SAFESCORE_OFFLINE=1. IP/node geolocation is not inferred from first-seen time.