Holistic wallet report
0x21a31Ee1afC51d94C2eFcCAa2092aD1028285549
HX-8e5a134fd099 · screened 2026-09-12 17:11:34+00:00 · 6 chain(s) in one call · data source: live
Not a reliable summary of this wallet
Holistix scores this wallet 1.0 of 10 (minimal risk) from a single screen across 6 chain(s), with activity on Ethereum, Base, Optimism, BNB Smart Chain, Polygon, Arbitrum. $198,935,198 of traced value breaks down as $198,594,152 direct, $341,046 one hop away and $0 beyond 0 bridge crossing(s). The score is driven by regulated exchange or vasp (99% of the score), unattributed address (1% of the score).
No material risk exposure identified.
What the score is made of
Each category contributes on the same 0–10 scale and the score is the quadratic mean of those contributions, so the share of the score each category owns is exact — the percentages below sum to 100%.
Flow of funds
Source and destination are kept apart on purpose. Illicit money arriving is a source-of-funds question the institution must report; clean money leaving towards a risky party is a destination question it may still be able to prevent.
Source of funds
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Cross-chain bridge | 0.0% | $0 | 1 | protocol | BridgeToken |
| Unattributed address | 0.001% | $2,296 | 500 | unhosted | Unattributed address 0x8f0d...b059, Unattributed address 0x5635...8c3c, Unattributed address 0xc981...ba2a, Unattributed address 0xa570...a512, Unattributed address 0x88a6...5cf4 |
| Decentralised finance protocol | 0.0% | $0 | 80 | protocol | Uniswap V2, UniswapV2Pair, Aave V3 aWBTC, Aave V3 aWETH, Aave V3 aAAVE |
| Regulated exchange or VASP | 99.999% | $198,391,205 | 120 | hosted | Binance Hot Wallet 14, Bybit Hot Wallet |
| Token contract | 0.0% | $0 | 89 | unhosted | USD Coin (USDC), Pendle (PENDLE), Optimism (OP), Uniswap (UNI), Rocket Pool Protocol (RPL) |
Destination of funds
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Unattributed address | 100.0% | $200,651 | 833 | unhosted | Unattributed address 0x980a...2a97, Unattributed address 0x3a42...42b3, Unattributed address 0x754d...4dae, Unattributed address 0x13f7...8b1d, Unattributed address 0x5ee0...1d2d |
| Merchant or payment processor | 0.0% | $0 | 52 | hosted | Tether USD (USDT) |
| Token contract | 0.0% | $0 | 15 | unhosted | VANRY, Ondo Finance (ONDO), Renzo (REZ), Ethena (ENA), Shiba Inu (SHIB) |
Funds arrived mainly from regulated exchange or vasp (99.999%) across 790 inbound transfer(s) totalling $198,393,501. Funds left mainly to unattributed address (100.0%) across 900 outbound transfer(s) totalling $200,651.
Both sides are computed from observed transfers only, so the percentages describe funds this screen actually saw move. Modelled hops are excluded here deliberately: a source-of-funds statement should not rest on an inferred counterparty.
Typology indicators
Exposure says who the wallet touched; these say what it was doing. A clean counterparty set does not rule out structuring.
5 indicator(s) triggered, 3 not observable with the data available.
| Indicator | Family | Status | What was found |
|---|---|---|---|
| Mixing or anonymising service use | privacy | clear | No traced value connects to a mixing service. |
| CoinJoin-shaped joint spend | privacy | high | 5 transfers of near-identical value inside a 6-hour window, the shape of a collaborative mix rather than ordinary payments. |
| Peel chain | structuring | high | Run of 5 successively smaller outbound transfers totalling $5,837, consistent with peeling a bulk balance into increments. |
| Deposit splitting below a reporting threshold | structuring | clear | No counterparty received 3 or more transfers in the band beneath the reporting threshold. |
| Rapid pass-through | structuring | high | 153 outbound transfer(s) left within an hour of funds arriving; median dwell is 11.63h across 900 sample(s). |
| Bridge and cross-chain swap routing | cross chain | clear | No bridge crossing appears in this screen. |
| Swap and protocol routing concentration | cross chain | clear | Protocol routing accounts for 0.0% of flow, within normal range. |
| Burst transaction scheduling | network | medium | 150 transfers were broadcast inside a 5-minute window, which is automation rather than a person transacting. |
| Mempool and fee irregularities | network | unavailable | Zero-confirmation transactions, fee spikes and confirmation depth are not exposed on the chains in this screen, so this indicator is reported as unavailable rather than inferred. Bitcoin mempool.space is the exception, and it was not read here. |
| Unhosted wallet interaction | custody | clear | Self-custodied counterparties account for 0.1% of directly transacted value; hosted services account for 99.9%. |
| Deviation from stated customer profile | profile | unavailable | No stated customer profile was supplied, so deviation from expected behaviour cannot be scored. The wallet's own history is still in the report. |
| Opening deposit inconsistent with stated identity | identity | unavailable | No stated identity (account opening date, new-customer flag, or declared income) was supplied, so an opening deposit cannot be judged inconsistent and a new-user full withdrawal cannot be scored. PEP/RCA name screening and source-of-wealth documents are not in this product. The institution's own identity stack still has to sit beside this screen. |
| Many-to-one inbound wallet shape | identity | medium | 32 distinct inbound wallets sent value inside a 24-hour window ($108,439,557). That is a many-to-one wallet shape, not a finding that they are several people or share an IP. |
Indicators are computed from the observed transfer set and the composed exposure view. They describe transaction shape, not intent: a triggered indicator is a reason to look, not a finding of wrongdoing. Profile deviation is scored only when the institution supplies a stated customer profile; without one the indicator is not observable rather than clear. Opening-deposit is scored only when account age or declared income is supplied. Many-to-one names inbound wallets, not people or a shared IP.
Sanctions and watchlist screening
No address in this screen matches a sanctions or watchlist entry, directly or through a traced hop.
Lists screened: EU, OFAC, UK-HMT, UN.
Forensic tracing
3 path(s) traced, 3 of them fully observed on chain; deepest is 1 hop(s).
Value flows left to right. Solid edges are observed transfers; dashed edges are modelled onward hops. Circle area is proportional to value, not to risk. Node colour is the counterparty category — see the key below the diagram. 1342 lower-value node(s) omitted for legibility.
Multi-hop transfer diagram
Fund flow by hop and first transfer time. Orange arrows cross chains; dashed arrows are onward or bridged hops.
Transfer diagram: Source 3 → Source 2 → Hop 1 sources feed the subject; Hop 1 destinations → Hop 2 → Hop 3+ leave to the right. Nodes in a column are ordered by first transfer time. Circle area tracks USD. Solid arrows are observed; dashed arrows are onward or bridged hops. Orange arrows cross chains. Node colour is the counterparty category — see the key below the diagram. 1318 lower-value node(s) omitted for legibility. 42 arrow(s) · 28 multi-hop.
When the funds moved
61% of inbound USD arrived in a 4-hour window starting 11 Sep 2026 13:39 UTC ($121,745,051 of $198,393,501). 100% of outbound USD left within one hour of an inbound transfer. The lower chart is activity on counterparties (hop 2+), not funds through this address.
Recent window: the newest 1690 transfers were read. This chart describes that window, not the wallet's lifetime.
Traced paths
3 path(s) from this wallet reach an identified endpoint, of which 3 are fully observed on chain. $198,391,205 traced across 1 hop(s): Binance Hot Wallet 14, ending at a regulated exchange or vasp on Ethereum. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request. 3 path(s) terminate at a hosted service, which is where an investigation can realistically recover identity information or freeze funds.
Timeline
| When | Chain | Direction | Counterparty | Value |
|---|---|---|---|---|
| 2022-06-20 08:03 | Optimism | in | 0xc981a08e11add9bc6f5c1dacdf72f5bd85bdba2a | $30 |
| 2022-12-18 22:36 | Arbitrum | in | 0x88a66357587906ce08e1452716cbdd0e75fa5cf4 | $10 |
| 2023-05-06 15:20 | Arbitrum | in | 0x092b1233159a7a156e869cbd700cf0b550d09ba7 | $0 |
| 2023-05-15 11:59 | Arbitrum | in | 0xfdb736b1793a96f70b1b361225a3ccfb7e112cab | $0 |
| 2023-05-18 05:19 | Arbitrum | in | 0x2b0a3ca2d1256b0bfca952f6e4dd1cc26d16c0a1 | $0 |
| 2023-05-29 18:56 | Arbitrum | in | 0x3a04a1044494f2e7add96db4c4786c8f2d99d494 | $0 |
| 2023-07-16 10:19 | Arbitrum | in | 0x9114f145cd929afd89094dc3919ec050dfa92eca | $0 |
| 2023-09-04 09:22 | Arbitrum | in | 0xf5cdd46a9e7be5dfe9259af9721997303228af5a | $0 |
| 2023-10-12 13:19 | Arbitrum | in | 0x3a4073b048c4fddd81add846e1bd35be7e643361 | $1 |
| 2023-10-23 22:06 | Arbitrum | in | 0x02af43c7ce861eef04931cf4ac6fd5b54a6f3f4b | $0 |
| 2023-11-03 21:29 | Arbitrum | in | 0xd152f549545093347a162dce210e7293f1452150 | $0 |
| 2023-11-05 17:48 | Arbitrum | in | 0x465056e94010554aaf8b933486176e6ab86923c4 | $0 |
| 2023-11-27 14:04 | Arbitrum | in | 0x549538e6c86b9ad74574b9fee6d540da7d752c2c | $0 |
| 2023-11-28 12:58 | Arbitrum | in | 0x549538e6c86b9ad74574b9fee6d540da7d752c2c | $0 |
| 2024-01-10 18:42 | Arbitrum | in | 0x0000000000000000000000000000000000000000 | $0 |
| 2024-02-04 12:27 | Arbitrum | in | 0xd152f549545093347a162dce210e7293f1452150 | $0 |
| 2024-03-15 08:07 | Arbitrum | in | 0x4630b2ef71eb5ec4b78c4ded96c100f3167637a9 | $0 |
| 2024-03-18 05:55 | Optimism | in | 0xacd03d601e5bb1b275bb94076ff46ed9d753435a | $0 |
| 2024-03-18 21:59 | Optimism | in | 0xe50fa9b3c56ffb159cb0fca61f5c9d750e8128c8 | $0 |
| 2024-03-21 08:02 | Optimism | in | 0x0000000000000000000000000000000000000000 | $0 |
Exhibits
| Address | Entity | Cluster | Attribution | Basis |
|---|---|---|---|---|
| 0x28c6c06298d514db089934071355e5743bf21d60 | Binance Hot Wallet 14 Regulated exchange or VASP |
binance
3 address(es) |
public | observed on chain |
| 0xdac17f958d2ee523a2206206994597c13d831ec7 | Tether USD (USDT) Merchant or payment processor |
tether
0 address(es) |
public | observed on chain |
| 0xf89d7b9c864f589bbf53a82105107622b35eaa40 | Bybit Hot Wallet Regulated exchange or VASP |
bybit
0 address(es) |
public | observed on chain |
Paths are assembled from the composed exposure view, walking each endpoint back to the subject. Direct hops are observed on chain. Onward and bridged hops are observed from a live indexer walk, or modelled from the seed when SAFESCORE_OFFLINE=1, and are marked as such on every hop. The transfer map lays those hops on chain lanes ordered by fund size and transfer timestamp.
Counterparty services
The same exposure means different things through a licensed custodian and a no-KYC venue, so each service a wallet touched is scored on its own controls.
2 directory-listed service(s) appear in this screen; 0 of them are high risk or prohibited, carrying 0.0% of traced value.
| Service | Jurisdiction | Licence | KYC | Layers | Value | Entity risk |
|---|---|---|---|---|---|---|
| Binance Holdings Ltd
Regulated exchange or VASP |
Malta | licensed | strict | directindirect | $198,397,717 | 2.1 low |
| iFinex Inc. (Bitfinex)
Regulated exchange or VASP |
British Virgin Islands | licensed | strict | indirect | $27,924 | 3.3 low |
Only counterparties with a directory entry are profiled here. Everything else is covered by category exposure.
Cross-chain picture
Ethereum ETH
Base ETH
Optimism ETH
BNB Smart Chain BNB
Polygon POL
Arbitrum ETH
Bridge crossings
Bridged value does not stop at the bridge contract, so Holistix follows it onto the chains the bridge connects and weights what it finds there at 70%.
No bridge crossings observed, so all exposure stays on the chains screened.
Counterparties
| Counterparty | Category | Chain | Layer | Jurisdiction | Visibility | Value | Weighted |
|---|---|---|---|---|---|---|---|
| Binance Hot Wallet 14
PoR Binance historical
w=0.00
0x28c6c06298d514db089934071355e5743bf21d60 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | MT | out of sight — exchange-internal | $198,391,205 | $198,391,205 |
| Unattributed address 0x980a...2a97
0x980ace18f7c43f33e1e3ad3811c511b45df12a97 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $115,000 | $115,000 |
| Unattributed address 0x57fb...849f
0x57fbe09a5213cce89ebc4c7769296c4543dc849f |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x980ace18f7… |
-- | traced on | $70,774 | $35,387 |
| Bitget Hot Wallet
0x1ab4973a48dc892cd9971ece8e01dcc7688f8f23 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x57fbe09a52… |
-- | out of sight — exchange-internal | $70,774 | $35,387 |
| Unattributed address 0x3a42...42b3
0x3a4245a215a7af26438e42d97d21119b769842b3 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $27,924 | $27,924 |
| Unattributed address 0x754d...4dae
0x754d19b1d8a3d7a634c7e6cf3f113d0e48a84dae |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $20,089 | $20,089 |
| Unattributed address 0xf440...b9bc
0xf440139a62b2b939699c5b3e09f88e40464ab9bc |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x95a1b771bd… |
-- | traced on | $31,590 | $15,795 |
| Unattributed address 0x95a1...1e14
0x95a1b771bd553173e5b178f03d376500ae8d1e14 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x980ace18f7… |
-- | traced on | $31,590 | $15,795 |
| Bitfinex Hot Wallet
0x77134cbc06cb00b66f4c7e623d5fdbf6777635ec |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x3a4245a215… |
VG | out of sight — exchange-internal | $27,924 | $13,962 |
| Unattributed address 0x1404...6b21
0x1404cb046c3b4a90490d80b52eb367245e316b21 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x754d19b1d8… |
-- | traced on | $20,089 | $10,044 |
| Unattributed address 0x13f7...8b1d
0x13f7d7266c72f0bac51328721c7136a1b2db8b1d |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $7,717 | $7,717 |
| Unattributed address 0x5ee0...1d2d
0x5ee01da29e9dea5f8bc9b4a2b983f5ea9d731d2d |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $7,210 | $7,210 |
| Unattributed address 0xca83...b033
0xca83f42bbf2abb63061f05728a18c8ee8124b033 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x980ace18f7… |
-- | traced on | $12,636 | $6,318 |
| Bitget Hot Wallet
0x1ab4973a48dc892cd9971ece8e01dcc7688f8f23 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0xca83f42bbf… |
-- | out of sight — exchange-internal | $12,636 | $6,318 |
| Unattributed address 0x2d4b...2685
0x2d4b389a062b7d334bc5d94dee657dc737242685 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x13f7d7266c… |
-- | traced on | $7,717 | $3,859 |
| Unattributed address 0x4944...4210
0x4944ad0026ddc429fa1e8c32c39761a4ed284210 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $3,732 | $3,732 |
| Unattributed address 0x567f...3ffb
0x567f58f14ff0897cc171ca370f51b364367f3ffb |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x5ee01da29e… |
-- | traced on | $6,511 | $3,256 |
| Binance Hot Wallet 14
PoR Binance historical
w=0.00
0x28c6c06298d514db089934071355e5743bf21d60 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x567f58f14f… |
MT | out of sight — exchange-internal | $6,511 | $3,256 |
| Unattributed address 0xf7cc...ee79
0xf7ccdccc4184bea8de912e1a2407ceb64ed2ee79 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $3,000 | $3,000 |
| Unattributed address 0x51db...fb5c
0x51dbd97fa14f4d78f8afc2e92a692a9e087efb5c |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $2,531 | $2,531 |
| Unattributed address 0x5c9b...0917
0x5c9bef3de1c4e2cdde670b029afa40750b4a0917 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x1404cb046c… |
-- | traced on | $4,567 | $2,283 |
| Unattributed address 0x9739...00d6
0x9739acd228c1eb5491cafe092ff965ef974100d6 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x1404cb046c… |
-- | traced on | $4,024 | $2,012 |
| Unattributed address 0x8f0d...b059
0x8f0d024e780b7e2fd633a4d6d43631a96e8cb059 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $2,000 | $2,000 |
| Unattributed address 0x9951...d626
0x9951e60b68058f1b839154e7845fcf214549d626 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $1,710 | $1,710 |
| Unattributed address 0x3fb9...7eb0
0x3fb9b9721fd028ffa2a8b87468395fe54eff7eb0 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xf7ccdccc41… |
-- | traced on | $2,930 | $1,465 |
| Unattributed address 0xcad2...3268
0xcad2153f444009405b541f28b3762f2e5d143268 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x2d4b389a06… |
-- | traced on | $2,902 | $1,451 |
| Unattributed address 0x32e6...fb88
0x32e63451c57750cd808236c963286eca7f40fb88 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $1,226 | $1,226 |
| Unattributed address 0x6b63...83f5
0x6b6352eb03f1d506acd7d1e43edeeaa321a483f5 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x4944ad0026… |
-- | traced on | $2,023 | $1,012 |
| Unattributed address 0x3fee...4928
0x3fee3358a1e28f96ab98ecccb78eaedd09484928 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $1,000 | $1,000 |
| Unattributed address 0x3d4d...cecb
0x3d4d496ec98b5f103f4cd60ca269a6ac6ef8cecb |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $1,000 | $1,000 |
| Unattributed address 0x9d7d...5d72
0x9d7d8b567ee10bcb4f9db438245e1d0668175d72 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x8f0d024e78… |
-- | traced on | $1,999 | $1,000 |
| Unattributed address 0x504f...8262
0x504fa84c90b136794b2f5de40ebfbdac24578262 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x1404cb046c… |
-- | traced on | $1,826 | $913 |
| Unattributed address 0x338e...786d
0x338e984fe66a560d48111e9002244ff3b8c7786d |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x1404cb046c… |
-- | traced on | $1,825 | $912 |
| Unattributed address 0xaf77...48ee
0xaf775619f4da0b426d60dd2cc0d2679db8ac48ee |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x51dbd97fa1… |
-- | traced on | $1,762 | $881 |
| Diamond
0xb300000b72deaeb607a12d5f54773d1c19c7028d |
Unattributed address
blockscout
(0.70)
|
Ethereum | indirect
via 0x4944ad0026… |
-- | traced on | $1,709 | $854 |
| Unattributed address 0xdb5b...7e27
0xdb5b1f8d03ab8d57c378b51f3e5ec37135f07e27 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x1404cb046c… |
-- | traced on | $1,644 | $822 |
| Unattributed address 0x7059...8449
0x70593e359c2da03092bcd6020f1f70a9df178449 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $821 | $821 |
| Unattributed address 0x8946...c7b2
0x8946df23b4fd9b492b6a8b79ff1797ac0582c7b2 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x1404cb046c… |
-- | traced on | $1,570 | $785 |
| Unattributed address 0xf761...9555
0xf7612b413c459465e675efe5a1c8f0f453e49555 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $781 | $781 |
| Unattributed address 0xfa4a...bb03
0xfa4abb98d015885a88d91a9f1646b951214cbb03 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $703 | $703 |
Transfer sample
| When | Chain | Direction | Counterparty | Amount | Value |
|---|---|---|---|---|---|
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0x45547348b7d3a2e62f7e37b8c79d95dc818a9ecc | 73.770000 | $74 |
| 2026-09-12 | ethereum | out | 0x0db2cdb1da658b9943f192dd3d88779f63fad9d6 | 0.003930 | $10 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0x8de5b80a0c1b02fe4976851d030b36122dbb8624 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xa391400109c18f7a54f3a217b1e9c796bcb2e002 | 0.053714 | $136 |
| 2026-09-12 | ethereum | out | 0xe36da735ca460bc224b5d7b408337ada86428843 | 10.000000 | $10 |
| 2026-09-12 | ethereum | out | 0xa275112f658afd95da598604f5622aa1fa6ed5d9 | 24690.413353 | $0 |
| 2026-09-12 | ethereum | out | 0xac6e7a6f26533df23b8277240cf1b0ad40d0e6c9 | 0.199930 | $506 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xc5fd009837d547a8fefd7b231ae64b76d086162c | 242.700000 | $243 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0x484cdd5163acb932fadb51be6b459a5c4c659167 | 99.370000 | $99 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xfaba6f8e4a5e8ab82f62fe7c39859fa577269be3 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0x73b48ce644dbd1447610b1b85bb120685230b865 | 500.000000 | $500 |
| 2026-09-12 | ethereum | out | 0xd9fd8fea1e2454649c9def163524ce382231a761 | 620.554739 | $621 |
| 2026-09-12 | ethereum | out | 0xea6e3fbdc91c377d09432af9997378d6b4551a64 | 118415.261003 | $0 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-09 | base | in | 0xaa7f03dee84967dce7c2bbc6a060ba5a9227ddf9 | 1.000000 | $0 |
| 2026-09-09 | base | in | 0x04008fbd52e0dae2e8ab9a94d57d9fb621bbe596 | 527.907686 | $0 |
| 2026-09-09 | base | in | 0x04008fbd52e0dae2e8ab9a94d57d9fb621bbe596 | 527.907686 | $0 |
| 2026-09-07 | base | in | 0xaa7f03dee84967dce7c2bbc6a060ba5a9227ddf9 | 1.000000 | $0 |
| 2026-09-03 | base | in | 0x63f0aa0163cc1f1f51ea0ffc6577328e6a2019b9 | 5.000000 | $0 |
Risk level (1–5)
Continuous score 1.00 falls in the level 1 band (below 2.0) under the balanced tolerance.
Accept. No material risk exposure identified.
Policy: Balanced, boundaries 2.0 / 4.0 / 6.0 / 8.0. Change the risk tolerance →
The 1-5 level is the institution's policy applied to the 0-10 score, not a second measurement. Re-grading under a different tolerance changes the level and never the score.
Rules triggered
0 of 19 enabled rules matched. Tune the rule set →
No rule matched, so the recommendation is to proceed.
Subject attribution
| Name | Binance Hot Wallet 15 |
|---|---|
| Category | Regulated exchange or VASP weight 1 |
| Jurisdiction | Malta (MT) |
| Source | public · confidence 1.00 |
| Cluster | binance
recorded on ETH, BTC
A named group in the attribution source, not a
co-spend cluster inferred from this wallet's transactions. |
Alerts from this screen
Score history
| Screened | Score | Band |
|---|---|---|
| 2026-09-13 19:48 | 1.0 | minimal |
| 2026-09-12 17:11 | 1.0 | minimal |
| 2026-08-28 16:22 | 1.1 | minimal |
| 2026-08-28 16:12 | 1.0 | minimal |
| 2026-08-28 16:02 | 8.8 | critical |
| 2026-08-28 16:02 | 8.8 | critical |
Provenance
| ethereum | live:alchemy
https://eth-mainnet.g.alchemy.com/v2/… | native=109 token=191 internal=0 | unpriced_tokens=129 |
|---|---|
| base | live:alchemy
https://base-mainnet.g.alchemy.com/v2/… | native=2 token=298 internal=0 | unpriced_tokens=296 |
| optimism | live:alchemy
https://opt-mainnet.g.alchemy.com/v2/… | native=4 token=284 internal=0 | internal transfers unavailable on this network; unpriced_tokens=284 |
| bsc | live:alchemy
https://bnb-mainnet.g.alchemy.com/v2/… | native=0 token=300 internal=0 | internal transfers unavailable on this network; unpriced_tokens=300 |
| polygon | live:alchemy
https://polygon-mainnet.g.alchemy.com/v2/… | native=4 token=296 internal=0 | unpriced_tokens=292 |
| arbitrum | live:alchemy
https://arb-mainnet.g.alchemy.com/v2/… | native=8 token=194 internal=0 | internal transfers unavailable on this network; unpriced_tokens=192 |
| Label set | 2463 entities, 20 categories, 85 clusters |
Label sources
- Sanctions: 943 designated addresses from the US Treasury OFAC SDN list, published 08/28/2026.
- Token contracts: 927 identified from public token lists.
-
Cited public labels:
519 addresses from
34 source(s), each with a URL.
- Aave address book: V3 Ethereum (98 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Ethereum.json
- FBI/IC3 PSA: North Korea responsible for $1.5 billion Bybit hack (51 addresses) — https://www.ic3.gov/PSA/2025/PSA250226
- Aave address book: AaveV3Polygon (45 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Polygon.json
- Aave address book: V2 Ethereum (40 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV2Ethereum.json
- Aave address book: AaveV3Arbitrum (39 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Arbitrum.json
- Aave address book: AaveV3Optimism (31 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Optimism.json
- Aave address book: AaveV3Base (25 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Base.json
- Tornado Cash smart contracts (24 addresses) — https://docs.tornado.cash/general/tornado-cash-smart-contracts
- Bybit: wallet addresses ownership explained (21 addresses) — https://www.bybit.com/en/help-center/article/Bybit-Wallet-Addresses-Ownership-Explained
- Circle CCTP EVM contract addresses (20 addresses) — https://developers.circle.com/cctp/evm-smart-contracts
- Aave address book: AaveV3BNB (18 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3BNB.json
- Bitfinex: published public wallets (16 addresses) — https://github.com/bitfinexcom/pub/blob/main/wallets.txt
- Aave address book: AaveV2Polygon (16 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV2Polygon.json
- Aave address book: AaveV3EthereumLido (12 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3EthereumLido.json
- Crypto.com: Transparency First cold-wallet list (10 addresses) — https://crypto.com/en/company-news/transparency-first
- Uniswap v3 Arbitrum deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/arbitrum-deployments
- Uniswap v3 Optimism deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/optimism-deployments
- Uniswap v3 Polygon deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/polygon-deployments
- Lido deployed contracts (6 addresses) — https://docs.lido.fi/deployed-contracts/
- Uniswap v3 Base deployments (6 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/base-deployments
- Uniswap v3 Ethereum deployments (3 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/ethereum-deployments
- Chainalysis: Euler Finance flash loan attack (2 addresses) — https://www.chainalysis.com/blog/euler-finance-flash-loan-attack/
- Morpho deployed contracts (2 addresses) — https://docs.morpho.org/get-started/resources/addresses
- Compound III USDC Ethereum roots (2 addresses) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usdc/roots.json
- Aave address book: GhoEthereum (2 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/GhoEthereum.json
- Railgun privacy system contracts (1 address) — https://docs.railgun.org/wiki/learn/helpful-links
- Linea network contracts (1 address) — https://docs.linea.build/network/build/contracts
- Starknet L1-L2 messaging (1 address) — https://docs.starknet.io/documentation/architecture_and_concepts/Network_Architecture/l1-l2-messaging/
- Chainalysis: Wormhole hack February 2022 (1 address) — https://www.chainalysis.com/blog/wormhole-hack-february-2022/
- Compound III USDS Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usds/roots.json
- Compound III USDT Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usdt/roots.json
- Compound III WBTC Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/wbtc/roots.json
- Compound III WETH Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/weth/roots.json
- Compound III WSTETH Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/wsteth/roots.json
- Demonstration data: excluded — 118 synthetic entities were not scored.
Proof-of-reserves feed
- OKX: OKX Proof of Reserves · bibliography only
- OKX: OKX Proof of Reserves downloads · bibliography only
- OKX: OKX reserves zip — 11 Aug 2026 · snapshot 2026-08-11 · 211,793 addresses indexed
- Binance: Binance Proof of Reserves · bibliography only
- Binance: Binance Mazars PoR report — 7 Dec 2022 · snapshot 2022-11-22 · 19 addresses indexed
Screen window
- Up to 500 transfers across 3 indexer page(s) · default 2 hops · hop-2 budget 16 · hop-3 budget 12.
Artefact integrity
-
sha256+hmac · SHA-256
50d2da2459c45acc535a668cbbaf7bd20ab87a7d5d6b38f5898245127fcc80bb· sealed 2026-09-12T17:11:35+00:00 · HMAC present.
Informative
Notice / Disclaimer
Limits that apply to this artefact as a whole. Sources and hashes stay in provenance; this section is how to read them.
- Holistix scores combine public blockchain data with a seeded label set. Direct counterparties are observed on every screened chain. Onward and bridge hops are observed from a live indexer walk; they are modelled from the seed only when SAFESCORE_OFFLINE=1. Unlabelled counterparties stay unknown. Synthetic seed entities are demonstration labels, not live attribution. IP/node geolocation is not inferred.
- direct counterparties are observed from chain data on every screened chain. Hop-2 and hop-3 same-chain walks are observed from a live indexer when online (budgets split inbound/outbound so Source and Hop columns both receive inputs), and modelled from the label seed only when SAFESCORE_OFFLINE=1. The far side of a bridge is always modelled: the crossing into the bridge is observed, but no transfer links it to a specific address on the destination chain, so value is attributed across that bridge cluster's known addresses there. Modelled hops cannot carry sanctions or terrorism-financing categories. IP/node geolocation is not inferred from first-seen time.
- Token-contract labels name contracts, not wallet owners.
- Demonstration data was excluded — 118 synthetic entities were not scored.
- 211812 reserve-list address(es) from 2 ingested file(s). A hit is a snapshot claim, not a verification and not a host. Pages without an extractable address list stay in the bibliography only.
- OKX: Landing page. The address list is the reserves zip linked from the download table, not this page.
- OKX: Index of reserve and liability zips. Hits come from the zip.
- OKX: Bulk reserve list. Indexed locally; not a cited label.
- Binance: Live Merkle / Download All Address page. No public address file was extractable from this URL (WAF / account flow).
- Binance: Addresses printed in the appendix, claimed as of the 22 Nov 2022 reporting date. Snapshot, not a current named-wallet page.
- Activity beyond the stated screen window is not in the score.
- Recompute the sha256+hmac digest against the JSON export to confirm this copy matches what was stored.