Holistic wallet report
0x28C6c06298d514Db089934071355E5743bf21d60
HX-9412cf1c6134 · screened 2026-08-25 14:30:15+00:00 · 3 chain(s) in one call · data source: live
Block
Block the transaction and escalate.
Holistix scores this wallet 6.8 of 10 (high risk) from a single screen across 3 chain(s), with activity on Ethereum, Base, Optimism. $3,303,257 of traced value breaks down as $3,303,257 direct, $943,806 one hop away and $109,411 beyond 8 bridge crossing(s). The score is driven by unlicensed peer-to-peer broker (54% of the score), scam, phishing or investment fraud (39% of the score), darknet marketplace (4% of the score).
Block pending review by a compliance officer.
Traced value
$3,303,257
Direct
$3,303,257
observed on chain
One hop away
$943,806
weighted 50%
Across bridges
$109,411
8 crossing(s)
Balance held
$660,323,170
Chains active
3 / 3
ethereum, base, optimism
What the score is made of
Each category contributes on the same 0–10 scale and the score is the quadratic mean of those contributions, so the share of the score each category owns is exact — the percentages below sum to 100%.
direct exposure
one hop away
across a bridge
Unlicensed peer-to-peer broker
weight 5
5.00 of 10
· 54% of score
Unlicensed peer-to-peer broker contributes 5.00 of 10: $2,798,508 directly on Ethereum ($2,798,508). Weighted exposure is 84.720% of traced value, at the 5.000% saturation point for this category.
Unlicensed peer-to-peer broker cluster 0xeae7...a4f4
· ethereum · $2,798,508
Scam, phishing or investment fraud
weight 7
4.28 of 10
· 39% of score
Scam, phishing or investment fraud contributes 4.28 of 10: $12,361 directly on Ethereum ($12,361). Weighted exposure is 0.374% of traced value, below the 1.000% saturation point for this category.
Scam, phishing or investment fraud cluster 0x2873...c227
· ethereum · $12,361
Darknet marketplace
weight 9
1.34 of 10
· 4% of score
Darknet marketplace contributes 1.35 of 10: $37 directly on Ethereum ($37). Weighted exposure is 0.001% of traced value, below the 0.050% saturation point for this category.
Darknet marketplace cluster 0x23f1...8d63
· ethereum · $37
Cross-chain bridge
weight 3
0.95 of 10
· 2% of score
Cross-chain bridge contributes 0.95 of 10: $137,014 directly and $27,754 one hop away and $21,752 across a bridge on Base ($148,508), Optimism ($37,695), Ethereum ($316). Weighted exposure is 5.029% of traced value, below the 50.000% saturation point for this category.
Helix Bridge (BASE)
· base · $49,535
Portal Cross-Chain (BASE)
· base · $36,176
Anyswap Relay (BASE)
· base · $35,359
Decentralised finance protocol
weight 2
0.65 of 10
· 1% of score
Decentralised finance protocol contributes 0.65 of 10: $233,066 directly and $46,919 one hop away and $27,590 across a bridge on Optimism ($172,438), Ethereum ($85,318), Base ($49,819). Weighted exposure is 8.350% of traced value, below the 80.000% saturation point for this category.
AaveLike Lending (OPTIMISM)
· optimism · $102,784
GMXLike Perps (OPTIMISM)
· optimism · $49,932
Decentralised finance protocol cluster 0xe91b...27c9
· ethereum · $42,842
Merchant or payment processor
weight 1
0.43 of 10
· 0% of score
Merchant or payment processor contributes 0.43 of 10: $49,165 directly and $867,616 one hop away and $23,671 across a bridge on Ethereum ($892,627), Base ($47,825). Weighted exposure is 15.123% of traced value, below the 80.000% saturation point for this category.
CloudHost Billing
· ethereum · $860,648
ShopChain Gateway (BASE)
· base · $46,917
USDC Token Contract
· ethereum · $10,038
Regulated exchange or VASP
weight 1
0.19 of 10
· 0% of score
Regulated exchange or VASP contributes 0.19 of 10: $68,917 directly and $1,110 one hop away and $36,398 across a bridge on Ethereum ($54,792), Base ($43,920), Bitcoin ($7,713). Weighted exposure is 2.874% of traced value, below the 80.000% saturation point for this category.
Marina Bay Digital (BASE)
· base · $43,920
Regulated exchange or VASP cluster 0x1015...96dd
· ethereum · $24,997
Baltic Exchange OU
· ethereum · $13,360
Unattributed address
weight 2
0.08 of 10
· 0% of score
Unattributed address contributes 0.08 of 10: $3,808 directly on Ethereum ($3,808). Weighted exposure is 0.115% of traced value, below the 80.000% saturation point for this category.
Unattributed address 0x7dff...34b9
· ethereum · $1,775
Unattributed address 0x53a3...c80b
· ethereum · $1,090
Unattributed address 0x122c...1af7
· ethereum · $943
Mining pool
weight 1
0.01 of 10
· 0% of score
Mining pool contributes 0.01 of 10: $381 directly on Ethereum ($381). Weighted exposure is 0.012% of traced value, below the 80.000% saturation point for this category.
Mining pool cluster 0x06f9...8bd7
· ethereum · $381
Regulated custodian
weight 1
0.01 of 10
· 0% of score
Regulated custodian contributes 0.01 of 10: $407 one hop away on Ethereum ($407). Weighted exposure is 0.006% of traced value, below the 80.000% saturation point for this category.
Rheinland Kustodie
· ethereum · $407
Cross-chain picture
Ethereum ETH
Traced value$2,912,540
In / out$2,910,564 / $1,976
Transfers16
Balance$660,232,723
Sourcelive:blockscout
Base ETH
Traced value$222,057
In / out$156,252 / $65,805
Transfers51
Balance$90,447
Sourcedeterministic-fallback
Optimism ETH
Traced value$168,660
In / out$83,656 / $85,004
Transfers38
Balance$0
Sourcedeterministic-fallback
Bridge crossings
Bridged value does not stop at the bridge contract, so Holistix follows it onto the chains the bridge connects and weights what it finds there at 70%.
| Crossing | Bridge | Value bridged | Far-side counterparties |
|---|---|---|---|
| Base → Ethereum | Helix Bridge (BASE) 0xa5bbc438f6986655796394181530999b4fcabc17 |
$26,433 |
USDC Token Contract · $10,038
Baltic Exchange OU · $13,360
|
| Base → Optimism | Helix Bridge (BASE) 0xa5bbc438f6986655796394181530999b4fcabc17 |
$25,959 |
Helix Bridge (OPTIMISM) · $16,302
Wormlink Bridge (OPTIMISM) · $5,449
GMXLike Perps (OPTIMISM) · $13,119
|
| Base → Ethereum | Portal Cross-Chain (BASE) 0xb373c02bb670f801b762bac3d4b4ed9a023da461 |
$16,753 |
LidoLike Staking · $5,791
SushiLike Router (ETH) · $8,680
Luxembourg Digital SA · $6,772
|
| Base → Bitcoin | Portal Cross-Chain (BASE) 0xb373c02bb670f801b762bac3d4b4ed9a023da461 |
$28,830 |
Bitfinex BTC Cold Wallet · $7,713
|
| Base → Ethereum | Anyswap Relay (BASE) 0xd1ea30ffeff598111701d319a6445bc23ba12865 |
$22,596 |
PayStream Processor (ETH) · $7,395
Marina Bay Digital (ETH) · $8,553
|
| Optimism → Ethereum | Helix Bridge (OPTIMISM) 0x7f9648485a4a81ef8e4925305ab9980248a5a140 |
$4,244 |
TravelPay Crypto · $2,321
|
| Optimism → Base | Helix Bridge (OPTIMISM) 0x7f9648485a4a81ef8e4925305ab9980248a5a140 |
$4,222 |
ShopChain Gateway (BASE) · $909
|
| Optimism → Ethereum | Wormlink Bridge (OPTIMISM) 0x423d1596dcef91f583b492337b83634973b78617 |
$4,500 |
CloudHost Billing · $3,009
|
Counterparties
| Counterparty | Category | Chain | Layer | Jurisdiction | Visibility | Value | Weighted |
|---|---|---|---|---|---|---|---|
| Unlicensed peer-to-peer broker cluster 0xeae7...a4f4
0xeae7380dd4cef6fbd1144f49e4d1e6964258a4f4 |
Unlicensed peer-to-peer broker
inferred
|
Ethereum | direct | RU | traced on | $2,798,508 | $2,798,508 |
| CloudHost Billing
0xd89f75a71eff5b28169044265ab6e8c64e22c477 |
Merchant or payment processor
synthetic
|
Ethereum | indirect
via 0xeae7380dd4… |
US | traced on | $860,648 | $430,324 |
| AaveLike Lending (OPTIMISM)
0x15bd07c796f316c60952f4c674d5e8e4848e8a25 |
Decentralised finance protocol
synthetic
|
Optimism | direct | -- | traced on | $102,784 | $102,784 |
| GMXLike Perps (OPTIMISM)
0xb58b40681fa31e33255b81840bb5faf2cbe6e767 |
Decentralised finance protocol
synthetic
|
Optimism | direct | -- | traced on | $49,932 | $49,932 |
| Helix Bridge (BASE)
0xa5bbc438f6986655796394181530999b4fcabc17 |
Cross-chain bridge
synthetic
|
Base | direct | -- | traced on | $49,535 | $49,535 |
| ShopChain Gateway (BASE)
0xaec101995c1175c592b98286756cf2d59f66148f |
Merchant or payment processor
synthetic
|
Base | direct | DE | traced on | $46,917 | $46,917 |
| Marina Bay Digital (BASE)
0x54582640aa0e305da5048a2619c1fae6cb8549a7 |
Regulated exchange or VASP
synthetic
|
Base | direct | SG | traced on | $43,920 | $43,920 |
| Decentralised finance protocol cluster 0xe91b...27c9
0xe91b373212f8ae32925cbcf39ab3a7b0763c27c9 |
Decentralised finance protocol
inferred
|
Ethereum | direct | -- | traced on | $42,842 | $42,842 |
| Portal Cross-Chain (BASE)
0xb373c02bb670f801b762bac3d4b4ed9a023da461 |
Cross-chain bridge
synthetic
|
Base | direct | SG | traced on | $36,176 | $36,176 |
| Anyswap Relay (BASE)
0xd1ea30ffeff598111701d319a6445bc23ba12865 |
Cross-chain bridge
synthetic
|
Base | direct | SC | traced on | $35,359 | $35,359 |
| Regulated exchange or VASP cluster 0x1015...96dd
0x101545f78f16bf84ef6c3a1a4f94e3c8c77c96dd |
Regulated exchange or VASP
inferred
|
Ethereum | direct | EE | traced on | $24,997 | $24,997 |
| Decentralised finance protocol cluster 0xddcd...43d9
0xddcd71b4636244347a203f72a93581ea0e3f43d9 |
Decentralised finance protocol
inferred
|
Ethereum | direct | -- | traced on | $24,026 | $24,026 |
| Helix Bridge (BASE)
0xa5bbc438f6986655796394181530999b4fcabc17 |
Cross-chain bridge
synthetic
|
Base | indirect
via 0xa5bbc438f6… |
-- | traced on | $27,437 | $13,719 |
| Scam, phishing or investment fraud cluster 0x2873...c227
0x2873ed87dd252028350728b8b65256f0ff9fc227 |
Scam, phishing or investment fraud
inferred
|
Ethereum | direct | VE | traced on | $12,361 | $12,361 |
| Helix Bridge (OPTIMISM)
0x7f9648485a4a81ef8e4925305ab9980248a5a140 |
Cross-chain bridge
synthetic
|
Optimism | bridge
via 0xa5bbc438f6… |
-- | traced on | $16,302 | $11,412 |
| SushiLike Router (BASE)
0x41fc2a6da435943f71f5e82964266ab25a8ffaaa |
Decentralised finance protocol
synthetic
|
Base | direct | -- | traced on | $10,149 | $10,149 |
| SushiLike Router (BASE)
0x41fc2a6da435943f71f5e82964266ab25a8ffaaa |
Decentralised finance protocol
synthetic
|
Base | indirect
via 0xb373c02bb6… |
-- | traced on | $19,926 | $9,963 |
| SushiLike Router (BASE)
0x41fc2a6da435943f71f5e82964266ab25a8ffaaa |
Decentralised finance protocol
synthetic
|
Base | indirect
via 0xd1ea30ffef… |
-- | traced on | $19,743 | $9,872 |
| Wormlink Bridge (OPTIMISM)
0x423d1596dcef91f583b492337b83634973b78617 |
Cross-chain bridge
synthetic
|
Optimism | direct | -- | traced on | $9,698 | $9,698 |
| Baltic Exchange OU
0xd95c198ec3382f08caa107017b5fda3d24d2828e |
Regulated exchange or VASP
synthetic
|
Ethereum | bridge
via 0xa5bbc438f6… |
EE | traced on | $13,360 | $9,352 |
| GMXLike Perps (OPTIMISM)
0xb58b40681fa31e33255b81840bb5faf2cbe6e767 |
Decentralised finance protocol
synthetic
|
Optimism | bridge
via 0xa5bbc438f6… |
-- | traced on | $13,119 | $9,183 |
| USDC Token Contract
0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 |
Merchant or payment processor
public
|
Ethereum | bridge
via 0xa5bbc438f6… |
US | traced on | $10,038 | $7,027 |
| Helix Bridge (OPTIMISM)
0x7f9648485a4a81ef8e4925305ab9980248a5a140 |
Cross-chain bridge
synthetic
|
Optimism | direct | -- | traced on | $6,246 | $6,246 |
| SushiLike Router (ETH)
0x96d5de8718b60e4e8f369ece59fa06851c311b65 |
Decentralised finance protocol
synthetic
|
Ethereum | bridge
via 0xb373c02bb6… |
-- | traced on | $8,680 | $6,076 |
| Marina Bay Digital (ETH)
0xf09f8cff7b7332d048851a946f6af2fed1e5635f |
Regulated exchange or VASP
synthetic
|
Ethereum | bridge
via 0xd1ea30ffef… |
SG | traced on | $8,553 | $5,987 |
| Bitfinex BTC Cold Wallet
1P5ZEDWTKTFGxQjZphgWPQUpe554WKDfHQ |
Regulated exchange or VASP
public
|
Bitcoin | bridge
via 0xb373c02bb6… |
VG | traced on | $7,713 | $5,399 |
| PayStream Processor (ETH)
0xecd6ff508e9b0cfae1863ba8f1d3d3c703ec634d |
Merchant or payment processor
synthetic
|
Ethereum | bridge
via 0xd1ea30ffef… |
GB | traced on | $7,395 | $5,176 |
| Luxembourg Digital SA
0x775fbc7193af437be0750d77c4bf602571519e21 |
Regulated exchange or VASP
synthetic
|
Ethereum | bridge
via 0xb373c02bb6… |
LU | traced on | $6,772 | $4,741 |
| LidoLike Staking
0x5688d7c18ec2a51db6e145c961d937adbf8e4bbc |
Decentralised finance protocol
synthetic
|
Ethereum | bridge
via 0xb373c02bb6… |
-- | traced on | $5,791 | $4,053 |
| Wormlink Bridge (OPTIMISM)
0x423d1596dcef91f583b492337b83634973b78617 |
Cross-chain bridge
synthetic
|
Optimism | bridge
via 0xa5bbc438f6… |
-- | traced on | $5,449 | $3,815 |
| PayStream Processor (ETH)
0xecd6ff508e9b0cfae1863ba8f1d3d3c703ec634d |
Merchant or payment processor
synthetic
|
Ethereum | indirect
via 0x2873ed87dd… |
GB | traced on | $6,952 | $3,476 |
| CloudHost Billing
0xd89f75a71eff5b28169044265ab6e8c64e22c477 |
Merchant or payment processor
synthetic
|
Ethereum | bridge
via 0x423d1596dc… |
US | traced on | $3,009 | $2,106 |
| Decentralised finance protocol cluster 0x72fd...7ce3
0x72fd38a24ad177dbdd388e2ad55fa1de155e7ce3 |
Decentralised finance protocol
inferred
|
Ethereum | direct | -- | traced on | $1,939 | $1,939 |
| AaveLike Lending (OPTIMISM)
0x15bd07c796f316c60952f4c674d5e8e4848e8a25 |
Decentralised finance protocol
synthetic
|
Optimism | indirect
via 0x7f9648485a… |
-- | traced on | $3,587 | $1,793 |
| Unattributed address 0x7dff...34b9
0x7dff30778732c15b2551d5a8a41578ca4f3834b9 |
Unattributed address
inferred
|
Ethereum | direct | -- | traced on | $1,775 | $1,775 |
| TravelPay Crypto
0x1532aed9ff7aa6f4485fc2ed228f35f8b29c3c8a |
Merchant or payment processor
synthetic
|
Ethereum | bridge
via 0x7f9648485a… |
MT | traced on | $2,321 | $1,625 |
| AaveLike Lending (OPTIMISM)
0x15bd07c796f316c60952f4c674d5e8e4848e8a25 |
Decentralised finance protocol
synthetic
|
Optimism | indirect
via 0x423d1596dc… |
-- | traced on | $3,016 | $1,508 |
| Merchant or payment processor cluster 0x9732...8503
0x9732798183f9aef26607fb6474aa588d7dca8503 |
Merchant or payment processor
inferred
|
Ethereum | direct | DE | traced on | $1,473 | $1,473 |
| Unattributed address 0x53a3...c80b
0x53a3dcedfcbf7b6269b71884179b22517c1bc80b |
Unattributed address
inferred
|
Ethereum | direct | -- | traced on | $1,090 | $1,090 |
| Unattributed address 0x122c...1af7
0x122c63abd5ade2aff5924e52858684eed4831af7 |
Unattributed address
inferred
|
Ethereum | direct | -- | traced on | $943 | $943 |
Transfer sample
| When | Chain | Direction | Counterparty | Amount | Value |
|---|---|---|---|---|---|
| ethereum | in | 0x7dff30778732c15b2551d5a8a41578ca4f3834b9 | 0.718000 | $1,775 | |
| ethereum | in | 0xe91b373212f8ae32925cbcf39ab3a7b0763c27c9 | 17.329650 | $42,842 | |
| ethereum | in | 0xbb837b407b9661bc1e2e47e62789c2a6da78d96c | 0.165175 | $408 | |
| ethereum | in | 0x53a3dcedfcbf7b6269b71884179b22517c1bc80b | 0.440982 | $1,090 | |
| ethereum | in | 0xddcd71b4636244347a203f72a93581ea0e3f43d9 | 9.718633 | $24,026 | |
| ethereum | in | 0x06f9ae7bed5de82362f54670e87882b4c7898bd7 | 0.154314 | $381 | |
| ethereum | out | 0x72fd38a24ad177dbdd388e2ad55fa1de155e7ce3 | 0.784354 | $1,939 | |
| ethereum | in | 0x101545f78f16bf84ef6c3a1a4f94e3c8c77c96dd | 10.111202 | $24,997 | |
| ethereum | in | 0x9732798183f9aef26607fb6474aa588d7dca8503 | 0.595695 | $1,473 | |
| ethereum | in | 0x83d8a64eca17c6bb13e0b50a152ae6be6cc6dea4 | 0.148486 | $367 | |
| ethereum | in | 0xeae7380dd4cef6fbd1144f49e4d1e6964258a4f4 | 1131.999969 | $2,798,508 | |
| ethereum | in | 0x4bc6180957886fe47dee24e2d5233534a599350e | 0.263513 | $651 | |
| ethereum | in | 0x2873ed87dd252028350728b8b65256f0ff9fc227 | 4.999981 | $12,361 | |
| ethereum | in | 0x122c63abd5ade2aff5924e52858684eed4831af7 | 0.381479 | $943 | |
| ethereum | in | 0xdb6152cb8a9972a40d69376a504f482bc4551186 | 0.299958 | $742 | |
| 2026-08-25 | ethereum | out | 0x23f1dbdf7083841c9485b8286e8ac5f675d18d63 | 0.014930 | $37 |
| 2026-07-09 | base | in | 0xaec101995c1175c592b98286756cf2d59f66148f | 0.258412 | $646 |
| 2026-07-08 | base | out | 0x41fc2a6da435943f71f5e82964266ab25a8ffaaa | 0.012483 | $31 |
| 2026-06-10 | base | in | 0xa5bbc438f6986655796394181530999b4fcabc17 | 0.384454 | $961 |
| 2026-06-02 | base | out | 0x54582640aa0e305da5048a2619c1fae6cb8549a7 | 0.422991 | $1,057 |
| 2026-05-26 | base | in | 0xb373c02bb670f801b762bac3d4b4ed9a023da461 | 0.039029 | $98 |
| 2026-05-12 | base | in | 0x54582640aa0e305da5048a2619c1fae6cb8549a7 | 14.815682 | $37,039 |
| 2026-05-03 | base | in | 0x54582640aa0e305da5048a2619c1fae6cb8549a7 | 0.007845 | $20 |
| 2026-04-21 | base | out | 0xb373c02bb670f801b762bac3d4b4ed9a023da461 | 0.917016 | $2,293 |
| 2026-04-18 | base | out | 0x41fc2a6da435943f71f5e82964266ab25a8ffaaa | 0.015085 | $38 |
Rules triggered
3 of 15 enabled rules matched. Tune the rule set →
block
Direct darknet market exposure
Condition met.
review
Score of 6.0 or above
Condition met.
flag
Score of 4.0 or above
Condition met.
Subject attribution
| Name | Binance Hot Wallet 14 |
|---|---|
| Category | Regulated exchange or VASP weight 1 |
| Jurisdiction | Malta (MT) |
| Source | public · confidence 1.00 |
| Cluster | binance
recorded on ETH, BTC
A named group in the attribution source, not a
co-spend cluster inferred from this wallet's transactions. |
Alerts from this screen
Material Change
Score moved +4.12 to 6.83 (high) since the previous screen; the material change threshold is 0.50.
Recommendation Change
Recommendation changed from allow to block.
Score history
| Screened | Score | Band |
|---|---|---|
| 2026-09-13 19:46 | 1.0 | minimal |
| 2026-09-12 17:32 | 1.0 | minimal |
| 2026-09-12 17:10 | 1.0 | minimal |
| 2026-08-29 15:29 | 2.0 | minimal |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:13 | 2.0 | low |
| 2026-08-29 15:12 | 2.0 | low |
Provenance
| ethereum | live:blockscout
https://eth.blockscout.com |
|---|---|
| base | deterministic-fallback
provider unavailable (AttributeError) | profile=clean |
| optimism | deterministic-fallback
provider unavailable (JSONDecodeError) | profile=clean |
| Label set | 134 entities, 19 categories, 85 clusters |
Informative
Notice / Disclaimer
Limits that apply to this artefact as a whole. Sources and hashes stay in provenance; this section is how to read them.
- Holistix scores combine public blockchain data with a seeded label set. Direct counterparties are observed; the onward hop and the far side of each bridge crossing are modelled deterministically. Entities marked synthetic or inferred are not real-world attributions.
- direct counterparties are observed from chain data; the onward same-chain hop and the far side of each bridge crossing are modelled deterministically from a hash of the parent address