Holistic wallet report
0x28C6c06298d514Db089934071355E5743bf21d60
HX-bebd1e7b779c · screened 2026-09-12 17:32:11+00:00 · 6 chain(s) in one call · data source: live
Allow
No rule triggered. Proceed.
Holistix scores this wallet 1.0 of 10 (minimal risk) from a single screen across 6 chain(s), with activity on Ethereum, Base, Optimism, BNB Smart Chain, Polygon, Arbitrum. $316,991,306 of traced value breaks down as $316,003,961 direct, $987,345 one hop away and $0 beyond 0 bridge crossing(s). The score is driven by regulated exchange or vasp (98% of the score), unattributed address (2% of the score).
No material risk exposure identified.
Level 1 of 5
· minimal
Balanced tolerance
Traced value
$316,991,306
Direct
$316,003,961
observed on chain
One hop away
$987,345
weighted 50%
Across bridges
$0
0 crossing(s)
Balance held
$331,687,812
Chains active
6 / 6
ethereum, base, optimism, bsc, polygon, arbitrum
What the score is made of
Each category contributes on the same 0–10 scale and the score is the quadratic mean of those contributions, so the share of the score each category owns is exact — the percentages below sum to 100%.
direct exposure
one hop away
across a bridge
Regulated exchange or VASP
weight 1
1.00 of 10
· 98% of score
Regulated exchange or VASP contributes 1.00 of 10: $315,186,443 directly and $273,803 one hop away on BNB Smart Chain ($300,000,600), Optimism ($15,185,843), Ethereum ($273,803). Weighted exposure is 99.629% of traced value, at the 80.000% saturation point for this category.
Binance 8
· bsc · $300,000,600
Binance 8
· optimism · $15,185,843
Bitfinex Hot Wallet
· ethereum · $136,452
Unattributed address
weight 2
0.14 of 10
· 2% of score
Unattributed address contributes 0.14 of 10: $817,518 directly and $710,332 one hop away on Ethereum ($1,518,265), Base ($8,973), Arbitrum ($544). Weighted exposure is 0.371% of traced value, below the 80.000% saturation point for this category.
Unattributed address 0xca44...9ca0
· ethereum · $155,500
Unattributed address 0x0f9f...3e37
· ethereum · $152,751
Unattributed address 0xb3e8...bc88
· ethereum · $141,074
Decentralised finance protocol
weight 2
0.01 of 10
· 0% of score
Decentralised finance protocol contributes 0.01 of 10: $3,210 one hop away on Ethereum ($3,210), Base ($0), Optimism ($0). Weighted exposure is 0.001% of traced value, below the 80.000% saturation point for this category.
Lido stETH
· ethereum · $1,480
CoW Protocol Settlement
· ethereum · $1,440
Aave V3 WETH Gateway
· ethereum · $116
Cross-chain bridge
weight 3
0.00 of 10
· 0% of score
Cross-chain bridge carries no scoring weight in this model, so its $0 of flow does not affect the score.
BridgeToken
· base · $0
Merchant or payment processor
weight 1
0.00 of 10
· 0% of score
Merchant or payment processor carries no scoring weight in this model, so its $0 of flow does not affect the score.
Tether USD (USDT)
· ethereum · $0
Token contract
weight 1
0.00 of 10
· 0% of score
Token contract carries no scoring weight in this model, so its $0 of flow does not affect the score.
Renzo (REZ)
· ethereum · $0
Lisk (LSK)
· ethereum · $0
Gravity
· ethereum · $0
Flow of funds
Source and destination are kept apart on purpose. Illicit money arriving is a source-of-funds question the institution must report; clean money leaving towards a risky party is a destination question it may still be able to prevent.
Source of funds
Total
$15,962,453
842 transfer(s)
Largest single
$15,185,843
mean $18,958
Risk-relevant
0.0%
$0
Counterparties
510
4.865% unattributed
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Cross-chain bridge | 0.0% | $0 | 1 | protocol | BridgeToken |
| Unattributed address | 4.865% | $776,610 | 667 | unhosted | Unattributed address 0xca44...9ca0, Unattributed address 0x0f9f...3e37, Unattributed address 0xb3e8...bc88, Unattributed address 0xd01c...6019, Unattributed address 0x86a0...4c63 |
| Decentralised finance protocol | 0.0% | $0 | 117 | protocol | UniswapV2Pair, Uniswap V2, Aave V3 aWBTC, Aave V3 aWETH, Aave V3 aAAVE |
| Regulated exchange or VASP | 95.135% | $15,185,843 | 2 | hosted | Binance 8, Binance Hot Wallet |
| Token contract | 0.0% | $0 | 55 | unhosted | USD Coin (USDC), Pendle (PENDLE), Optimism (OP), Uniswap (UNI), Rocket Pool Protocol (RPL) |
Destination of funds
Total
$300,041,508
900 transfer(s)
Largest single
$300,000,600
mean $333,379
Risk-relevant
0.0%
$0
Counterparties
762
0.014% unattributed
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Unattributed address | 0.014% | $40,908 | 834 | unhosted | Unattributed address 0x3a42...42b3, Unattributed address 0xc218...9e5b, Unattributed address 0x31be...da34, Unattributed address 0x52f7...58c4, Unattributed address 0xb6a2...3200 |
| Regulated exchange or VASP | 99.986% | $300,000,600 | 6 | hosted | Binance 8 |
| Merchant or payment processor | 0.0% | $0 | 47 | hosted | Tether USD (USDT) |
| Token contract | 0.0% | $0 | 13 | unhosted | Renzo (REZ), Lisk (LSK), Gravity, My Neighbor Alice (ALICE), Ondo Finance (ONDO) |
Funds arrived mainly from regulated exchange or vasp (95.135%) across 842 inbound transfer(s) totalling $15,962,453. Funds left mainly to regulated exchange or vasp (99.986%) across 900 outbound transfer(s) totalling $300,041,508.
Round trips
| Counterparty | Category | In | Out | Net |
|---|---|---|---|---|
| Binance 8 | Regulated exchange or VASP | $15,185,843 | $300,000,600 | $-284,814,757 |
Both sides are computed from observed transfers only, so the percentages describe funds this screen actually saw move. Modelled hops are excluded here deliberately: a source-of-funds statement should not rest on an inferred counterparty.
Typology indicators
Exposure says who the wallet touched; these say what it was doing. A clean counterparty set does not rule out structuring.
5 indicator(s) triggered, 3 not observable with the data available.
| Indicator | Family | Status | What was found |
|---|---|---|---|
| Mixing or anonymising service use | privacy | clear | No traced value connects to a mixing service. |
| CoinJoin-shaped joint spend | privacy | high | 12 transfers of near-identical value inside a 6-hour window, the shape of a collaborative mix rather than ordinary payments. |
| Peel chain | structuring | medium | Run of 4 successively smaller outbound transfers totalling $7,557, consistent with peeling a bulk balance into increments. |
| Deposit splitting below a reporting threshold | structuring | clear | No counterparty received 3 or more transfers in the band beneath the reporting threshold. |
| Rapid pass-through | structuring | high | 130 outbound transfer(s) left within an hour of funds arriving; median dwell is 15.20h across 900 sample(s). |
| Bridge and cross-chain swap routing | cross chain | clear | No bridge crossing appears in this screen. |
| Swap and protocol routing concentration | cross chain | clear | Protocol routing accounts for 0.0% of flow, within normal range. |
| Burst transaction scheduling | network | medium | 191 transfers were broadcast inside a 5-minute window, which is automation rather than a person transacting. |
| Mempool and fee irregularities | network | unavailable | Zero-confirmation transactions, fee spikes and confirmation depth are not exposed on the chains in this screen, so this indicator is reported as unavailable rather than inferred. Bitcoin mempool.space is the exception, and it was not read here. |
| Unhosted wallet interaction | custody | clear | Self-custodied counterparties account for 0.3% of directly transacted value; hosted services account for 99.7%. |
| Deviation from stated customer profile | profile | unavailable | No stated customer profile was supplied, so deviation from expected behaviour cannot be scored. The wallet's own history is still in the report. |
| Opening deposit inconsistent with stated identity | identity | unavailable | No stated identity (account opening date, new-customer flag, or declared income) was supplied, so an opening deposit cannot be judged inconsistent and a new-user full withdrawal cannot be scored. PEP/RCA name screening and source-of-wealth documents are not in this product. The institution's own identity stack still has to sit beside this screen. |
| Many-to-one inbound wallet shape | identity | medium | 145 distinct inbound wallets sent value inside a 24-hour window ($775,998). That is a many-to-one wallet shape, not a finding that they are several people or share an IP. |
Indicators are computed from the observed transfer set and the composed exposure view. They describe transaction shape, not intent: a triggered indicator is a reason to look, not a finding of wrongdoing. Profile deviation is scored only when the institution supplies a stated customer profile; without one the indicator is not observable rather than clear. Opening-deposit is scored only when account age or declared income is supplied. Many-to-one names inbound wallets, not people or a shared IP.
Sanctions and watchlist screening
No address in this screen matches a sanctions or watchlist entry, directly or through a traced hop.
Lists screened: EU, OFAC, UK-HMT, UN.
Counterparty services
The same exposure means different things through a licensed custodian and a no-KYC venue, so each service a wallet touched is scored on its own controls.
2 directory-listed service(s) appear in this screen; 0 of them are high risk or prohibited, carrying 0.0% of traced value.
| Service | Jurisdiction | Licence | KYC | Layers | Value | Entity risk |
|---|---|---|---|---|---|---|
| Binance Holdings Ltd
Regulated exchange or VASP |
Malta | licensed | strict | directindirect | $315,213,315 | 2.1 low |
| iFinex Inc. (Bitfinex)
Regulated exchange or VASP |
British Virgin Islands | licensed | strict | indirect | $209,078 | 3.3 low |
Only counterparties with a directory entry are profiled here. Everything else is covered by category exposure.
Cross-chain picture
Transfer diagram
Multi-hop fund flow across screened chains. Columns are hops; nodes in a column are ordered by first transfer time; arrow thickness tracks USD.
Counterparty category
Decentralised finance protocol
Regulated exchange or VASP
Token contract
Unattributed address
Transfer diagram: Source 3 → Source 2 → Hop 1 sources feed the subject; Hop 1 destinations → Hop 2 → Hop 3+ leave to the right. Nodes in a column are ordered by first transfer time. Circle area tracks USD. Solid arrows are observed; dashed arrows are onward or bridged hops. Orange arrows cross chains. Node colour is the counterparty category — see the key below the diagram. 1429 lower-value node(s) omitted for legibility. 42 arrow(s) · 28 multi-hop.
Ethereum ETH
Traced value$811,422
In / out$775,998 / $35,424
Transfers300
Balance$331,687,156
Sourcelive:alchemy
Base ETH
Traced value$5,484
In / out$0 / $5,484
Transfers300
Balance$25
Sourcelive:alchemy
Optimism ETH
Traced value$15,185,843
In / out$15,185,843 / $0
Transfers273
Balance$5
Sourcelive:alchemy
BNB Smart Chain BNB
Traced value$300,000,603
In / out$3 / $300,000,600
Transfers300
Balance$122
Sourcelive:alchemy
Polygon POL
Traced value$65
In / out$65 / $0
Transfers300
Balance$2
Sourcelive:alchemy
Arbitrum ETH
Traced value$544
In / out$544 / $0
Transfers269
Balance$502
Sourcelive:alchemy
Bridge crossings
Bridged value does not stop at the bridge contract, so Holistix follows it onto the chains the bridge connects and weights what it finds there at 70%.
No bridge crossings observed, so all exposure stays on the chains screened.
Counterparties
| Counterparty | Category | Chain | Layer | Jurisdiction | Visibility | Value | Weighted |
|---|---|---|---|---|---|---|---|
| Binance 8
PoR Binance historical
w=0.00
0xf977814e90da44bfa03b6295a0616a897441acec |
Regulated exchange or VASP
public
(1.00)
|
BNB Smart Chain | direct | MT | out of sight — exchange-internal | $300,000,600 | $300,000,600 |
| Binance 8
PoR Binance historical
w=0.00
0xf977814e90da44bfa03b6295a0616a897441acec |
Regulated exchange or VASP
public
(1.00)
|
Optimism | direct | MT | out of sight — exchange-internal | $15,185,843 | $15,185,843 |
| Unattributed address 0xca44...9ca0
0xca444c8009ed7edd45a5efaa579919fba6769ca0 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $155,500 | $155,500 |
| Unattributed address 0x0f9f...3e37
0x0f9f949a30b97c42ace87aae6f24ee2607003e37 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $152,751 | $152,751 |
| Unattributed address 0xb3e8...bc88
0xb3e8c75912438c2282e0afa51b41bff8e835bc88 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $141,074 | $141,074 |
| Unattributed address 0xd01c...6019
0xd01c8a9bba9f1e590016ec6136b6edbce1586019 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $111,000 | $111,000 |
| Unattributed address 0x86a0...4c63
0x86a067030a9668c13ff2a8c4d5415afc776d4c63 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $77,419 | $77,419 |
| Bitfinex Hot Wallet
0x77134cbc06cb00b66f4c7e623d5fdbf6777635ec |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0xb3e8c75912… |
VG | out of sight — exchange-internal | $136,452 | $68,226 |
| Unattributed address 0x8b4e...38b8
0x8b4ec26384bf34b9a81d412a40913dcb107038b8 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xd01c8a9bba… |
-- | traced on | $89,676 | $44,838 |
| Unattributed address 0x1143...56e1
0x1143f311776aa2a7885d7416078e1fb5059756e1 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xca444c8009… |
-- | traced on | $72,700 | $36,350 |
| Unattributed address 0xe873...d710
0xe8736af1926e9d8f5a6602fbbb0893b26436d710 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x86a067030a… |
-- | traced on | $61,886 | $30,943 |
| Bitfinex Hot Wallet
0x77134cbc06cb00b66f4c7e623d5fdbf6777635ec |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x0f9f949a30… |
VG | out of sight — exchange-internal | $48,273 | $24,137 |
| Unattributed address 0xd0e8...a1ef
0xd0e83490a55e671b3cf39cd027f0f9035ec5a1ef |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $17,717 | $17,717 |
| Coinbase 10
0xa9d1e08c7793af67e9d92fe308d5697fb81d3e43 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0xca444c8009… |
US | out of sight — exchange-internal | $32,186 | $16,093 |
| Unattributed address 0x7187...380d
0x7187d03bae0acb247a2ae99d7d5406f8df42380d |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x8b4ec26384… |
-- | traced on | $31,955 | $15,977 |
| Unattributed address 0x2767...374a
0x2767b11afc19c8b2407a381843126d80c4de374a |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $15,011 | $15,011 |
| Unattributed address 0xa1ab...df09
0xa1abfa21f80ecf401bd41365adbb6fef6fefdf09 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x0f9f949a30… |
-- | traced on | $27,540 | $13,770 |
| Unattributed address 0x3d42...6a34
0x3d4291fcdb943a5d2284b0b45ab8b9a208d36a34 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xca444c8009… |
-- | traced on | $26,346 | $13,173 |
| Unattributed address 0x3a42...42b3
0x3a4245a215a7af26438e42d97d21119b769842b3 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $13,061 | $13,061 |
| Unattributed address 0xa8a8...df30
0xa8a86d96dda8f01ce88341325af4c920bef4df30 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xca444c8009… |
-- | traced on | $23,805 | $11,903 |
| Unattributed address 0xd67a...02ae
0xd67a223e59afae2cfca49179def469fad60e02ae |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x1143f31177… |
-- | traced on | $22,750 | $11,375 |
| Unattributed address 0xa4d9...c154
0xa4d9b3b646732052301538ad50c56ed6e106c154 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xd01c8a9bba… |
-- | traced on | $21,324 | $10,662 |
| Unattributed address 0x6242...dc9f
0x62425cd6bdcb6bfe51558ea465b063486b70dc9f |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x0f9f949a30… |
-- | traced on | $18,197 | $9,098 |
| Unattributed address 0x9638...d343
0x96381b9f1e73cba58ffdf5c4d9754e32d0d9d343 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xa1abfa21f8… |
-- | traced on | $17,244 | $8,622 |
| ERC1967Proxy
0x2744dfd9898f0babbc570cc594bbbc84b487a22b |
Unattributed address
blockscout
(0.70)
|
Ethereum | indirect
via 0x0f9f949a30… |
-- | traced on | $17,002 | $8,501 |
| Unattributed address 0x46da...ec01
0x46da2a64546c074ad15ce365ff5756d8a2a9ec01 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $7,766 | $7,766 |
| Unattributed address 0x997a...2ba2
0x997a19bc9a964b14f4b7d709679746326c0e2ba2 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x2767b11afc… |
-- | traced on | $15,011 | $7,506 |
| Binance Hot Wallet 15
PoR Binance historical
w=0.00
0x21a31ee1afc51d94c2efccaa2092ad1028285549 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0xe8736af192… |
MT | out of sight — exchange-internal | $14,916 | $7,458 |
| Unattributed address 0x1111...ca11
0x111116053f09d34a7eae8102887004445176ca11 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xe8736af192… |
-- | traced on | $14,893 | $7,447 |
| Unattributed address 0x668c...c229
0x668cce3c6c5b2650562e94442700fbcf54d2c229 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x1143f31177… |
-- | traced on | $14,719 | $7,360 |
| Unattributed address 0x0bc7...6d45
0x0bc7141c1eaae560fe86b43cd87c85eb3d426d45 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x1143f31177… |
-- | traced on | $13,623 | $6,811 |
| Unattributed address 0xa29e...4ff5
0xa29e963992597b21bcdcaa969d571984869c4ff5 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x8b4ec26384… |
-- | traced on | $13,562 | $6,781 |
| Unattributed address 0xc218...9e5b
0xc21814439c19112aff2a4b1d7e99f58aecef9e5b |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $6,761 | $6,761 |
| Unattributed address 0x6f1a...c37a
0x6f1a96df533f778cc737ff5441ccf05bc3e9c37a |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x8b4ec26384… |
-- | traced on | $13,390 | $6,695 |
| Unattributed address 0xb022...f996
0xb0222b3455274dbcb26650100aee06f700f9f996 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x8b4ec26384… |
-- | traced on | $13,134 | $6,567 |
| Bitfinex Hot Wallet
0x77134cbc06cb00b66f4c7e623d5fdbf6777635ec |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0x3a4245a215… |
VG | out of sight — exchange-internal | $13,061 | $6,531 |
| Unattributed address 0xed40...e28d
0xed4015d2e6fe584e56b6d0b2f3050ca73b39e28d |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $6,086 | $6,086 |
| Unattributed address 0x3b98...5e4f
PoR OKX current
w=0.78
0x3b98b9e9cb75c1cb1729aab8f09ced2936505e4f |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x0f9f949a30… |
-- | traced on | $12,099 | $6,050 |
| Binance Hot Wallet 8
0x56eddb7aa87536c09ccc2793473599fd21a8b17f |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | indirect
via 0xe8736af192… |
MT | out of sight — exchange-internal | $11,956 | $5,978 |
| PMMAdapter
0x4ecd468e1010e006f768ec034e5a6d8803183469 |
Unattributed address
blockscout
(0.70)
|
Ethereum | indirect
via 0xe8736af192… |
-- | traced on | $11,439 | $5,720 |
Transfer sample
| When | Chain | Direction | Counterparty | Amount | Value |
|---|---|---|---|---|---|
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0x3b50805453023a91a8bf641e279401a0b23fa6f9 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0x276444a397a72a05dd56350b8d5cb929e9d6aedf | 38.904758 | $39 |
| 2026-09-12 | ethereum | out | 0x9c86f7eacc0e1f536fb0930834dcebb96d157c01 | 30.038630 | $30 |
| 2026-09-12 | ethereum | out | 0x58e1885adc33d07b1afc16f11463163a1a28cced | 264215.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xe29764dfefeb15bd475be286d23d75a57892f252 | 7.070012 | $7 |
| 2026-09-12 | ethereum | out | 0x6033f7f88332b8db6ad452b7c6d5bb643990ae3f | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0x9c7beba8f6ef6643abd725e45a4e8387ef260649 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xd8a1d39f5d60b5d33e9e80c96ab6dfbd4893db21 | 5752.087600 | $0 |
| 2026-09-12 | ethereum | out | 0x4661dd64be00e7af9c3ecaa342e039c6097a738d | 325.355979 | $0 |
| 2026-09-12 | ethereum | out | 0x9f6e9b9161b3dc5070f455af83b5f787857d385a | 64.700000 | $65 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xc1c8e2e61ba166bd09bcfd2adb8d44df7f65fba1 | 5.180000 | $5 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055 | 0.000000 | $0 |
| 2026-09-12 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-09 | base | in | 0x82b28c96dc096c5ac48d1a7a047bf90e9753b8bd | 4902.920000 | $0 |
| 2026-09-09 | base | in | 0xaa7f03dee84967dce7c2bbc6a060ba5a9227ddf9 | 1.000000 | $0 |
| 2026-09-09 | base | in | 0x04008fbd52e0dae2e8ab9a94d57d9fb621bbe596 | 659.815280 | $0 |
| 2026-09-09 | base | in | 0x04008fbd52e0dae2e8ab9a94d57d9fb621bbe596 | 659.815280 | $0 |
| 2026-09-08 | base | in | 0x79339dc74099519a3255cc2000e0695125acbeef | 1832.240000 | $0 |
Risk level (1–5)
1
minimal
below 2.0
2
low
2.0 to 4.0
3
medium
4.0 to 6.0
4
high
6.0 to 8.0
5
prohibited
8.0 and above
Continuous score 1.01 falls in the level 1 band (below 2.0) under the balanced tolerance.
Accept. No material risk exposure identified.
Policy: Balanced, boundaries 2.0 / 4.0 / 6.0 / 8.0. Change the risk tolerance →
The 1-5 level is the institution's policy applied to the 0-10 score, not a second measurement. Re-grading under a different tolerance changes the level and never the score.
Rules triggered
0 of 19 enabled rules matched. Tune the rule set →
No rule matched, so the recommendation is to proceed.
Subject attribution
| Name | Binance Hot Wallet 14 |
|---|---|
| Category | Regulated exchange or VASP weight 1 |
| Jurisdiction | Malta (MT) |
| Source | public · confidence 1.00 |
| Cluster | binance
recorded on ETH, BTC
A named group in the attribution source, not a
co-spend cluster inferred from this wallet's transactions. |
Score history
| Screened | Score | Band |
|---|---|---|
| 2026-09-13 19:46 | 1.0 | minimal |
| 2026-09-12 17:32 | 1.0 | minimal |
| 2026-09-12 17:10 | 1.0 | minimal |
| 2026-08-29 15:29 | 2.0 | minimal |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:23 | 2.2 | low |
| 2026-08-29 15:13 | 2.0 | low |
| 2026-08-29 15:12 | 2.0 | low |
Provenance
| ethereum | live:alchemy
https://eth-mainnet.g.alchemy.com/v2/… | native=108 token=192 internal=0 | unpriced_tokens=43 |
|---|---|
| base | live:alchemy
https://base-mainnet.g.alchemy.com/v2/… | native=2 token=298 internal=0 | unpriced_tokens=296 |
| optimism | live:alchemy
https://opt-mainnet.g.alchemy.com/v2/… | native=6 token=267 internal=0 | internal transfers unavailable on this network; unpriced_tokens=266 |
| bsc | live:alchemy
https://bnb-mainnet.g.alchemy.com/v2/… | native=7 token=293 internal=0 | internal transfers unavailable on this network; unpriced_tokens=287 |
| polygon | live:alchemy
https://polygon-mainnet.g.alchemy.com/v2/… | native=24 token=276 internal=0 | unpriced_tokens=231 |
| arbitrum | live:alchemy
https://arb-mainnet.g.alchemy.com/v2/… | native=23 token=246 internal=0 | internal transfers unavailable on this network; unpriced_tokens=237 |
| Label set | 2463 entities, 20 categories, 85 clusters |
Label sources
- Sanctions: 943 designated addresses from the US Treasury OFAC SDN list, published 08/28/2026.
- Token contracts: 927 identified from public token lists.
-
Cited public labels:
519 addresses from
34 source(s), each with a URL.
- Aave address book: V3 Ethereum (98 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Ethereum.json
- FBI/IC3 PSA: North Korea responsible for $1.5 billion Bybit hack (51 addresses) — https://www.ic3.gov/PSA/2025/PSA250226
- Aave address book: AaveV3Polygon (45 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Polygon.json
- Aave address book: V2 Ethereum (40 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV2Ethereum.json
- Aave address book: AaveV3Arbitrum (39 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Arbitrum.json
- Aave address book: AaveV3Optimism (31 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Optimism.json
- Aave address book: AaveV3Base (25 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Base.json
- Tornado Cash smart contracts (24 addresses) — https://docs.tornado.cash/general/tornado-cash-smart-contracts
- Bybit: wallet addresses ownership explained (21 addresses) — https://www.bybit.com/en/help-center/article/Bybit-Wallet-Addresses-Ownership-Explained
- Circle CCTP EVM contract addresses (20 addresses) — https://developers.circle.com/cctp/evm-smart-contracts
- Aave address book: AaveV3BNB (18 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3BNB.json
- Bitfinex: published public wallets (16 addresses) — https://github.com/bitfinexcom/pub/blob/main/wallets.txt
- Aave address book: AaveV2Polygon (16 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV2Polygon.json
- Aave address book: AaveV3EthereumLido (12 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3EthereumLido.json
- Crypto.com: Transparency First cold-wallet list (10 addresses) — https://crypto.com/en/company-news/transparency-first
- Uniswap v3 Arbitrum deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/arbitrum-deployments
- Uniswap v3 Optimism deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/optimism-deployments
- Uniswap v3 Polygon deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/polygon-deployments
- Lido deployed contracts (6 addresses) — https://docs.lido.fi/deployed-contracts/
- Uniswap v3 Base deployments (6 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/base-deployments
- Uniswap v3 Ethereum deployments (3 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/ethereum-deployments
- Chainalysis: Euler Finance flash loan attack (2 addresses) — https://www.chainalysis.com/blog/euler-finance-flash-loan-attack/
- Morpho deployed contracts (2 addresses) — https://docs.morpho.org/get-started/resources/addresses
- Compound III USDC Ethereum roots (2 addresses) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usdc/roots.json
- Aave address book: GhoEthereum (2 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/GhoEthereum.json
- Railgun privacy system contracts (1 address) — https://docs.railgun.org/wiki/learn/helpful-links
- Linea network contracts (1 address) — https://docs.linea.build/network/build/contracts
- Starknet L1-L2 messaging (1 address) — https://docs.starknet.io/documentation/architecture_and_concepts/Network_Architecture/l1-l2-messaging/
- Chainalysis: Wormhole hack February 2022 (1 address) — https://www.chainalysis.com/blog/wormhole-hack-february-2022/
- Compound III USDS Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usds/roots.json
- Compound III USDT Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usdt/roots.json
- Compound III WBTC Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/wbtc/roots.json
- Compound III WETH Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/weth/roots.json
- Compound III WSTETH Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/wsteth/roots.json
- Demonstration data: excluded — 118 synthetic entities were not scored.
Proof-of-reserves feed
- OKX: OKX Proof of Reserves · bibliography only
- OKX: OKX Proof of Reserves downloads · bibliography only
- OKX: OKX reserves zip — 11 Aug 2026 · snapshot 2026-08-11 · 211,793 addresses indexed
- Binance: Binance Proof of Reserves · bibliography only
- Binance: Binance Mazars PoR report — 7 Dec 2022 · snapshot 2022-11-22 · 19 addresses indexed
Screen window
- Up to 500 transfers across 3 indexer page(s) · default 2 hops · hop-2 budget 16 · hop-3 budget 12.
Artefact integrity
-
sha256+hmac · SHA-256
96f050a10213a23389dd5b748e39920b55a86aecffeb6b0a6d840c7e779666c4· sealed 2026-09-12T17:32:12+00:00 · HMAC present.
Informative
Notice / Disclaimer
Limits that apply to this artefact as a whole. Sources and hashes stay in provenance; this section is how to read them.
- Holistix scores combine public blockchain data with a seeded label set. Direct counterparties are observed on every screened chain. Onward and bridge hops are observed from a live indexer walk; they are modelled from the seed only when SAFESCORE_OFFLINE=1. Unlabelled counterparties stay unknown. Synthetic seed entities are demonstration labels, not live attribution. IP/node geolocation is not inferred.
- direct counterparties are observed from chain data on every screened chain. Hop-2 and hop-3 same-chain walks are observed from a live indexer when online (budgets split inbound/outbound so Source and Hop columns both receive inputs), and modelled from the label seed only when SAFESCORE_OFFLINE=1. The far side of a bridge is always modelled: the crossing into the bridge is observed, but no transfer links it to a specific address on the destination chain, so value is attributed across that bridge cluster's known addresses there. Modelled hops cannot carry sanctions or terrorism-financing categories. IP/node geolocation is not inferred from first-seen time.
- Token-contract labels name contracts, not wallet owners.
- Demonstration data was excluded — 118 synthetic entities were not scored.
- 211812 reserve-list address(es) from 2 ingested file(s). A hit is a snapshot claim, not a verification and not a host. Pages without an extractable address list stay in the bibliography only.
- OKX: Landing page. The address list is the reserves zip linked from the download table, not this page.
- OKX: Index of reserve and liability zips. Hits come from the zip.
- OKX: Bulk reserve list. Indexed locally; not a cited label.
- Binance: Live Merkle / Download All Address page. No public address file was extractable from this URL (WAF / account flow).
- Binance: Addresses printed in the appendix, claimed as of the 22 Nov 2022 reporting date. Snapshot, not a current named-wallet page.
- Activity beyond the stated screen window is not in the score.
- Recompute the sha256+hmac digest against the JSON export to confirm this copy matches what was stored.