Holistic wallet report
0x21a31Ee1afC51d94C2eFcCAa2092aD1028285549
HX-f70dfc183439 · screened 2026-09-13 19:48:00+00:00 · 6 chain(s) in one call · data source: live
Not a reliable summary of this wallet
Holistix scores this wallet 1.0 of 10 (minimal risk) from a single screen across 6 chain(s), with activity on Ethereum, Base, Optimism, BNB Smart Chain, Polygon, Arbitrum. $140,841,249 of traced value breaks down as $140,666,965 direct, $174,284 one hop away and $0 beyond 0 bridge crossing(s). The score is driven by regulated exchange or vasp (99% of the score), unattributed address (1% of the score).
No material risk exposure identified.
What the score is made of
Each category contributes on the same 0–10 scale and the score is the quadratic mean of those contributions, so the share of the score each category owns is exact — the percentages below sum to 100%.
Flow of funds
Source and destination are kept apart on purpose. Illicit money arriving is a source-of-funds question the institution must report; clean money leaving towards a risky party is a destination question it may still be able to prevent.
Source of funds
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Cross-chain bridge | 0.0% | $0 | 1 | protocol | BridgeToken |
| Unattributed address | 0.0% | $281 | 485 | unhosted | Unattributed address 0x5635...8c3c, Unattributed address 0xc981...ba2a, Unattributed address 0x88a6...5cf4, Unattributed address 0x9924...085c, kingogello.eth |
| Decentralised finance protocol | 0.0% | $0 | 94 | protocol | Uniswap V2, UniswapV2Pair, UniswapV3Pool, Aave V3 aWBTC, Aave V3 aWETH |
| Regulated exchange or VASP | 100.0% | $140,565,395 | 121 | hosted | Binance Hot Wallet 14, Bybit Hot Wallet |
| Token contract | 0.0% | $0 | 89 | unhosted | USD Coin (USDC), Pendle (PENDLE), Optimism (OP), Uniswap (UNI), Rocket Pool Protocol (RPL) |
Destination of funds
| Category | Share | Value | Transfers | Custody | Top entities |
|---|---|---|---|---|---|
| Unattributed address | 100.0% | $101,289 | 839 | unhosted | Unattributed address 0xe71c...29c6, Unattributed address 0x0ee4...d33e, Unattributed address 0x7d61...2431, Unattributed address 0x137c...0244, Unattributed address 0x0e7c...592c |
| Merchant or payment processor | 0.0% | $0 | 49 | hosted | Tether USD (USDT) |
| Token contract | 0.0% | $0 | 12 | unhosted | Fetch ai (FET), The Sandbox (SAND), Lisk (LSK), Pepe (PEPE), ChainLink Token (LINK) |
Funds arrived mainly from regulated exchange or vasp (100.0%) across 790 inbound transfer(s) totalling $140,565,676. Funds left mainly to unattributed address (100.0%) across 900 outbound transfer(s) totalling $101,289.
Both sides are computed from observed transfers only, so the percentages describe funds this screen actually saw move. Modelled hops are excluded here deliberately: a source-of-funds statement should not rest on an inferred counterparty.
Typology indicators
Exposure says who the wallet touched; these say what it was doing. A clean counterparty set does not rule out structuring.
5 indicator(s) triggered, 3 not observable with the data available.
| Indicator | Family | Status | What was found |
|---|---|---|---|
| Mixing or anonymising service use | privacy | clear | No traced value connects to a mixing service. |
| CoinJoin-shaped joint spend | privacy | high | 9 transfers of near-identical value inside a 6-hour window, the shape of a collaborative mix rather than ordinary payments. |
| Peel chain | structuring | high | Run of 5 successively smaller outbound transfers totalling $5,356, consistent with peeling a bulk balance into increments. |
| Deposit splitting below a reporting threshold | structuring | clear | No counterparty received 3 or more transfers in the band beneath the reporting threshold. |
| Rapid pass-through | structuring | high | 153 outbound transfer(s) left within an hour of funds arriving; median dwell is 11.63h across 900 sample(s). |
| Bridge and cross-chain swap routing | cross chain | clear | No bridge crossing appears in this screen. |
| Swap and protocol routing concentration | cross chain | clear | Protocol routing accounts for 0.0% of flow, within normal range. |
| Burst transaction scheduling | network | medium | 150 transfers were broadcast inside a 5-minute window, which is automation rather than a person transacting. |
| Mempool and fee irregularities | network | unavailable | Zero-confirmation transactions, fee spikes and confirmation depth are not exposed on the chains in this screen, so this indicator is reported as unavailable rather than inferred. Bitcoin mempool.space is the exception, and it was not read here. |
| Unhosted wallet interaction | custody | clear | Self-custodied counterparties account for 0.1% of directly transacted value; hosted services account for 99.9%. |
| Deviation from stated customer profile | profile | unavailable | No stated customer profile was supplied, so deviation from expected behaviour cannot be scored. The wallet's own history is still in the report. |
| Opening deposit inconsistent with stated identity | identity | unavailable | No stated identity (account opening date, new-customer flag, or declared income) was supplied, so an opening deposit cannot be judged inconsistent and a new-user full withdrawal cannot be scored. PEP/RCA name screening and source-of-wealth documents are not in this product. The institution's own identity stack still has to sit beside this screen. |
| Many-to-one inbound wallet shape | identity | medium | 34 distinct inbound wallets sent value inside a 24-hour window ($140,565,396). That is a many-to-one wallet shape, not a finding that they are several people or share an IP. |
Indicators are computed from the observed transfer set and the composed exposure view. They describe transaction shape, not intent: a triggered indicator is a reason to look, not a finding of wrongdoing. Profile deviation is scored only when the institution supplies a stated customer profile; without one the indicator is not observable rather than clear. Opening-deposit is scored only when account age or declared income is supplied. Many-to-one names inbound wallets, not people or a shared IP.
Sanctions and watchlist screening
No address in this screen matches a sanctions or watchlist entry, directly or through a traced hop.
Lists screened: EU, OFAC, UK-HMT, UN.
Forensic tracing
3 path(s) traced, 3 of them fully observed on chain; deepest is 1 hop(s).
Value flows left to right. Solid edges are observed transfers; dashed edges are modelled onward hops. Circle area is proportional to value, not to risk. Node colour is the counterparty category — see the key below the diagram. 1330 lower-value node(s) omitted for legibility.
Multi-hop transfer diagram
Fund flow by hop and first transfer time. Orange arrows cross chains; dashed arrows are onward or bridged hops.
Transfer diagram: Source 3 → Source 2 → Hop 1 sources feed the subject; Hop 1 destinations → Hop 2 → Hop 3+ leave to the right. Nodes in a column are ordered by first transfer time. Circle area tracks USD. Solid arrows are observed; dashed arrows are onward or bridged hops. Orange arrows cross chains. Node colour is the counterparty category — see the key below the diagram. 1306 lower-value node(s) omitted for legibility. 42 arrow(s) · 28 multi-hop.
When the funds moved
51% of inbound USD arrived in a 4-hour window starting 13 Sep 2026 09:46 UTC ($72,226,561 of $140,565,676). The lower chart is activity on counterparties (hop 2+), not funds through this address.
Recent window: the newest 1690 transfers were read. This chart describes that window, not the wallet's lifetime.
Traced paths
3 path(s) from this wallet reach an identified endpoint, of which 3 are fully observed on chain. $140,565,395 traced across 1 hop(s): Binance Hot Wallet 14, ending at a regulated exchange or vasp on Ethereum. The endpoint is a hosted service, so the operator holds identity records for the receiving account and can be served with a request. 3 path(s) terminate at a hosted service, which is where an investigation can realistically recover identity information or freeze funds.
Timeline
| When | Chain | Direction | Counterparty | Value |
|---|---|---|---|---|
| 2022-06-20 08:03 | Optimism | in | 0xc981a08e11add9bc6f5c1dacdf72f5bd85bdba2a | $29 |
| 2022-12-18 22:36 | Arbitrum | in | 0x88a66357587906ce08e1452716cbdd0e75fa5cf4 | $10 |
| 2023-05-06 15:20 | Arbitrum | in | 0x092b1233159a7a156e869cbd700cf0b550d09ba7 | $0 |
| 2023-05-15 11:59 | Arbitrum | in | 0xfdb736b1793a96f70b1b361225a3ccfb7e112cab | $0 |
| 2023-05-18 05:19 | Arbitrum | in | 0x2b0a3ca2d1256b0bfca952f6e4dd1cc26d16c0a1 | $0 |
| 2023-05-29 18:56 | Arbitrum | in | 0x3a04a1044494f2e7add96db4c4786c8f2d99d494 | $0 |
| 2023-07-16 10:19 | Arbitrum | in | 0x9114f145cd929afd89094dc3919ec050dfa92eca | $0 |
| 2023-09-04 09:22 | Arbitrum | in | 0xf5cdd46a9e7be5dfe9259af9721997303228af5a | $0 |
| 2023-10-12 13:19 | Arbitrum | in | 0x3a4073b048c4fddd81add846e1bd35be7e643361 | $1 |
| 2023-10-23 22:06 | Arbitrum | in | 0x02af43c7ce861eef04931cf4ac6fd5b54a6f3f4b | $0 |
| 2023-11-03 21:29 | Arbitrum | in | 0xd152f549545093347a162dce210e7293f1452150 | $0 |
| 2023-11-05 17:48 | Arbitrum | in | 0x465056e94010554aaf8b933486176e6ab86923c4 | $0 |
| 2023-11-27 14:04 | Arbitrum | in | 0x549538e6c86b9ad74574b9fee6d540da7d752c2c | $0 |
| 2023-11-28 12:58 | Arbitrum | in | 0x549538e6c86b9ad74574b9fee6d540da7d752c2c | $0 |
| 2024-01-10 18:42 | Arbitrum | in | 0x0000000000000000000000000000000000000000 | $0 |
| 2024-02-04 12:27 | Arbitrum | in | 0xd152f549545093347a162dce210e7293f1452150 | $0 |
| 2024-03-15 08:07 | Arbitrum | in | 0x4630b2ef71eb5ec4b78c4ded96c100f3167637a9 | $0 |
| 2024-03-18 05:55 | Optimism | in | 0xacd03d601e5bb1b275bb94076ff46ed9d753435a | $0 |
| 2024-03-18 21:59 | Optimism | in | 0xe50fa9b3c56ffb159cb0fca61f5c9d750e8128c8 | $0 |
| 2024-03-21 08:02 | Optimism | in | 0x0000000000000000000000000000000000000000 | $0 |
Exhibits
| Address | Entity | Cluster | Attribution | Basis |
|---|---|---|---|---|
| 0x28c6c06298d514db089934071355e5743bf21d60 | Binance Hot Wallet 14 Regulated exchange or VASP |
binance
3 address(es) |
public | observed on chain |
| 0xdac17f958d2ee523a2206206994597c13d831ec7 | Tether USD (USDT) Merchant or payment processor |
tether
0 address(es) |
public | observed on chain |
| 0xf89d7b9c864f589bbf53a82105107622b35eaa40 | Bybit Hot Wallet Regulated exchange or VASP |
bybit
0 address(es) |
public | observed on chain |
Paths are assembled from the composed exposure view, walking each endpoint back to the subject. Direct hops are observed on chain. Onward and bridged hops are observed from a live indexer walk, or modelled from the seed when SAFESCORE_OFFLINE=1, and are marked as such on every hop. The transfer map lays those hops on chain lanes ordered by fund size and transfer timestamp.
Counterparty services
The same exposure means different things through a licensed custodian and a no-KYC venue, so each service a wallet touched is scored on its own controls.
1 directory-listed service(s) appear in this screen; 0 of them are high risk or prohibited, carrying 0.0% of traced value.
| Service | Jurisdiction | Licence | KYC | Layers | Value | Entity risk |
|---|---|---|---|---|---|---|
| Binance Holdings Ltd
Regulated exchange or VASP |
Malta | licensed | strict | direct | $140,565,395 | 2.1 low |
Only counterparties with a directory entry are profiled here. Everything else is covered by category exposure.
Cross-chain picture
Ethereum ETH
Base ETH
Optimism ETH
BNB Smart Chain BNB
Polygon POL
Arbitrum ETH
Bridge crossings
Bridged value does not stop at the bridge contract, so Holistix follows it onto the chains the bridge connects and weights what it finds there at 70%.
No bridge crossings observed, so all exposure stays on the chains screened.
Counterparties
| Counterparty | Category | Chain | Layer | Jurisdiction | Visibility | Value | Weighted |
|---|---|---|---|---|---|---|---|
| Binance Hot Wallet 14
PoR Binance historical
w=0.00
0x28c6c06298d514db089934071355e5743bf21d60 |
Regulated exchange or VASP
public
(1.00)
|
Ethereum | direct | MT | out of sight — exchange-internal | $140,565,395 | $140,565,395 |
| Unattributed address 0xe71c...29c6
0xe71cab44917bf40b072b47138a76006558cb29c6 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $60,616 | $60,616 |
| Unattributed address 0x18e2...82f6
0x18e296053cbdf986196903e889b7dca7a73882f6 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xe71cab4491… |
-- | traced on | $45,950 | $22,975 |
| Unattributed address 0x0ee4...d33e
0x0ee4625af9dd81b5a0b7677d8c49b9a7b1e8d33e |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $20,000 | $20,000 |
| Unattributed address 0xc29b...56fe
0xc29bf263bded90b43585dafe876d4e9808eb56fe |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x18e296053c… |
-- | traced on | $38,684 | $19,342 |
| Unattributed address 0xa6d4...1f75
0xa6d4462a24d0cac66bf6cb679efe3b90cf741f75 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x0ee4625af9… |
-- | traced on | $20,000 | $10,000 |
| Unattributed address 0x7d61...2431
0x7d61535e5e675ec442690150bda9d1e714e62431 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $4,363 | $4,363 |
| Unattributed address 0x6fa5...5a1d
0x6fa5b6d93e2539caea358518d3fe8f75418e5a1d |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xe71cab4491… |
-- | traced on | $7,854 | $3,927 |
| Unattributed address 0x5c84...d58b
0x5c84f7f7c1186100ea2482ed19053776b1d4d58b |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xa6d4462a24… |
-- | traced on | $6,996 | $3,498 |
| Unattributed address 0xa1ab...df09
0xa1abfa21f80ecf401bd41365adbb6fef6fefdf09 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xe71cab4491… |
-- | traced on | $6,812 | $3,406 |
| Unattributed address 0x0ed1...b9f5
0x0ed1657cc07ef87be1e74ef6d7951d078f16b9f5 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xa6d4462a24… |
-- | traced on | $5,186 | $2,593 |
| Unattributed address 0x137c...0244
0x137c2e50421e713f613274b7223291cdbe480244 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $2,235 | $2,235 |
| Unattributed address 0x2500...c8c8
0x25008c15116b1d41cc79214f66a148f30cc3c8c8 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x7d61535e5e… |
-- | traced on | $4,336 | $2,168 |
| Unattributed address 0xd09b...a25a
0xd09bd2db3851a631bd3a3566ebc344b2bb04a25a |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x25008c1511… |
-- | traced on | $4,326 | $2,163 |
| Unattributed address 0x1351...2f6b
0x13511cda58c23de3d10b0201f47d5f3467632f6b |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xa6d4462a24… |
-- | traced on | $3,612 | $1,806 |
| Unattributed address 0x2a82...1803
0x2a82c64b21ef2631f38a5db70de67a2f878e1803 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x18e296053c… |
-- | traced on | $3,317 | $1,658 |
| Unattributed address 0x0e7c...592c
0x0e7c7fc46d3ffe59175707290519e584db20592c |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $1,447 | $1,447 |
| Unattributed address 0x7994...e7f9
0x7994f779dd6f18b6b6e4dc186682d6c4b5c4e7f9 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $1,241 | $1,241 |
| Unattributed address 0xcac5...6994
0xcac5389c95b5141cf2b6a00f9ac5ea1657a66994 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xa6d4462a24… |
-- | traced on | $2,325 | $1,162 |
| Unattributed address 0xc23c...28ad
0xc23c11d0d23b7757ebcb7ebc054ecefa98c828ad |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x6fa5b6d93e… |
-- | traced on | $2,196 | $1,098 |
| Unattributed address 0x9669...c2b5
0x9669626bbc52692d1a6405893e14cdedbc27c2b5 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $1,079 | $1,079 |
| Unattributed address 0xa5cd...aeb0
0xa5cdd09ab579b3908fae4e917ade5d7391e7aeb0 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x6fa5b6d93e… |
-- | traced on | $1,921 | $961 |
| Unattributed address 0xd29f...6428
0xd29fa482e8e3bef0d77d958fbf8319f67f386428 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xa1abfa21f8… |
-- | traced on | $1,884 | $942 |
| Unattributed address 0xb13f...aa74
0xb13f17d3bbd65752231cf3a38a26c9ce0055aa74 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $931 | $931 |
| Unattributed address 0x0312...9bbd
0x031259acaa8d8e8118cf65ce030745bce4ba9bbd |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x6fa5b6d93e… |
-- | traced on | $1,649 | $825 |
| Unattributed address 0xbd89...0e85
0xbd89ee400bb1c706cc4ac75429dbbb7289840e85 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $771 | $771 |
| Unattributed address 0x096f...a74c
0x096fef08857ee8043dddd498e19cf62571a8a74c |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0xa1abfa21f8… |
-- | traced on | $1,482 | $741 |
| Unattributed address 0xc91e...a0f4
0xc91e66a84bf8056302ca65f07c4307769f17a0f4 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $638 | $638 |
| Unattributed address 0x654d...c897
0x654de8a1b6f2b2f8de8c32b7b5b50d401d3fc897 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x7994f779dd… |
-- | traced on | $1,241 | $620 |
| Unattributed address 0xfe01...d7a9
0xfe010224bbf26cf21bbaac1d4b596b7a5a85d7a9 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $605 | $605 |
| Unattributed address 0x4bfa...9b44
0x4bfa486d20d2f7e24741691a9ad6f16ced2a9b44 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x18e296053c… |
-- | traced on | $1,105 | $553 |
| Unattributed address 0xef95...8784
0xef95b7eed7baf5d2174cf706efc85158c30f8784 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x18e296053c… |
-- | traced on | $884 | $442 |
| Unattributed address 0x7c3f...ffec
0x7c3fe0628e9811cfc3b8c06d156a4b9b84adffec |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $415 | $415 |
| Unattributed address 0x712f...5d50
0x712f8a9f2a2ba9f07c4195e3deba6da3131b5d50 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $400 | $400 |
| Unattributed address 0x50c4...5909
0x50c4e75a512f2a14a7b304787adf79c4531a5909 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x0e7c7fc46d… |
-- | traced on | $736 | $368 |
| Unattributed address 0x6747...69c0
0x6747236940a1ce3f915198cd7a93d19aaf4169c0 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $351 | $351 |
| Unattributed address 0xd29f...6428
0xd29fa482e8e3bef0d77d958fbf8319f67f386428 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x6fa5b6d93e… |
-- | traced on | $635 | $318 |
| Unattributed address 0xbdc0...8a51
0xbdc0aa917845469a4ff6439d3b741b677fd08a51 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $313 | $313 |
| Unattributed address 0x4cd0...bc31
0x4cd00e387622c35bddb9b4c962c136462338bc31 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | indirect
via 0x0e7c7fc46d… |
-- | traced on | $622 | $311 |
| Unattributed address 0x4427...f255
0x4427f4b94252833a0fe98fa1ff04de182e81f255 |
Unattributed address
unlabelled
(0.00)
|
Ethereum | direct | -- | traced on | $301 | $301 |
Transfer sample
| When | Chain | Direction | Counterparty | Amount | Value |
|---|---|---|---|---|---|
| 2026-09-13 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0x37e1bfc119444ef100ae34c9271fedaee62edbd7 | 203.812869 | $204 |
| 2026-09-13 | ethereum | out | 0xaea46a60368a7bd060eec7df8cba43b7ef41ad85 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0xd21ee6dd04ed324b5ec3294e0bfdad71afde4447 | 7199.768500 | $0 |
| 2026-09-13 | ethereum | out | 0xb13f17d3bbd65752231cf3a38a26c9ce0055aa74 | 0.371497 | $931 |
| 2026-09-13 | ethereum | out | 0x4f0ee9b77ff4cb2d22c47f845bfb8a88410d5d3e | 0.057672 | $145 |
| 2026-09-13 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0xbf902e228624a78769c04108060c9473cd416d62 | 30.203000 | $30 |
| 2026-09-13 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0x137c2e50421e713f613274b7223291cdbe480244 | 0.891930 | $2,235 |
| 2026-09-13 | ethereum | out | 0x5a1e165cdff35a0c16064a5466458f8afc46a8ea | 5.700000 | $6 |
| 2026-09-13 | ethereum | out | 0x430b036c6683b4bf2e75c62a82807772e86fb36a | 39.700000 | $40 |
| 2026-09-13 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0x684078542e5e82f06ce9000c27384789c79eee94 | 188.700000 | $189 |
| 2026-09-13 | ethereum | out | 0xde8c14c9da4e2d4061471a9e7e0c5ca1c4361197 | 0.003430 | $9 |
| 2026-09-13 | ethereum | out | 0xefbe2d325a2fc91f4d6f2d04b5b38641535fd880 | 0.099930 | $250 |
| 2026-09-13 | ethereum | out | 0x3845badade8e6dff049820680d1f14bd3903a5d0 | 0.000000 | $0 |
| 2026-09-13 | ethereum | out | 0xbe0562201362d5adea1b0c678406d70432d33d8d | 24953.986914 | $0 |
| 2026-09-13 | ethereum | out | 0xdac17f958d2ee523a2206206994597c13d831ec7 | 0.000000 | $0 |
| 2026-09-09 | base | in | 0xaa7f03dee84967dce7c2bbc6a060ba5a9227ddf9 | 1.000000 | $0 |
| 2026-09-09 | base | in | 0x04008fbd52e0dae2e8ab9a94d57d9fb621bbe596 | 527.907686 | $0 |
| 2026-09-09 | base | in | 0x04008fbd52e0dae2e8ab9a94d57d9fb621bbe596 | 527.907686 | $0 |
| 2026-09-07 | base | in | 0xaa7f03dee84967dce7c2bbc6a060ba5a9227ddf9 | 1.000000 | $0 |
| 2026-09-03 | base | in | 0x63f0aa0163cc1f1f51ea0ffc6577328e6a2019b9 | 5.000000 | $0 |
Risk level (1–5)
Continuous score 1.00 falls in the level 1 band (below 2.0) under the balanced tolerance.
Accept. No material risk exposure identified.
Policy: Balanced, boundaries 2.0 / 4.0 / 6.0 / 8.0. Change the risk tolerance →
The 1-5 level is the institution's policy applied to the 0-10 score, not a second measurement. Re-grading under a different tolerance changes the level and never the score.
Rules triggered
0 of 19 enabled rules matched. Tune the rule set →
No rule matched, so the recommendation is to proceed.
Subject attribution
| Name | Binance Hot Wallet 15 |
|---|---|
| Category | Regulated exchange or VASP weight 1 |
| Jurisdiction | Malta (MT) |
| Source | public · confidence 1.00 |
| Cluster | binance
recorded on ETH, BTC
A named group in the attribution source, not a
co-spend cluster inferred from this wallet's transactions. |
Score history
| Screened | Score | Band |
|---|---|---|
| 2026-09-13 19:48 | 1.0 | minimal |
| 2026-09-12 17:11 | 1.0 | minimal |
| 2026-08-28 16:22 | 1.1 | minimal |
| 2026-08-28 16:12 | 1.0 | minimal |
| 2026-08-28 16:02 | 8.8 | critical |
| 2026-08-28 16:02 | 8.8 | critical |
Provenance
| ethereum | live:alchemy
https://eth-mainnet.g.alchemy.com/v2/… | native=120 token=180 internal=0 | unpriced_tokens=130 |
|---|---|
| base | live:alchemy
https://base-mainnet.g.alchemy.com/v2/… | native=2 token=298 internal=0 | unpriced_tokens=296 |
| optimism | live:alchemy
https://opt-mainnet.g.alchemy.com/v2/… | native=4 token=284 internal=0 | internal transfers unavailable on this network; unpriced_tokens=284 |
| bsc | live:alchemy
https://bnb-mainnet.g.alchemy.com/v2/… | native=0 token=300 internal=0 | internal transfers unavailable on this network; unpriced_tokens=300 |
| polygon | live:alchemy
https://polygon-mainnet.g.alchemy.com/v2/… | native=4 token=296 internal=0 | unpriced_tokens=292 |
| arbitrum | live:alchemy
https://arb-mainnet.g.alchemy.com/v2/… | native=8 token=194 internal=0 | internal transfers unavailable on this network; unpriced_tokens=192 |
| Label set | 2463 entities, 20 categories, 85 clusters |
Label sources
- Sanctions: 943 designated addresses from the US Treasury OFAC SDN list, published 08/28/2026.
- Token contracts: 927 identified from public token lists.
-
Cited public labels:
519 addresses from
34 source(s), each with a URL.
- Aave address book: V3 Ethereum (98 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Ethereum.json
- FBI/IC3 PSA: North Korea responsible for $1.5 billion Bybit hack (51 addresses) — https://www.ic3.gov/PSA/2025/PSA250226
- Aave address book: AaveV3Polygon (45 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Polygon.json
- Aave address book: V2 Ethereum (40 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV2Ethereum.json
- Aave address book: AaveV3Arbitrum (39 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Arbitrum.json
- Aave address book: AaveV3Optimism (31 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Optimism.json
- Aave address book: AaveV3Base (25 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3Base.json
- Tornado Cash smart contracts (24 addresses) — https://docs.tornado.cash/general/tornado-cash-smart-contracts
- Bybit: wallet addresses ownership explained (21 addresses) — https://www.bybit.com/en/help-center/article/Bybit-Wallet-Addresses-Ownership-Explained
- Circle CCTP EVM contract addresses (20 addresses) — https://developers.circle.com/cctp/evm-smart-contracts
- Aave address book: AaveV3BNB (18 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3BNB.json
- Bitfinex: published public wallets (16 addresses) — https://github.com/bitfinexcom/pub/blob/main/wallets.txt
- Aave address book: AaveV2Polygon (16 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV2Polygon.json
- Aave address book: AaveV3EthereumLido (12 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/AaveV3EthereumLido.json
- Crypto.com: Transparency First cold-wallet list (10 addresses) — https://crypto.com/en/company-news/transparency-first
- Uniswap v3 Arbitrum deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/arbitrum-deployments
- Uniswap v3 Optimism deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/optimism-deployments
- Uniswap v3 Polygon deployments (7 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/polygon-deployments
- Lido deployed contracts (6 addresses) — https://docs.lido.fi/deployed-contracts/
- Uniswap v3 Base deployments (6 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/base-deployments
- Uniswap v3 Ethereum deployments (3 addresses) — https://docs.uniswap.org/contracts/v3/reference/deployments/ethereum-deployments
- Chainalysis: Euler Finance flash loan attack (2 addresses) — https://www.chainalysis.com/blog/euler-finance-flash-loan-attack/
- Morpho deployed contracts (2 addresses) — https://docs.morpho.org/get-started/resources/addresses
- Compound III USDC Ethereum roots (2 addresses) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usdc/roots.json
- Aave address book: GhoEthereum (2 addresses) — https://aave-dao.github.io/aave-address-book/api/v1/modules/GhoEthereum.json
- Railgun privacy system contracts (1 address) — https://docs.railgun.org/wiki/learn/helpful-links
- Linea network contracts (1 address) — https://docs.linea.build/network/build/contracts
- Starknet L1-L2 messaging (1 address) — https://docs.starknet.io/documentation/architecture_and_concepts/Network_Architecture/l1-l2-messaging/
- Chainalysis: Wormhole hack February 2022 (1 address) — https://www.chainalysis.com/blog/wormhole-hack-february-2022/
- Compound III USDS Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usds/roots.json
- Compound III USDT Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/usdt/roots.json
- Compound III WBTC Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/wbtc/roots.json
- Compound III WETH Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/weth/roots.json
- Compound III WSTETH Ethereum roots (1 address) — https://github.com/compound-finance/comet/blob/main/deployments/mainnet/wsteth/roots.json
- Demonstration data: excluded — 118 synthetic entities were not scored.
Proof-of-reserves feed
- OKX: OKX Proof of Reserves · bibliography only
- OKX: OKX Proof of Reserves downloads · bibliography only
- OKX: OKX reserves zip — 11 Aug 2026 · snapshot 2026-08-11 · 211,793 addresses indexed
- Binance: Binance Proof of Reserves · bibliography only
- Binance: Binance Mazars PoR report — 7 Dec 2022 · snapshot 2022-11-22 · 19 addresses indexed
Screen window
- Up to 500 transfers across 3 indexer page(s) · default 2 hops · hop-2 budget 16 · hop-3 budget 12.
Artefact integrity
-
sha256+hmac · SHA-256
48bc2678dae4d40eb2bb373339d1714ef4a2fd429037add4f1016e52cf184236· sealed 2026-09-13T19:48:02+00:00 · HMAC present.
Informative
Notice / Disclaimer
Limits that apply to this artefact as a whole. Sources and hashes stay in provenance; this section is how to read them.
- Holistix scores combine public blockchain data with a seeded label set. Direct counterparties are observed on every screened chain. Onward and bridge hops are observed from a live indexer walk; they are modelled from the seed only when SAFESCORE_OFFLINE=1. Unlabelled counterparties stay unknown. Synthetic seed entities are demonstration labels, not live attribution. IP/node geolocation is not inferred.
- direct counterparties are observed from chain data on every screened chain. Hop-2 and hop-3 same-chain walks are observed from a live indexer when online (budgets split inbound/outbound so Source and Hop columns both receive inputs), and modelled from the label seed only when SAFESCORE_OFFLINE=1. The far side of a bridge is always modelled: the crossing into the bridge is observed, but no transfer links it to a specific address on the destination chain, so value is attributed across that bridge cluster's known addresses there. Modelled hops cannot carry sanctions or terrorism-financing categories. IP/node geolocation is not inferred from first-seen time.
- Token-contract labels name contracts, not wallet owners.
- Demonstration data was excluded — 118 synthetic entities were not scored.
- 211812 reserve-list address(es) from 2 ingested file(s). A hit is a snapshot claim, not a verification and not a host. Pages without an extractable address list stay in the bibliography only.
- OKX: Landing page. The address list is the reserves zip linked from the download table, not this page.
- OKX: Index of reserve and liability zips. Hits come from the zip.
- OKX: Bulk reserve list. Indexed locally; not a cited label.
- Binance: Live Merkle / Download All Address page. No public address file was extractable from this URL (WAF / account flow).
- Binance: Addresses printed in the appendix, claimed as of the 22 Nov 2022 reporting date. Snapshot, not a current named-wallet page.
- Activity beyond the stated screen window is not in the score.
- Recompute the sha256+hmac digest against the JSON export to confirm this copy matches what was stored.