Loading prices…
🩸BEARISH

Kraken Locks Users Out After 12,000-Wallet Dust Attack From HTX

Even tiny transfers can taint an address. The episode shows how blockchain transparency turns sanctions screening into a weapon, and exposes the scramble inside compliance teams to tell a real user…

Kraken Locks Users Out After 12,000-Wallet Dust Attack From HTX
Kraken Locks Users Out After 12,000-Wallet Dust Attack From HTX
Kraken Locks Users Out After 12,000-Wallet Dust Attack From HTX
Kraken Locks Users Out After 12,000-Wallet Dust Attack From HTX

Kraken briefly locked some users out of their accounts after wallets labeled by Arkham Intelligence as belonging to sanctioned rival HTX sent nearly 12,000 tiny transfers to Kraken-linked addresses between Aug. 17 and Aug. 24, the exchange said. Each transfer was valued at just a few cents to a few dollars, but Kraken's compliance team treated them as a coordinated attempt to spread sanctioned funds into customer deposit addresses and trigger account freezes. Kraken restored access while continuing to hold the funds and said it is working with authorities to ensure the attacks do not have their intended impact.

Why it matters

The tactic, known as a dust attack, turns sanctions screening into a form of offense. Public blockchains let anyone send tokens to any address, meaning an attacker can forge a link between sanctioned funds and an otherwise unrelated user for the cost of a transaction fee. The episode lands at a sensitive moment: the EU's transaction ban on HTX took effect Aug. 23, the same week the dust transfers were still flowing, and the U.K. had already frozen HTX assets in May over suspected ties to Russia-linked payment network A7 and sanctioned exchange Garantex. HTX, which counts TRON founder Justin Sun as an adviser, told CoinDesk an internal review found no official accounts were responsible for the microtransactions and that it was investigating whether the sending wallet was misidentified.

Market impact

The precedent matters more than the dollar size. In 2022, an unidentified sender pushed ether from sanctioned mixer Tornado Cash to a slate of celebrities, and U.S. authorities later said they would not prioritize enforcement over delayed reports from recipients of unsolicited, nominal transfers. The Kraken episode is the test of whether that posture holds when an exchange, rather than an individual, is on the receiving end, and whether compliance teams can clear tainted dust quickly enough to keep customers trading. Watch the next round of compliance memos from major venues: a coordinated defense against forced-taint attacks is now table stakes, not a niche concern.

Frequently asked questions

  1. What is a crypto dust attack?

    A dust attack sends tiny amounts of crypto to a target address, often to deanonymize the recipient by linking the address to other activity, or to taint it with funds tied to illicit or sanctioned activity.

  2. Why did HTX-linked dust transfers lock Kraken users out?

    Kraken's compliance team flagged the deposits as potentially sanctioned funds and froze affected accounts as a precaution, since touching sanctioned funds can trigger regulatory exposure under U.S. and EU rules.

  3. Is HTX under sanctions?

    Yes. The U.K. froze HTX assets in May over suspected ties to Russia-linked payment network A7 and sanctioned exchange Garantex. The EU added HTX to a transaction ban in July, effective Aug. 23.

  4. Did HTX authorize the dust transfers?

    HTX told CoinDesk that an internal review found no official accounts responsible for the microtransactions and that it was investigating whether the sending wallet was misidentified or controlled by a third party.

  5. Has this happened before?

    In 2022, an unidentified sender pushed ether from sanctioned mixer Tornado Cash to a slate of celebrities. U.S. authorities later said they would not prioritize enforcement over delayed reports from recipients of unsolicited, nominal transfers.

Source attribution
Aggregated from CoinDesk · Verified · Last refreshed 1h ago
Open original →