Dirty money isn’t only caught once it reaches an exchange. On-chain fund flows are traceable by nature. Before accepting funds from an unfamiliar address, or from a “friend” or “relative,” check the address on MistTrack first. You’ll see its risk score, associated labels, and upstream/downstream fund paths, so you can spot fraud- or laundering-related risk early. A check takes a minute. A freeze can take months to resolve. 👉

If you're experiencing disruptions to your KYT services, MistTrack is here to help. We offer free trials and dedicated technical support to help businesses maintain their on-chain risk screening and compliance workflows, while exploring alternative or complementary #KYT# solutions. 🔎 Two Solutions for Different Business Needs 1️⃣ MistTrack: Fast Integration, Flexible Deployment Convenient #API# integration and dedicated technical support to help businesses quickly establish alternative or complementary screening capabilities. Flexible pricing options, including subscription plans and prepaid credit packages. Developer plans start at $20 for 100 address checks, with credits valid for one year. 2️⃣ SlowMist KYT: Advanced Risk Management for Large Institutions A real-time #AML# engine designed for institutional compliance teams, focusing on in-depth high-risk fund flow screening and flexible risk configuration. Prepaid packages based on the number of addresses, with tiered pricing that offers lower per-address costs at higher volumes. Minimum purchase: 10,000 addresses. 🌐 Building a More Resilient Risk Management Ecosystem We believe diversified risk screening capabilities are essential to business continuity. @SlowMist_Team is committed to working with industry partners to provide reliable technical support and more KYT options. 🙋 Looking for a backup KYT solution? Contact us to learn more about free trials and integration support. 🌐 Website: 📝 Contact Form: 📧 Email: support@misttrack.io

We’re seeing @tether freeze a significant number of $USDT across addresses linked to this incident. Based on our current tracking, the reported losses are approaching $90 million. Some affected users have contacted us for assistance, and our team is actively following up on these cases. bc1qjqgwejnp8dc0x2938x9n9954hj97t82unx49dl bc1qqnkwurxs99xkx5t4yffqhq3u6qwy0qpjyujtm9 bc1qgqheemzla77pesl227hdtgf5ykz62d0zvld26n TK6DWNpNe1w2iJRNFpU8aHdrPTATxvXT6C TBkcUMYC7CkTK99tkTnaStQVBastfrs9d9 TCGE3xp6YGRKXxDZiLfysgJW3f22KfMNsW TSDWtuZ2pARUVz4v3PkL2hi3iXPjowAr5a 0x69c8f401cfc6cd40ac94691d6d7c48e3b7a47841 0x033636e45d519bebb7b5c2520ca6ce56fbdb4f7a 0x83aeac166f6832ae3500000a24510a95a052a599 🫡 cc @SpecterAnalyst

The @bitget exploiter tried to move the stolen funds through @Chainflip. Chainflip’s response? “Deposit rejected by the broker.” 👋 No freeze, but no luck either — the funds were refunded. 👍 Nice try. 😶 We’ll continue tracking the movement of the stolen funds. 🔗

THORChain and Stolen Funds: The Industry Needs Answers After the $1.46B @Bybit_Official hack last year, nearly $1.2B in stolen funds was reportedly traced through @THORChain as the attackers moved assets across chains. Today, following another major security incident at @Bitget , we are once again observing Bitget Exploiter funds being sent into the THORChain for asset swaps and cross-chain transfers. The question is no longer: “Does THORChain know these funds are associated with hackers?” The attacker addresses have already been publicly flagged and are being actively tracked by exchanges, blockchain security/aml firms, and the wider crypto industry. The real question is: When a protocol is aware that funds originate from a publicly identified major hack, yet continues to facilitate large-scale cross-chain swaps, how should the industry view this under the banner of “decentralization”? Decentralization should not become a blanket excuse when dealing with known stolen funds. If, after every major crypto hack, attackers can continue using THORChain as a route to move funds from ETH → BTC, BNB → BTC, and across other chains, the industry needs to seriously ask: What responsibility should THORChain bear when handling known stolen funds? @GracyBitget @xiejiayinBitget @benbybit

So far, we have identified the following addresses associated with the @bitget exploiter that still hold funds. We will continue to update this list. @GracyBitget @xiejiayinBitget @Bitget_zh

🚨 SlowMist TI Alert: FomoPeek App v1.1–1.2 Asset Theft 🚨 We have recently received multiple reports of users having assets stolen. Our investigation found that the affected cases involved private key exposure, and some of the users had previously installed and used @FomoPeek App versions 1.1–1.2. A joint investigation by the @SlowMist_Team and @okx security teams confirmed that the app contains malicious code.⚠️ Besides its normal features, FomoPeek includes two modules that are unrelated to its stated business functions. One of them contains an #iOS# kernel exploitation framework with eight different exploit methods. The framework can automatically choose an attack method based on the device model and iOS version. ‼️Affected iOS versions: iOS 12.0–18.7 and iOS 26.0–26.1.‼️ If the exploit succeeds, the app may escape the iOS sandbox, access and decrypt Keychain data, and read files belonging to other apps on the device. 🔐 This means sensitive data stored on the device, including private keys, seed phrases, login credentials, chat history, and files, may be exposed. The app also connects to hidden servers that are unrelated to its public-facing services and can receive remote commands. Based on plaintext traffic captured during our analysis, the attack functionality is currently enabled and runs automatically at regular intervals. In general, devices running older iOS versions are at higher risk. If you have installed or used FomoPeek versions 1.1–1.2, we recommend that you take action immediately: 1️⃣ Check your accounts and assets for any unusual activity. 2️⃣ On a trusted device where FomoPeek has never been installed, create a new account and generate a new private key and seed phrase. 3️⃣ Move your assets to the new account as soon as possible. 4️⃣ Update your device to the latest available iOS version. 5️⃣ Do not continue using or reinstalling FomoPeek. 6️⃣ If you notice any suspicious asset activity, contact the official support team of the relevant platform and keep the affected device and related evidence for further investigation.

🚨 MistTrack Fund Tracking 🚨 Following the @likwid_fi incident reported by @SlowMist_Team, we tracked the on-chain movement of the stolen funds. 💸 Loss: 74.31 $BNB 📌 Attacker: 0x90bde1e0bb16b3deeb9d638acf8d01f19fd2f31e 🧭 Fund Flow: Attacker → Tornado Cash 🧩 Key Findings: • Multiple withdrawals by the attacker were traced to Tornado Cash, which also provided the initial funding. • 31.8 $BNB was transferred to the attacker from FixedFloat. 🔎 MistTrack has added the related addresses to its malicious address library.

🚀 MistTrack is now live on @WorkBuddy_AI ！ You can now ask WorkBuddy to run on-chain risk checks with MistTrack — risk scores, entity labels, transaction tracing, and counterparty analysis. Just bring your own MistTrack API Key.✨ Find the MistTrack expert in WorkBuddy and start tracing.

On Sept 9, OFAC and DOJ took joint action against Xinbi Guarantee and its supporting service network, restricting more than $52 million in crypto assets. Xinbi Guarantee is a Chinese-language online escrow marketplace connecting scam groups with merchants offering money laundering, scam-site development, and other illicit services. OFAC designated Xinbi Guarantee as a significant Transnational Criminal Organization (TCO), and also sanctioned supporting firms SafeW Technology and Anwen Technology. DOJ seized related Telegram channels and wallets, including ~$12M from 2 collection wallets. Treasury said the marketplace has processed over $24B in digital assets and fiat since around 2022. The case highlights the importance of tracking illicit fund flows across service networks. SlowMist @MistTrack_io will continue updating related risk labels to support on-chain monitoring and illicit fund analysis. Read more 👇

THE BLOCK: Tether earlier today froze about $39.3 million in USDT across 10 Tron addresses linked to Xinbi Guarantee, a source with direct knowledge of the matter told The Block. Xinbi is a Chinese-language guarantee marketplace that emerged on Telegram around 2022. TRM Labs has described it as one of Southeast Asia's largest illicit crypto marketplaces, saying it has processed about $24.2 billion in transactions. MistTrack, an onchain tracing platform developed by SlowMist, first reported the USDT freeze.

Hours ago, Tether froze approximately 39,273,713 USDT across 10 TRON addresses linked to Xinbi Guarantee新币担保. Following its freeze of 汇旺担保Huione-linked funds, this appears to mark another crackdown on illicit Telegram-based escrow platforms.

3/🔷 SlowMist KYT Partner Program SlowMist CPO & Partner Keywolf shared insights into on-chain compliance practices and officially introduced the MistTrack Partner Program @MistTrack_io, connecting with more ecosystem partners and bringing on-chain risk control capabilities to a broader range of payment and business scenarios. Chris (@chriseyin), Jerry Li (@JerryLJ2), Lucy (@LucyLLucky), and other guests also joined the Open Mic session, sharing firsthand experiences and industry perspectives. 🙏 A big thank you to our co-host ME Group @MetaEraCN, all our speakers and partners, and everyone who joined us in Hong Kong. See you next time in Hong Kong! 🇭🇰

🔍 OneKey’s “Incoming Transaction Risk Monitoring” feature is powered by the MistTrack API. Once an incoming transaction is confirmed on-chain, @OneKeyCN can screen the source of funds for potential risks, including sanctions, mixers, scams, stolen funds, and more. MistTrack currently serves 500+ institutional clients worldwide, providing crypto risk intelligence and AML/KYT solutions to help businesses identify and manage on-chain risks. Glad to see MistTrack’s #KYT# capabilities helping bring safer on-chain transaction monitoring to more users. 🛡️ 👉

🚨 MistTrack Alert 🚨 An address linked to Wave 4 of the Coldcard incident has mixed 64.90373764 $BTC via Wasabi Wallet. ⏰ Time: 2026-08-05 04:42:48 UTC 📤 Fund path: bc1q0rvn88w08j75k4h48lf9fvhan7unjp7vjf5q6m → bc1pynd6vswmxkghw6k5463xwcj7el7u4tpl2t2pnh0s8llmc2wgzfqsdu7h92 (Wasabi Wallet) 🔗 Transaction: We are continuously monitoring the activity.

MistTrack is committed to helping virtual asset businesses strengthen their on-chain risk identification and analysis capabilities, translating the risk assessment and risk mitigation requirements emphasized in FATF Recommendation 15 (R.15) into more practical and actionable on-chain analytical capabilities.

Every stolen asset leaves an on-chain trail—but reconstructing that trail across multiple wallets, blockchains, bridges, and mixers isn't easy. That's why we built TrackAgent — an AI-powered On-Chain Intelligence Agent purpose-built to trace stolen crypto assets. It is now integrated into our Free Stolen Asset Assessment Service.🚀 Instead of simply retrieving blockchain data, TrackAgent continuously traces stolen funds, reconstructs complex fund flows, correlates attacker addresses, and combines on-chain intelligence with security threat intelligence to support real-world investigations. 🔍 Key capabilities: 🌐 Supports 31 blockchains 🌉 Cross-chain & laundering path analysis 🔗 Multi-address correlation 🛡️ Threat intelligence-powered investigation 📊 Over 12,000+ stolen asset cases have been submitted to SlowMist over the past four years. By bringing AI into our investigation workflow, we're making preliminary analysis faster while enabling our analysts to focus on the cases that need deeper investigation. 🤝 We're excited to bring AI-powered on-chain investigation to more victims and the broader Web3 community. ❓Need help after a crypto theft? Submit your case through our Free Stolen Asset Assessment Service to receive a TrackAgent-powered on-chain assessment and support from the SlowMist security team. 👉 📖 Read more：