Address directory

Wallet addresses that exchanges publish themselves. Money reaching these usually means it entered an exchange account, where the exchange can freeze it and identify the account holder for law enforcement.

Example:

• 0x030e37ddd7df1b43db172b23916d523f1599c6cbEthereumBinance

The issuers' official contracts for USDT, USDC and other stablecoins on each chain. A coin with the same name but a different contract is an imitation.

Example:

• 0xdac17f958d2ee523a2206206994597c13d831ec7EthereumUSDT · Tether

Money sent to a bridge is usually moving to another chain. When you trace funds into one of these, continue on the destination chain.

Example:

• 0x8315177ab297ba92a06054ce80a67ed4dbd7ed3aEthereumArbitrum Bridge

Addresses on the US OFAC list, the UK Sanctions List, Israel NBCTF seizure orders and US FBI notices. Dealing with them can carry legal risk.

Example:

• TBEmt7kPSwAv6NJTYKNdBVW524bUfPwJpJOFAC sanctioned address (TRON)

Addresses that appear in public hacks, exploits and thefts.

Example:

• 0xe19a292cb2d42352343b2e8ccf6aeccb274a0398Hacked / exploit-linked contract

Addresses of mixing services that obscure where money came from. Funds that pass through are hard to trace further.

Example:

• 0xf241d57c6debae225c0f2e6ea1529373c9a9c9fbMixer contract (Tornado Cash and similar)

Addresses where victims of past ransomware attacks were told to pay.

Example:

• 1ByJwQ9ei99sJJF8QUxyfewpLtspdUxcqURansomware payment address (NotNevada)

Addresses publicly reported for scams, phishing and fake projects.

Example:

• 0x3ddd8b6d092df917473680d6c41f80f708c45395Publicly flagged malicious address · Miso Front End Exploiter