OceanAltOceanAlt
Attack cases/ Case 4 / 5
🚫

Paying a sanctioned address

Money lands on an OFAC-listed / mixer / dirty-money address.

Blocked before settlement403 · AML

How the attack works

The payee looks ordinary but is a sanctioned entity, a mixer (e.g. Tornado Cash), or an address tainted by stolen funds on-chain. Paying it can be outright illegal.

Why an agent can't stop it alone

An agent won't screen an address on its own; an address is just hex — risk isn't visible to the eye. By the time compliance notices, the money and the liability have landed.

The AML sanctions & risk gate screens the payee against OFAC lists, known mixers, and risk flags before settlement, with multi-hop taint tracing. A hit is blocked, with a receipt you can click through to verify — not a black-box score.

Try it yourself

Paste a Tornado Cash address into the screening tool, or set a sanctioned payee in the x402 decision endpoint.