Key Takeaways:
Kraken temporarily froze customer accounts after wallets linked to sanctioned exchange HTX sent roughly 12,000 microdeposits over eight days, triggering automated anti-money-laundering controls.
"The recent dust attack originating from HTX-owned wallets appears to be an attempt to spread funds sanctioned by the U.K. and the European Union across other platforms and undermine trust across the industry," a Kraken spokesperson said.
The transfers, sent between Aug. 17 and Aug. 24, were mostly valued at a few cents to several dollars, according to Bloomberg. Blockchain analytics firm Arkham Intelligence classified the wallet as HTX-linked based on an address the exchange disclosed during its proof-of-reserves process. Kraken restored account access for affected users while keeping $4.2 million in flagged funds frozen, the largest affected balance per Bloomberg.
The incident exposes a structural weakness in exchange compliance: because anyone can send tokens to an existing address on a public blockchain, a sanctioned entity can contaminate unrelated customer wallets at near-zero cost. The U.K. sanctioned HTX operator Huobi Global SA in May, and the EU added HTX to its sanctions list in July, with the transaction ban taking effect Aug. 23. Major exchanges including Binance, Bybit and OKX have since restricted or reviewed HTX-related transactions.
HTX denied initiating the transfers. A spokesperson said the exchange's internal review found no evidence it sent the funds and raised the possibility of wrong wallet attribution or malicious third-party activity. Justin Sun, the TRON founder closely associated with HTX, rejected the claims publicly on Aug. 18, while Liu Ye, HTX's head of markets, said an investigation was under way.
Andy Zhou, chief executive of blockchain security firm BlockSec, said the attack was akin to poisoning a user's transaction history. Because anyone can send assets on a blockchain without permission, attackers can deliberately manipulate transaction flows at very low cost, he added.
The EU's 21st Russia sanctions package, adopted July 23, banned 14 crypto exchanges including HTX from transacting with EU entities starting Aug. 23. Binance said it would stop processing transactions involving HTX and other listed platforms from that date, warning users that transfers after the cutoff could trigger compliance reviews and wallet restrictions.
The incident highlights the tension exchanges face in sanctions enforcement. Ignoring unsolicited small transfers risks creating a loophole for sanctioned funds; freezing every account that receives them hands bad actors a cheap way to lock innocent users out of their own money. Kraken has taken the narrowest path for now: restore customer access, keep flagged funds frozen, and work with authorities on attribution.
This article is for informational purposes only and does not constitute investment advice.
