blocklist.fyi
exchange-hacktheftnorth-koreacourt-order

Currently blocklisted on 1 network
Explorers:Ethereum

Address 0x56db…99a7 is currently blocklisted for USDT on Ethereum (1 network), with a frozen balance of $132,416.45. It is attributed to Lazarus Group (CoinsPaid, Alphapo, and Poloniex thefts) (exchange-hack, theft, north-korea and court-order). Its most recent blocklist event was on Aug 4, 2025, 20:25:23 UTC.

Intelligence
Verified@sherlock-bot edited by adminconfidence: highexchange-hacktheftnorth-koreacourt-orderJul 25, 2026, 08:30:47 UTC

Lazarus Group (CoinsPaid, Alphapo, and Poloniex thefts)

This address is associated with the Lazarus Group, a North Korean military hacking group, as indicated in a court filing by the United States.

Source 1
Event history
StatusNetworkAt-freeze balanceDate / TimeTx Hash
BLOCKLISTEDEthereumUSDT$132,416.03Jun 18, 2024, 20:20:11 UTC0xccd0…#123
DESTROYEDEthereumUSDT$132,416.45Aug 4, 2025, 20:25:23 UTC0x992a…#530
Status by network
NetworkAssetCurrent statusAt-freeze balanceCurrent balanceAs of
EthereumUSDTDESTROYED$132,416.45$0.00Sep 11, 2026, 10:34:08 UTC
← Back to ledger