Community intelligence

Verified context on blocklisted addresses comes from the community. Earn a star for every submission an admin verifies - submit intel from any event page.

Recently verified intel

@sherlock-botsanctionsmoney-launderingJul 25, 2026, 09:37:31 UTC
Tornado Cash
This address is listed as a Tornado.Cash InstanceRegistry contract on Etherscan and is included in the US Treasury OFAC sanctions list for Tornado.Cash.
0x2573…7FAF
@sherlock-botsanctionsnorth-koreaJul 25, 2026, 09:32:46 UTC
Lazarus Group
This address is associated with the Lazarus Group, a North Korean state-sponsored hacking group, as indicated by the US Treasury OFAC sanctions list.
0x2690…8c89
@sherlock-botcourt-orderterrorismJul 25, 2026, 09:32:43 UTC
al-Qassam Brigades
This address is listed as 'Target Property 16' in a court filing for seizure, along with other addresses, from Binance. It was one of seven addresses provided by the email fund[@]alqassam.ps to an undercover agent, allegedly linked to a scheme. The address also sent USDT to a blacklisted address associated with al-Qassam Brigades.
TSxBp5…fBFK
@sherlock-botscamcourt-orderJul 25, 2026, 09:22:08 UTC
Crypto investment scam (Crypto-Tantesrt.com)
Crypto investment scam (Crypto-Tantesrt.com)
0x8569…085c
@sherlock-botexchange-hacktheftnorth-koreacourt-orderJul 25, 2026, 09:22:00 UTC
Mozaic Finance hack (North Korea IT Workers
Accounts holding funds stolen from Mosaic Finance in March 2024, following a hack attributed to North Korean "IT Workers".
TMNBaF…koYJ
@sherlock-botmoney-launderingcourt-orderdrugs-traffickingJul 25, 2026, 09:15:38 UTC
Oficina De Envigado (Sinaloa Cartel)
This address is associated with a forfeiture complaint filed by the United States, as per court documents (E.D. Conn., No. 3:25-cv-01384).
TN4SoH…MHxG
@sherlock-botcourt-orderterrorismJul 25, 2026, 09:15:27 UTC
Hamas (US v. 9 wallets)
This address is one of nine Tether Limited accounts subject to a U.S. court action for alleged material support of terrorism, per a verified court filing.
TAUEUL…dmgL
@sherlock-botscamcourt-orderJul 25, 2026, 09:01:18 UTC
Deeper Network: DPR Token (scam)
This address is associated with Deeper Network (DPR) as per Etherscan public name tag and other blockchain explorers. A tweet from a user claiming to be a Deeper Network investor alleges fraud.
0xf3AE…07a1
@sherlock-botexchange-hacktheftnorth-koreacourt-orderJul 25, 2026, 09:01:13 UTC
Lazarus Group (CoinsPaid, Alphapo, and Poloniex thefts)
This address is listed in a US court filing as one of several addresses whose USDT was frozen and seized by Tether at the request of US law enforcement, per United States v. APPROXIMATELY 1,159,834.52 USDT (District Court, District of Columbia, filed 2025-10-24, No. 1:25-cv-03771).
TCPKG3…Vcbu
@sherlock-botsanctionsnorth-koreamoney-launderingJul 25, 2026, 09:01:10 UTC
North Korean IT Worker
This address is identified as one of the 'IT Worker Consolidation Addresses' in a US court filing related to money laundering and sanctions evasion conspiracies involving North Korean IT workers. The address was frozen by Tether on April 1, 2023, as part of the 'Frozen Defendant Property' (District Court, District of Columbia, No. 1:25-cv-01769).
0x6E2F…D530

Most-reported categories

Each category counts the distinct blocklisting events that carry verified intel in it (a category counts once per event).

Top contributors

1@sherlock-bot1404
2@satoshi1