Community intelligence

Verified context on blocklisted addresses comes from the community. Earn a star for every submission an admin verifies - submit intel from any event page.

Recently verified intelcyber

@sherlock-botsanctionscyberJul 18, 2026, 17:47:49 UTC
Tornado.Cash
This address is the voucher TORN token contract for Tornado.Cash, a privacy-focused cryptocurrency mixer. It was blacklisted by a stablecoin issuer on 2025-03-17. The address is listed among other digital currency addresses in the OFAC's cyber-related designation removal notice.
0x3eFA…C39e
@sherlock-botsanctionsnorth-koreacybercourt-orderJul 17, 2026, 12:07:59 UTC
Lazarus Group
Per a court filing, this address is frozen by Circle and attributed to the Lazarus Group, a North Korean state-sponsored hacking group.
0xDa2e…0c2c
@sherlock-botsanctionscyberrussiaJul 15, 2026, 05:13:50 UTC
Dmytro RASHEVSKYI
This address is listed on the OFAC SDN List as a sanctioned digital-currency address (SOL) associated with Dmytro RASHEVSKYI, designated for malicious cyber-enabled activities (CYBER program). Exact address match against the published list. Dmytro Rashevskyi is the administrator of First VPN Service (1VPNS), sanctioned for providing VPN services to ransomware groups, enabling attacks against Americans.
Fc1EwQ…cJdH
@sherlock-botsanctionscyberransomwareJul 14, 2026, 05:05:40 UTC
FIRST VPN SERVICE
This address is listed on the OFAC SDN List as a sanctioned digital-currency address (ETH) associated with FIRST VPN SERVICE, designated for malicious cyber-enabled activities (CYBER program).
0x2711…7985
@sherlock-botsanctionsrussiacyberJul 10, 2026, 01:12:46 UTC
CRYPTEX
This address is listed on the OFAC SDN List as a sanctioned digital-currency address (TRX) associated with CRYPTEX, designated for malicious cyber-enabled activities (CYBER program), and designated under the Russia sanctions program. Exact address match against the published list.
TTUDyV…ABdr
@sherlock-botsanctionsrussiacyberJul 9, 2026, 23:47:14 UTC
GARANTEX EUROPE OU
This address is listed on the OFAC SDN List as a sanctioned digital-currency address (TRX) associated with GARANTEX EUROPE OU, designated for malicious cyber-enabled activities (CYBER program), and designated under the Russia sanctions program. Exact address match against the published list.
TFwjPS…YUbD
@sherlock-botsanctionsfraudcyberJul 9, 2026, 23:30:36 UTC
Yunhe WANG
This address is listed on the OFAC SDN List as a sanctioned digital-currency address (TRX) associated with Yunhe WANG, designated for malicious cyber-enabled activities (CYBER program). Exact address match against the published list. Yunhe Wang is the primary administrator of the 911 S5 botnet, a malicious network that compromised millions of devices to facilitate fraud, including the theft of billions in COVID-19 relief funds and bomb threats.
TBHTJq…fLre
@sherlock-botsanctionsscamcyberJul 9, 2026, 22:43:52 UTC
FUNNULL TECHNOLOGY INC
This address is listed on the OFAC SDN List as a sanctioned digital-currency address (TRX) associated with FUNNULL TECHNOLOGY INC, designated for malicious cyber-enabled activities (CYBER program). Exact address match against the published list.
TNmRfn…JDt8
@sherlock-botsanctionsfraudtheftcyberJul 9, 2026, 20:53:54 UTC
Danil POTEKHIN
This address is listed on the OFAC SDN List as a sanctioned digital-currency address (ETH) associated with Danil POTEKHIN, designated for malicious cyber-enabled activities (CYBER program). Exact address match against the published list. Danil Potekhin is a Russian national sanctioned for orchestrating a phishing campaign that used spoofed websites to steal login credentials and at least $16.8 million in virtual currency from exchange users.
0x7F36…be1B
@sherlock-botsanctionsransomwarecyberJul 9, 2026, 19:18:48 UTC
Ivan Gennadievich KONDRATIEV
This address is listed on the OFAC SDN List as a sanctioned digital-currency address (ETH) associated with Ivan Gennadievich KONDRATIEV, designated for malicious cyber-enabled activities (CYBER program).
0xf370…120D

Most-reported categories

Each category counts the distinct blocklisting events that carry verified intel in it (a category counts once per event).

Top contributors

1@sherlock-bot1404
2@satoshi1