Binance CEO Changpeng “CZ” Zhao said the world’s biggest crypto exchange deactivated accounts associated with Suex, designated as a money laundering vehicle by the Office of Assets Control (OFAC) on Tuesday, “earlier this year.”
The U.S. government blacklisted 25 blockchain addresses for bitcoin, ether and tether that the regulator said Russia-based Suex used for its operations.
“We de-platformed these accounts based on internal safeguards,” CZ said in a blog post on Wednesday. “Information regarding the addresses in the announcement, as well as other information from our internal investigation was shared with the appropriate authorities and we continue to collaborate with law enforcement to cast sunlight on those threat actors that seek to abuse our platforms, such as Suex.”
While some of the addresses listed by OFAC were last active in 2019 or 2020, some were used as recently as August. By press time, Binance had not responded to a request on when the accounts were deactivated.
Earlier, crypto sleuthing firm Chainalysis said it helped OFAC to identify the Suex’s crypto wallets, adding that the OTC firm helped launder money coming from major scams, hacker groups and drug traffickers. Elliptic, another blockchain analytics firm, wrote in a blog post the addresses received about $934 million worth of crypto in total.
Particular pattern of use
Analysis of the 25 addresses listed by the OFAC shows all but two are exchange deposit addresses that had apparently been used by Suex to buy and sell crypto on behalf of its clients.
The addresses have a particular pattern of use: Identical amounts of crypto hit the addresses and leave immediately without accumulating or getting split. This most often indicates an address designated by an exchange for users to deposit money. Crypto flows from such wallets to the exchange’s hot wallets. The pattern can be seen, for example, on this BTC address, ETH address and USDT address.
Further research on these addresses showed that most of them belong to two exchanges: Binance and Huobi. CoinDesk asked Huobi if the exchange can confirm the listed addresses belonged to Huobi.
It’s also possible that Suex used other addresses, which OFAC has yet to identify, Elliptic co-founder Tom Robinson told CoinDesk over email.