TRM Labs Says HTX Wallet Rotation Tests Crypto Sanctions Enforcement
HTX has been rapidly rotating its blockchain wallet infrastructure following UK sanctions, exposing limitations in how cryptocurrency compliance systems identify sanctioned entities.
Summary:
- TRM Labs says HTX has been frequently rotating wallet addresses since UK sanctions were imposed on its parent company.
- The strategy allegedly makes static sanctions screening less effective across multiple blockchains.
- HTX denies attempting to evade sanctions, saying wallet changes are part of routine security operations.
- The findings are fueling calls for behavior-based blockchain compliance instead of static address lists.
HTX has been systematically rotating its wallet infrastructure to reduce the effectiveness of traditional sanctions screening, according to a new report from blockchain intelligence firm TRM Labs, highlighting how compliance practices are evolving as regulators increasingly target digital asset platforms.
Wallet Infrastructure Changed After UK Sanctions
TRM Labs said the activity began after the UK sanctioned Huobi Global S.A., HTX’s parent company, on May 26. The designation alleged the exchange facilitated roughly $1.5 billion in transactions linked to Kremlin-aligned entities and the A7 sanctions-evasion network, marking one of the most significant sanctions actions taken by the UK against a major cryptocurrency exchange.
Rather than suspending operations or shifting to a new corporate identity, HTX continued operating under its existing brand while reportedly changing the blockchain addresses supporting its platform.
According to TRM Labs, the exchange has been replacing hot wallets and funding addresses every few hours across:
- TRON
- Ethereum
- BNB Smart Chain
- Solana
Static Blocklists Struggle to Keep Pace
The report argues that the rapid wallet rotation creates a significant challenge for traditional sanctions compliance systems.
Most screening tools rely on static blocklists containing cryptocurrency addresses linked to sanctioned entities. However, because HTX allegedly retires wallet addresses almost as quickly as they are identified and replaces them with new ones, newly created infrastructure may continue processing transactions before compliance databases are updated.
TRM Labs described the exchange’s wallet network as a “continuous moving target” for compliance professionals, warning that reliance on fixed address databases is becoming increasingly ineffective against well-resourced organizations capable of rapidly rebuilding their on-chain infrastructure.
The report notes that this approach differs from tactics previously observed among smaller sanctioned exchanges, which have often responded to enforcement actions by shutting down, rebranding or migrating to entirely new platforms. Instead, larger operators may preserve their public identity while continuously changing the underlying wallet infrastructure supporting customer activity.
HTX Rejects the Allegations
HTX disputed the report’s characterization, saying its wallet management practices are driven by operational security rather than efforts to circumvent sanctions.
The exchange said rotating wallet addresses is a standard practice across the cryptocurrency industry designed to strengthen platform security and improve asset management. HTX also reiterated that regulatory compliance remains a priority and denied attempting to bypass UK sanctions.
Compliance Firms Push for a Different Approach
The report concludes that cases like HTX expose the limitations of address-based sanctions enforcement and reinforce the need for more dynamic monitoring techniques.
Rather than relying solely on known wallet addresses, TRM Labs advocates for behavior-based attribution, a method that links newly created wallets to known entities by analyzing transaction flows, fund movements and recurring operational patterns in real time.
Under that model, compliance systems can identify relationships between fresh addresses and sanctioned organizations without waiting for those wallets to appear on static sanctions lists.
Sanctions Enforcement Is Becoming an On-Chain Intelligence Challenge
The findings suggest the effectiveness of crypto sanctions increasingly depends not only on identifying prohibited entities but also on keeping pace with how they manage blockchain infrastructure. As large exchanges and other digital asset businesses adopt more dynamic wallet management practices, regulators and compliance providers may need to shift from tracking individual addresses to continuously analyzing on-chain behavior, making blockchain intelligence a more central component of sanctions enforcement.
The information presented in this article is intended for informational purposes only and should not be interpreted as financial, investment, or trading advice. Coinspress.com does not promote or advocate for any particular investment strategy, asset, or cryptocurrency project. Cryptocurrency markets are highly volatile and unpredictable – always perform your own research and seek guidance from a qualified financial professional before making any investment decisions.
Alexander Zdravkov
Reporter at CoinsPress
Alexander Zdravkov is a market analyst and crypto journalist with interests in economics, broader financial markets and digital assets. His journey into crypto began more than four years ago, driven by a fascination with the rapid evolution of blockchain technology and the transformative potential of decentralized finance. He began analyzing market cycles and identifying emerging trends before they reach the mainstream. He holds a degree in International Relations - a background that helped shape his broader perspective on global economics, geopolitics, and the interconnected nature of modern financial markets. Whether covering the latest developments in the crypto sector or exploring broader macroeconomic themes, Alexander focuses on giving readers context rather than simply repeating headlines. During his career, he has authored more than 10,000 articles covering cryptocurrencies, traditional finance, and global market developments. His work spans everything from Bitcoin and altcoins to macroeconomic trends influencing risk assets worldwide.
