Blockchain analytics firm TRM Labs published a report on July 21, 2026, finding that HTX, one of the world's five largest crypto exchanges, has been rotating its deposit and hot wallets across TRON, Ethereum, BNB Smart Chain, and Solana multiple times per day since the UK sanctioned the exchange on May 26. Each wallet address is retired within hours of being created. The observed effect is that HTX has continued processing customer withdrawals while static compliance block lists maintained by other exchanges and protocols struggle to keep pace with the cycling addresses.

The UK Foreign, Commonwealth and Development Office sanctioned Huobi Global S.A., the Panama-based corporate entity behind HTX, under Regulation 17A of the Russia (Sanctions) (EU Exit) Regulations 2019. HTX rebranded from Huobi Global to HTX in 2023 under the influence of Justin Sun, which explains the distinction between the designated legal entity name and the exchange's current public identity. Compliance with the designation falls under the oversight of the Office of Financial Sanctions Implementation (OFSI). Regulation 17A was previously applied only to sanctioned banks; its use against an exchange with roughly 59 million registered users and approximately $3.3 trillion in 2025 trading volume marks the first time UK authorities have applied banking-style sanctions to a top-five crypto exchange. The sanctions package, which included 17 other entities and individuals, was connected to Operation Destabilize, the National Crime Agency-led effort to dismantle Russian money laundering infrastructure. Co-designees included Rapira Group, ABCEX, Bitpapa, the USDKG stablecoin issuer, Garantex co-founder Sergei Mendeleev, and Liran Cohen, an associate of Moldovan oligarch Ilan Shor.

UK authorities allege HTX moved approximately $1.5 billion for Kremlin-aligned entities, including funds connected to the A7 payments network. A7 is partly owned by Ilan Shor and is linked to Promsvyazbank, a sanctioned Russian bank that finances military operations. Following the March 2025 takedown of Garantex, A7 absorbed approximately $838 million in displaced funds, with individual settlement transactions ranging from $2 million to $40 million. UK officials said A7 processed over $90 billion in flows in the year before designation, a figure equivalent to roughly half of Russia's annual military expenditure.

Independent on-chain analysis by research firm Global Ledger found HTX processed $21.06 billion in high-risk crypto flows between January 2021 and May 2026, with at least $7.64 billion linked directly to Russian high-risk entities and darknet markets. Global Ledger's data also identified $6.16 billion in flows connected to Garantex, the Russian exchange shut down in a joint law enforcement operation in March 2025, with $2.63 billion flowing inbound and $3.53 billion flowing outbound. That directional split indicates HTX functioned as both a source and a destination for Garantex funds. The dataset also recorded $840 million tied to Garantex's successor platform, Grinex. The Global Ledger analysis extends well beyond Russia-linked flows, covering a wider threat-actor footprint that includes $4.41 billion linked to Huione Group, $240 million linked to Hezbollah-affiliated entities, and $60 million linked to Lazarus Group.

HTX disputes the findings. A company spokesperson said the designated entity, Huobi Global S.A., is legally separate from the operational exchange, and that "HTX does not operate in the UK or serve UK users." The exchange said it maintains sanctions monitoring and blocking procedures, and that it plans to challenge the UK designation. HTX also questioned the accuracy of the blockchain attributions underpinning the case.

TRM Labs' core compliance warning centers on the limits of address-list screening. "A static block list goes stale within hours," the firm wrote, describing HTX's rotating wallet infrastructure as "a moving target for compliance professionals." That warning has direct consequences for users across South Asia and sub-Saharan Africa. Following the UK designation, Binance, OKX, Bybit, and Bitget all issued notices flagging HTX-linked transactions for enhanced review. Users in India, Nigeria, Kenya, and Indonesia who previously used HTX reported frozen funds and blocked transactions, despite having no connection to sanctioned activity.

Compliance software now flags any wallet with historic HTX exposure, creating a de facto exclusion from DeFi platforms and centralized exchanges for users whose only connection to HTX was using it as an on-ramp. Platforms including Hyperliquid and OpenSea are among those identified as affected.

On-chain investigator ZachXBT raised a related concern about the knock-on effects of the designation. As reported by Yahoo Finance, he argued that tainting wallets that touched HTX years before the May 26 action has diluted the meaning of on-chain risk scores. "Basically now I've had to ignore the sanctions category when tracing cases by exposure since 'risk' itself has become meaningless," he said. ZachXBT also separately alleged that UK regulators overlooked a $1.25 billion laundering operation by a genuine illicit actor, a claim that frames his critique as one of enforcement misdirection and not only risk-score dilution.

Vladyslav Syrotin, head of investigations at Global Ledger, offered a counterpoint, warning that illicit funds can be laundered "through swaps, bridges and mixers in minutes" and that the scale and consistency of the sanctions evasion operation is significant.

The jurisdictional picture complicates matters further. Neither the US Office of Foreign Assets Control nor the European Union has designated HTX, meaning exchanges and protocols headquartered outside the UK face no legal obligation to restrict the exchange. Firms serving users in India and Nigeria may choose to act on reputational grounds, but the fragmented regulatory landscape means compliance decisions will vary widely. For developers building payment products or DeFi applications in these markets, analysts reviewing TRM's findings conclude that behavioral attribution intelligence, rather than static address lists, represents the more effective approach, though it sets a higher technical bar that smaller teams may struggle to meet.

Regulators in India and Nigeria, both of which have tightened crypto anti-money laundering requirements in recent years, are likely watching closely as UK enforcement plays out across a globally distributed user base. These include India's Financial Intelligence Unit (FIU-IND) and Nigeria's Securities and Exchange Commission and Central Bank of Nigeria (CBN).

Sources: TRM Labs, Global Ledger, CoinDesk, CoinTelegraph, Elliptic, Yahoo Finance, Chainalysis, NewsBTC.