Regulated centralized exchange. Terminal for tracing: deposits commingle — on-chain tracing stops at its hot wallets, but the service holds KYC identity for every depositing account and acts on law-enforcement requests.
Binance-Hot 7first 2021-03 · last today18.2% of inflow
Binance-Hot 3first 2020-01 · last today16.7% of inflow
Binance-Hot 4first 2020-06 · last today14.9% of inflow
Binance-Hot 6first 2021-01 · last today12.4% of inflow
Binance-Hot 9first 2022-04 · last today11.8% of inflow
Binance-Hot 10first 2022-11 · last today10.3% of inflow
Tags & provenance
Binance hot wallet cluster
deposit-address clustering · 2026-07-30 · confidence high
Exchange / KYC service
service registry (self-declared + verified) · 2025-01-12 · confidence high
Law-enforcement responsive
LE cooperation registry · 2026-05-02 · confidence high
GasFree relay counterparty (inbound)
internal heuristics · 2026-03-22 · confidence medium
Attributions are service-level, not individual-level. Every tag carries its source and date; labels are re-validated continuously and reports pin a labels-as-of date.
Next step for case funds here: a law-enforcement request naming the deposit transactions (see the case report, §5). Exchanges act on LE requests, not victim emails.