Kraken Says ‘Dust Attack’ From Sanctioned HTX Wallet Locked Out Customers

Crypto exchange Kraken clients were reportedly locked out of their accounts after receiving tiny amounts of sanctioned digital coins.
In a statement to Bitcoin Magazine, Kraken said the coins were transferred in what is known as a “dust attack” — when small quantities of cryptocurrency is sent to numerous wallet addresses to track and de-anonymize them.
Kraken said the aim of the transactions was to trigger compliance checks by spreading sanctioned funds onto other platforms. Bloomberg first reported the news.
“We don’t know who is behind these attacks, but they likely expect that if sanctioned funds land in a client account, it triggers a full account lock, causing operational disruption for a large number of users,” a Kraken spokesperson said.
The spokesperson added that its customers were briefly locked out of their accounts but its “compliance team mobilized quickly to restore access while continuing to hold the sanctioned funds as required.”
“We are working with authorities to ensure these attacks don’t have their intended impact,” the statement added.
A total of 12,000 such transfers were sent from the wallet to addresses linked to Kraken between this month, Bloomberg reported, citing Arkham Intelligence. Arkham identified the wallet as linked to HTX based on addresses the exchange has publicly disclosed as part of its proof of reserves.
Chinese exchange HTX, formerly known as Huobi, is one of the world’s biggest crypto exchanges. The European Union sanctioned it in July because it has, according to European authorities, helped
“Recent dust attacks from HTX-owned wallets appear to be an attempt to spread UK- and EU-sanctioned funds to other platforms in order to discredit the broader industry,” the Kraken spokesperson continued.
Dusting has been happening for years. Back in 2022, someone sent celebrities Ethereum from a Tornado Cash wallet one day after the U.S. Treasury Department sanctioned the coin mixing app used by North Korean state-sponsored hacking groups.
Celebrities targeted in the 2022 dusting attack included comedian Jimmy Fallon, YouTuber Logan Paul and Coinbase CEO Brian Armstrong. The feds said they wouldn’t prosecute the celebrities hit with sanctioned crypto.

Facts Only

* Kraken clients were locked out of accounts after receiving small amounts of sanctioned digital coins.
* The coins were transferred via a "dust attack," sending small quantities to numerous wallet addresses for tracking and de-anonymization.
* The transactions aimed to trigger compliance checks by spreading sanctioned funds onto other platforms.
* Kraken customers experienced brief account lockouts.
* The compliance team restored access while holding the sanctioned funds as required.
* 12,000 such transfers were reported from the wallet to addresses linked to Kraken this month.
* The wallet was identified as linked to HTX based on publicly disclosed proof of reserves addresses.
* The European Union sanctioned the Chinese exchange HTX in July.
* Recent dust attacks from HTX-owned wallets appear to be an attempt to spread UK- and EU-sanctioned funds to other platforms.
* A prior dusting incident involved celebrities receiving Ethereum from a Tornado Cash wallet following sanctions on a crypto mixing app.

Executive Summary

Kraken reported that client accounts were temporarily locked after receiving small amounts of sanctioned digital coins, which occurred via a method known as a "dust attack." The exchange stated the goal of these transactions was to trigger compliance checks by dispersing sanctioned funds across other platforms. A Kraken spokesperson noted that customers experienced brief lockouts, but the compliance team restored access while retaining the sanctioned funds as required. The exchange is working with authorities to mitigate the impact of these attacks. A total of 12,000 such transfers were reported between the wallet and addresses linked to Kraken during the current month. This activity was linked to a wallet identified as connected to HTX, an exchange sanctioned by the European Union.

Full Take

The reported events illustrate the friction between decentralized financial activity and centralized regulatory enforcement, specifically highlighting how seemingly technical maneuvers like "dust attacks" are leveraged to manage compliance risk across disparate entities. The core dynamic involves actors attempting to obscure the trail of sanctioned assets by utilizing complex transaction patterns to force platform scrutiny, as seen in the use of HTX wallets linked to regulated entities. This pattern suggests a recurring strategic goal where decentralized tools are employed to complicate regulatory oversight, potentially shifting the burden from identifying individual illicit flows to managing systemic risk across an ecosystem. The historical context of similar "dusting" activities, involving high-profile individuals, indicates that this is not a novel technique but rather an established method for obfuscation within the crypto space. The implications suggest that compliance systems must evolve beyond transactional monitoring to account for these sophisticated, multi-platform dispersion strategies, requiring cross-jurisdictional coordination to prevent regulatory arbitrage facilitated by these mechanisms. What alternatives exist for tracing asset flows across layered decentralized protocols when enforcement action is intentionally diffused? How should systemic risk be managed when malicious actors utilize established methods to test the resiliency of compliance infrastructure?

Sentinel — Human

Confidence

The text reads like standard investigative reporting, weaving specific operational details with broader regulatory context effectively.

Signals Detected

Moderate sentence length variance; typical journalistic structure.

Clear narrative flow connecting the incident, the response, and historical context.

Attribution clearly links reporting to Bloomberg/Arkham Intelligence and official statements from Kraken.

Specific data points (12,000 transfers, 2022 examples) are presented with specific external attributions; context appears historically grounded.

Human Indicators

Use of direct quotes attributed to a spokesperson and references to specific regulatory actions (EU sanctions).

Integration of niche, yet verifiable, historical context regarding past dusting attacks involving celebrities and sanction evasion.

The synthesis between the immediate event and long-term systemic implications suggests editorial framing rather than pure data dumping.