Kraken Says Nearly 12,000 Small Transfers From HTX-Linked Wallet Triggered Compliance Review
Key Takeaways
- •Kraken said nearly 12,000 small cryptocurrency transfers were sent to addresses linked to the exchange over a seven-day period in August.
- •The exchange characterized the activity as a dust attack and said it may have been meant to spread sanctioned funds and prompt compliance checks.
- •Some Kraken customer accounts were temporarily restricted, but access has since been restored.
- •Kraken continues to hold the sanctioned funds tied to the activity.
- •HTX denied responsibility for the transfers and said it is investigating whether the wallet attribution was incorrect or whether a third party was involved.

Kraken temporarily restricted access to some customer accounts after a wallet identified as linked to HTX sent nearly 12,000 small cryptocurrency transfers to Kraken-linked addresses, according to Bloomberg and information shared by @WuBlockchain on X.
Kraken described the activity as a “dust attack,” a type of activity involving numerous small cryptocurrency transfers. The exchange said the transactions may have been intended to distribute sanctioned funds and trigger compliance reviews across other cryptocurrency platforms.
The transfers took place between Aug. 17 and 24 and were mostly worth only a few cents or dollars. Kraken has since restored access to affected accounts while continuing to hold the sanctioned funds.
HTX denied initiating the transfers and said it is investigating whether the wallet addresses were incorrectly attributed to the exchange or whether a malicious third party was responsible.
Nearly 12,000 Small Transfers Sent to Kraken
According to Bloomberg’s reporting, the wallet sent nearly 12,000 small transactions to addresses associated with Kraken over the seven-day period from Aug. 17 to 24.
Most of the transfers involved relatively small amounts, generally worth only a few cents or dollars. Despite their limited individual value, the large number of transactions prompted compliance-related scrutiny at Kraken.
Arkham Intelligence identified the wallet as being linked to HTX, according to the report. Kraken then characterized the activity as a dust attack.
In cryptocurrency markets, dust attacks can involve sending very small amounts of digital assets to numerous addresses. Such activity can be used for various purposes, including attempting to associate addresses with particular transaction histories or creating operational and compliance difficulties for recipients.
Kraken said the activity may have been designed to spread sanctioned funds and prompt compliance reviews at other platforms.
Kraken Restores Affected Customer Accounts
Some Kraken customers were temporarily locked out following the transfers, according to the report.
The restrictions were tied to compliance reviews triggered by the incoming transactions. Kraken has since restored access to the affected accounts.
The exchange continues to hold the sanctioned funds associated with the activity. The information provided does not specify the total monetary value of those funds.
The incident highlights how blockchain transactions can create compliance challenges for cryptocurrency exchanges even when individual transfers are extremely small.
Because blockchain transactions are publicly recorded and can be analyzed through wallet addresses, exchanges can investigate the origins and relationships associated with incoming funds. When an address is connected to a sanctioned entity or otherwise raises compliance concerns, transactions can receive additional scrutiny.
HTX Denies Responsibility for Transfers
HTX rejected the suggestion that it initiated the transfers.
The exchange said it is investigating the circumstances surrounding the wallet and the transactions. HTX raised the possibility that the wallet may have been incorrectly attributed to the exchange or that malicious third-party activity could have been responsible.
The denial leaves open the question of who controlled the wallet when the transactions were made.
Attribution of cryptocurrency addresses can involve blockchain analysis, transaction patterns and other forms of evidence. However, an address being identified as linked to an exchange does not by itself establish that the exchange directly initiated every transaction originating from that address.
HTX said its investigation is intended to determine whether the wallet was actually under its control or whether another party was responsible for the activity.
Compliance Risks From Small Crypto Transfers
The incident highlights the compliance implications of receiving cryptocurrency from addresses associated with sanctioned funds.
While the individual transfers were mostly worth only cents or dollars, their cumulative impact was enough to trigger reviews and temporarily affect some customers’ access to Kraken accounts.
For cryptocurrency exchanges, compliance systems must assess not only the value of transactions but also the source and destination of funds and their potential links to sanctioned entities.
A large volume of small transfers can therefore create operational challenges even when the financial value of each transaction is limited.
Kraken’s response reflects the role of compliance procedures in identifying potentially problematic blockchain activity. The exchange restored customer access while retaining the funds subject to sanctions-related concerns.
Investigation Continues Into Wallet Attribution
The disagreement between Kraken’s characterization of the activity and HTX’s denial leaves the question of responsibility unresolved.
Kraken has described the transfers as a dust attack and said they may have been intended to spread sanctioned funds and generate compliance reviews. HTX, meanwhile, is examining whether the wallet attribution was incorrect or whether a malicious third party used the address without the exchange’s involvement.
The incident underscores the importance of accurate wallet attribution in cryptocurrency compliance investigations. It also shows how relatively small blockchain transactions can have broader consequences when they involve addresses associated with sanctioned funds.
For now, Kraken has restored access to affected accounts and continues to hold the sanctioned funds, while HTX investigates the source of the transfers and the reported connection to its platform.