Blockchain Intelligence Releases · May 2026

Faster Attribution.Cross-Chain Reach.

New intelligence releases shipped across counter narcotics, sanctions, fraud, facilitation, and chain coverage

UK-designated entities, live in days

+$0

New darknet-market visibility

Custodial cross-chain swaps traceable

Scam accounts disrupted

Scroll to explore

+$248M new darknet-market and drug-vendor visibility

+10 UK-designated entities live in-product within days

+$5.7B additional A7-linked volume detected

+$1.6B custodial cross-chain swaps now traceable

+20M more addresses linked to jurisdictions

+1.4M scam accounts disrupted in DOJ Disruption Week

NEW 5 blockchains live: Bob, Ink, Chiliz, TAO, Arc

+$11M THORChain exploit traced across 9 chains

+$69.8M new fentanyl-linked attribution

+$450M frozen by the T3 Financial Crime Unit

+$248M new darknet-market and drug-vendor visibility

+10 UK-designated entities live in-product within days

+$5.7B additional A7-linked volume detected

+$1.6B custodial cross-chain swaps now traceable

+20M more addresses linked to jurisdictions

+1.4M scam accounts disrupted in DOJ Disruption Week

NEW 5 blockchains live: Bob, Ink, Chiliz, TAO, Arc

+$11M THORChain exploit traced across 9 chains

+$69.8M new fentanyl-linked attribution

+$450M frozen by the T3 Financial Crime Unit

Counter Narcotics

A record month for darknet-market visibility

+$248M in newly visible darknet-market and drug-vendor proceeds, plus new fentanyl-linked attribution

+ Expanded

+$248M

Expanded darknet-market coverage by $248M

TRM added $248M in newly visible darknet-market and drug-vendor proceeds in May, the largest single-month gain this year. The growth came from a new Bitcoin service heuristic that surfaces previously unlabeled darknet-market infrastructure.

For investigators tracing drug proceeds:

The largest single-month darknet-market visibility gain this year
A new Bitcoin service heuristic surfaces previously unlabeled marketplace infrastructure
Trace a larger share of previously invisible drug proceeds with higher confidence

+ New Attribution

+$69.8M

New fentanyl-linked money-laundering attribution

TRM added $69.8M in new attribution across the fentanyl supply chain and cross-border money-laundering networks in May, with newly OFAC-designated entities live in-product immediately after the designation.

Coming Soon

Emerging

Tracking an emerging hybrid darknet marketplace

TRM is tracking an emerging darknet marketplace that operates across both the Russian and Western ecosystems at once, the first hybrid market of its kind. A dedicated intelligence piece on the trend is forthcoming.

Facilitation & Money Laundering

Mapping more flows to jurisdictions

20 million more addresses linked to jurisdictions, with deeper OTC cash-desk coverage

+ Expanded

+20M

Linked 20 million more addresses to jurisdictions

TRM expanded jurisdiction-linked address coverage by roughly 15% in May, driven by high-risk exchange attribution. The same work deepened OTC cash-desk coverage in key hubs.

For investigators and regulators:

20 million more addresses linked to specific jurisdictions
Driven by high-risk exchange attribution
Deepened OTC cash-desk coverage in key hubs
Map illicit flows to jurisdictions and OTC infrastructure more completely, sharpening country-level risk assessment

Fraud

Intelligence driving real-world disruption

From a 1.4M-account DOJ takedown to same-day exploit analysis to $450M+ frozen

New Proof Point

1.4M+

Supported DOJ Disruption Week takedowns

TRM supported the US Department of Justice’s Disruption Week, a public-private operation with DOJ, Meta, and Five Eyes law enforcement that disrupted more than 1.4M scam accounts, froze over $3.8M in crypto, and led to seven arrests in Thailand.

For law enforcement and compliance teams:

More than 1.4M scam accounts disrupted
Over $3.8M in crypto frozen
Seven arrests in Thailand; malicious infrastructure decommissioned
A public-private operation with DOJ, Meta, and Five Eyes law enforcement

New Proof Point

$11M+

Published analysis of the THORChain exploit

After an attacker drained more than $11M from THORChain across nine blockchains on May 15, TRM published same-day analysis tracing the stolen funds and monitoring the consolidation wallet.

TRM Blog

New Heuristics

New

New high-confidence scam-detection heuristic

TRM deployed a new high-confidence scam-detection heuristic that added hundreds of thousands of new scam-related labels, capturing addresses with overwhelming exposure to known scam activity before victim funds reach an exchange.

New Proof Point

$450M+

T3 Financial Crime Unit surpasses $450M frozen

TRM marked the T3 Financial Crime Unit, its collaboration with Tether and TRON, surpassing $450M+ in illicit stablecoins frozen since launching in September 2024, in a public recap published in May.

TRM Blog

Sanctions

Same-day designation response, deeper evasion coverage

From the UK’s largest crypto designation to expanded A7 and high-risk exchange coverage

New Proof Point

Rapid attribution of the UK’s largest crypto sanctions designation

When the UK designated a slate of crypto exchanges and sanctions-evasion entities in late May, including HTX (Huobi Global) and Rapira, TRM attributed all designated entities and surfaced them live across the product, on both the front end and APIs.

TRM Blog

For customers with sanctions exposure:

All designated entities attributed and live within days, on front end and APIs
Includes HTX (Huobi Global) and Rapira
HTX is among the largest exchanges ever brought into a single crypto designation
Customers with exposure can identify and act on it almost immediately, instead of waiting for attribution to catch up

+ Expanded

+$5.7B

Expanded attribution of the A7 sanctions-evasion network

TRM expanded its coverage of A7, the Russia-linked sanctions-evasion network, detecting roughly $5.7B in additional A7-linked volume during May, with high precision on validation checks.

New Heuristics

$50M+

New high-risk exchange heuristics deployed

TRM shipped new expert-built heuristics targeting high-risk exchange infrastructure, adding $50M+ in newly attributable sanctions-relevant volume and tens of thousands of new labels.

+ New Attribution

$221M

New attribution for a designated transnational criminal organization

TRM added attribution for a newly designated transnational criminal organization (FTO/SDGT), 66 addresses and $221M in incoming volume, supporting law-enforcement action against the laundering networks that move its proceeds.

Chain Releases

Reconnecting the trace across chains

Custodial cross-chain swap detection, five new blockchains, and indirect exposure paths on 46 more chains

New Capability

$1.6B

Custodial cross-chain swap detection

TRM shipped custodial cross-chain swap detection, labeling $1.6B across 225K+ swap pairs spanning 12 blockchains, with 100% precision on a ground-truth test set. It connects the deposit and withdrawal sides of custodial swaps that previously broke the trace.

For investigators following cross-chain flows:

$1.6B labeled across 225K+ swap pairs on 12 blockchains
100% precision on a ground-truth test set
Connects deposit and withdrawal legs that previously broke the trace
Follow funds straight through custodial cross-chain swaps, a common laundering step

New Feature

TRON

TRON staking and token-approval intelligence in the graph

TRM added two new TRON intelligence attributes to Forensics, Staking and Token Approvals, surfacing more on-chain context for TRON addresses directly in investigations.

New Chains

Five new blockchains added

TRM brought five new blockchains to general availability in May, Bob, Ink, and Chiliz, Bittensor (TAO), and Arc, each with standard support, a block explorer, wallet screening, transaction monitoring, and real-time coverage.

+ Expanded

+46

Indirect exposure path tracing extended to 46 more chains

Graph Visualizer now renders the full hop-by-hop pathway behind high and severe indirect exposure on 46 standard-support chains, including Cardano, Arbitrum, SUI, Hyperliquid, and Cosmos.

Coming Soon

Stay tuned for more

Blockchain Intelligence Releases ship monthly. Every month, new attribution, new capabilities, and fewer blind spots for customers.

June 2026 releases in progress