Warning

Please be vigilant about TRM impersonation scams, especially those claiming to assist with fund recovery. More info

Solutions
Products
RESOURCES
Customers
Company
Request a demo
en
Search
Search
REQUEST A DEMO
Blockchain Intelligence Releases · April 2026

Designations. Disruption.Deeper Signals.

New intelligence releases shipped across sanctions, fraud, facilitation, signals intelligence, and child safety

$0
Iran CBI-linked crypto frozen
+$0
In new hack and exploit events
+0%
Yamersal TRON coverage
~0K
New Bitpapa addresses
Scroll to explore
+$344M Iran CBI-linked crypto frozen by OFAC
+$642M across 39 new hack and exploit events
+~9K new Bitpapa addresses (TRON + ETH)
+98% Yamersal coverage expansion on TRON
NEW TRON smart contract deployer signature
+$15M TokenSpot Garantex-front analysis
NEW OFAC Cambodian scam-center designation
NEW CSAM vendor attribution → felony arrest
+$344M Iran CBI-linked crypto frozen by OFAC
+$642M across 39 new hack and exploit events
+~9K new Bitpapa addresses (TRON + ETH)
+98% Yamersal coverage expansion on TRON
NEW TRON smart contract deployer signature
+$15M TokenSpot Garantex-front analysis
NEW OFAC Cambodian scam-center designation
NEW CSAM vendor attribution → felony arrest
CSAM

Blockchain intelligence that translates to arrests

Public-record validation that TRM’s CSAM vendor attribution converts into prosecutions

New Proof Point
4 felonies
Virginia preschool teacher arrest follows on-chain trace to CSAM vendor
A US Secret Service trace of a single cryptocurrency transaction from a US-based exchange account to a known CSAM vendor’s address led to the March 31 arrest. TRM published a same-day blog on May 1, 2026.
TRM Blog
For exchanges and law enforcement:
  • Public-record validation that CSAM vendor attribution converts into arrests
  • On-chain traces from customer accounts to CSAM vendor addresses are actively being worked into prosecutions
  • Multi-agency coordination: HPD, USSS, HSI, Rockingham County Sheriff, CPS, Northern Virginia/DC ICAC Task Force
  • Reinforces value of accurate CSAM attribution in screening and SAR workflows
Sanctions

Same-day response to designations, deeper sanctioned-entity coverage

From the OFAC Iran CBI freeze to public Garantex-front analysis to new Bitpapa heuristic coverage

New Proof Point
$344M
OFAC freezes $344M in Central Bank of Iran-linked crypto, sanctions new addresses
OFAC updated its sanctions list on April 24 with new Central Bank of Iran and IRGC-linked stablecoin addresses, coordinated with a $344M USDT freeze. TRM published same-day analysis walking through the on-chain footprint and the freeze mechanics, and the new SDN entries went live in TRM the same day.
TRM Blog
For Iran-exposure customers:
  • New SDN entries reflected in TRM the day Treasury moves
  • Same-day analysis plus live in-product SDN entries let compliance teams immediately assess exposure
  • No waiting period for coverage updates after a Treasury designation
New Proof Point
$10B+
OFAC sanctions Cambodian senator and scam-center network
Treasury designation ties to $10B+ in 2024 American losses to Southeast Asia scam operations (+66% YoY per US government). New SDN entries went live in TRM same day, with mapped on-chain context.
TRM Blog
+ Added
~9K
New Bitpapa heuristic coverage adds ~9K addresses across TRON and Ethereum
Deposit-wallet heuristic for sanctioned P2P marketplace Bitpapa attributes roughly 9,155 new addresses across TRON and Ethereum, extending coverage well beyond the previously labeled hot-wallet layer.
New Proof Point
$15M
TRM publicly identifies TokenSpot as a likely Garantex front in $15M theft analysis
TRM published analysis of a $15M theft from sanctioned Russian exchange Grinex and Kyrgyzstani exchange TokenSpot on April 16, publicly assessing TokenSpot as a likely Garantex front company.
TRM Blog
Fraud

Closing the gap on stolen funds

+$642M attributed across 39 new hack and exploit events

+ Added
+$642M
39 new hack and exploit events attributed
TRM added 39 new hack and exploit events totalling roughly $642M to its hacks-and-exploits dataset in April. Each event includes the perpetrator on-chain footprint and victim attribution where available.
For customers screening stolen-funds exposure:
  • 39 more events surfaced in TRM’s risk taxonomy this month
  • Stablecoin issuers and exchanges get a faster path to actionable on-chain intelligence
  • Law enforcement chasing recoverable proceeds gets more leads
  • Each event ties to perpetrator on-chain footprint and victim attribution where available
Facilitation & Money Laundering

Doubling visibility into a high-risk service

Yamersal attribution coverage expanded by 98%

+ Expanded
+98%
Yamersal coverage expands by 98%
TRM expanded attribution coverage of Yamersal, a high-risk service, by 98%. The expansion followed propagation work that traced previously-unattributed deposit infrastructure connected to the entity.
For customers screening transactions:
  • Attribution on nearly twice as many Yamersal addresses
  • Improved detection of funds flowing through this high-risk intermediary
  • Net-new coverage extends beyond the previously labeled hot-wallet layer
  • Coverage live in TRM products immediately
SIGINT

A new signal on every TRON contract

TRON smart contract deployer signature surfaces in product

New Capability
TRON
New TRON smart contract deployer signature
TRM now surfaces the TRON smart contract deployer signature as a new intelligence signal. Contract deployments leave a permanent on-chain link between the deployer wallet and the deployed contract, giving investigators a new lead on every TRON contract address.
April product highlights
For investigators on TRON:
  • Trace contract origins directly inside TRM
  • Complements the account activation signature shipped in March
  • Targets a chain heavily used for sanctions evasion, fraud, and money laundering via custom smart contracts
Coming Soon

Stay tuned for more

Blockchain Intelligence Releases ship monthly. Every month, new attribution, new capabilities, and fewer blind spots for customers.

May 2026 releases in progress