Live data
What the sanction and label feeds brought in over the last 24 hours, and what it turned into.
in the last 24 hours. OFAC, UK and EU lists are re-read every day, and every address already listed stays flagged.
1,130 addresses blocked by the issuer
10,785 addresses blocked by the issuer
2 re-checked
across 4 feeds
- Unbacked Mint Incident on Pirate ChainAn unbacked mint incident occurred involving Pirate Chain. The specific details regarding loss and chain are not disclosed.
- Pirate Chain Suffers $10.7 Million Loss from Transaction Validation VulnerabilityA vulnerability in Pirate Chain's source code led to the unauthorized creation of ARRR tokens, resulting in a significant financial loss. The exploit involved two validation failures that allowed the increase of the total supply by approximately 20%.
- UNCX Network V2 Suffers $86,000 Loss Due to Accounting ErrorUNCX Network V2 experienced a loss of $86,000 due to incorrect share accounting.
Counts only. Entity names where we have them, never addresses. Updated .
All incidentsLatest investigations
Where stolen money went, traced on-chain, with every transaction linked.
The Houthis’ eight sanctioned Tron wallets: $915M passed through — and the freeze that mattered came four months before the sanctions
822.7M USDT through one wallet, 81.5M traded with Sa’id al-Jamal’s listed wallets, 750,318 USDT frozen by Tether in Dec 2024 — the other six held 24 cents.
Gamdom hack: $2.2M still parked in DAI, $363k turned into Monero on Hyperliquid, the Bitcoin into a coinjoin
Full attacker addresses behind the analysts’ map: 2.0M DAI and 87 ETH unmoved, the branch where the public trail stopped went to Hyperliquid too, $363k bought a Monero token, 1.5 BTC went into a coinjoin.
The EIP-7702 sweeper behind the sven.eth theft: 120 wallets, not one, and the 9 ETH went back nine minutes later
The press reported one victim and no recovery; on chain the attacker used delegations from 120 wallets, sent sven.eth 9.58 ETH back nine minutes after the sweep, and cashed 3.32 ETH out into a Binance deposit.
Moonwell MAMO exploit: 800 ETH from Tornado Cash in, 8.73 million DAI out, and the DAI has not moved for seven weeks
The Base exploit of 27 Aug was paid for with ~800 ETH from Tornado; 1.95M USDC bridged in, 8.73M back as unfreezable DAI; the attacker’s own gain is about $6.78M; all 8,728,319 DAI still sit on one Ethereum wallet.
UNCX vesting exploit: $1.08 million from BNB Chain still sits untouched, and the Ethereum attacker came back for its ZC
Updated 16 Oct: $1.49M on four chains; a Tornado-funded BNB Chain attacker parked $1.08M on an address that has never sent a tx, with UNCX offering a 10% bounty; the Ethereum attacker has taken 21.45 ETH.
Aave Loop Safe Module exploit: 114 ETH into Railgun in 98 minutes, and a bounty offer that came four hours late
Gas from Railgun, the loot back into Railgun 98 minutes later; both drained Safes run by one key, the only two Safes that ever enabled the adapter.
See it in 70 seconds
A sanctioned address, a clean one, the same answer from the API — no signup.
Why PublicAML?
By default—compliance for everyone. Free, fast, anonymous.
The Protection Gap
Traditional AML solutions are designed for banks and large centralized exchanges, leaving the decentralized crypto ecosystem vulnerable.
Wallets, OTC desks, and DeFi platforms remain blind to sanctioned addresses, scam operations, and high-risk transactions.
This creates a massive security gap that bad actors exploit daily, putting millions of users at risk.
Our Mission
PublicAML is the world's first free, real-time AML firewall that protects everyone in the crypto ecosystem.
Works in every wallet
Universal protection across all crypto wallets and platforms
Blocks scams before they happen
Real-time detection and prevention of malicious transactions
Protecting wallets, OTC desks & DeFi platforms across the ecosystem
Trusted by millions across the crypto ecosystem
Easy Integration Options
API
RESTful API for real-time address checking
SDK
Developer-friendly SDKs for multiple languages
Smart Contract
On-chain integration for DeFi protocols
Telegram Bot
Instant address checking via Telegram
Free Forever, Easy to Integrate
We believe AML protection should be accessible to everyone in crypto, not just large institutions. That's why PublicAML is completely free and designed for easy integration into any platform.
Who Uses PublicAML
From individual users to large platforms, everyone in crypto can benefit from AML protection
Wallets
MetaMask, Trust, LedgerProtect users from sending funds to malicious addresses
OTC Desks
Over-the-counter tradingCompliance and risk management for trading platforms
DeFi/NFT
DEXs, NFT marketplacesReal-time protection for decentralized applications
Individual Users
Crypto traders, investorsPersonal protection for individual crypto users
Comprehensive Ecosystem Coverage
Individual Users
- Wallet protection and transaction screening
- Real-time scam and hack prevention
- Free access to AML data
Institutions & Platforms
- Easy API integration and SDKs
- Compliance and regulatory reporting
- Custom risk management solutions
Free, non-profit, no licence fee.
Why Trust PublicAML?
Built on principles of transparency, accessibility, and public good
The score is a stated policy, not a model
Two axes set every number. What is alleged carries its own severity, who alleges it carries one trust rank from 0 to 100, and the score at the point of origin is the lower of the two. The whole derivation travels in the same response as the score, so you can check it instead of trusting it.
Read the methodologyseverity
source rank
A weak source cannot carry a heavy accusation, and a strong one cannot make a soft category heavy.
Our Commitment to Trust
We believe that AML protection should be a public good, not a profit center. Our commitment to transparency and accessibility drives everything we do.
Data Sources
- OFAC sanctions lists
- EU sanctions database
- Verified scam databases
- Community-reported threats
Our Principles
- Free access for everyone
- Open source transparency
- No vendor lock-in
- Community-driven development
Join Our Growing Community
We're building the future of crypto security together. Testimonials and partner logos coming soon.
Journalists: see our press kit.
API & SDK Integration
Drop-in REST & JS SDK for pre-transaction screening. Quick to integrate, secure, and reliable.
REST API
Simple HTTP endpoints for real-time address checking and risk assessment.
// REST API Example — no API key required
const res = await fetch('https://intelapi.publicaml.org/v1/enrich', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
addresses: [
{
wallet_address: '0x742d35Cc6634C0532925a3b844Bc454e4438f44e',
chain: 'ETH',
},
],
}),
});
const { entities } = await res.json();
console.log(entities[0].aml_score); // 0–100
Webhooks
Real-time notifications when addresses are flagged or risk scores change.
// Webhook Integration
app.post('/webhook/publicaml', (req, res) => {
const { address, risk_score, risk_flags } = req.body;
if (risk_score >= 70) {
// Block transaction or show warning
console.log('High risk detected:', address);
}
res.status(200).json({ received: true });
});
Telegram Bot
Instant address checking via Telegram with inline results and risk alerts.
// Telegram Bot Integration
@bot.message_handler(commands=['check'])
def check(msg):
address = msg.text.split(' ')[1]
// Call PublicAML API
risk = publicaml.check_address(address)
if risk['risk_score'] < 30:
bot.reply_to(msg, '✅ Address looks safe.')
else:
bot.reply_to(msg, '⚠️ Address is risky.')
API Features & Limits
AML screening inside your AI assistant
Our MCP server puts wallet screening, fund tracing and counterparty lookup directly into Claude, Cursor and any other MCP client. Ask about an address in plain language and the assistant checks it against PublicAML.
npx -y @publicaml/mcp-server{
"mcpServers": {
"publicaml": {
"command": "npx",
"args": ["-y", "@publicaml/mcp-server"]
}
}
}Bitcoin, Ethereum, BNB Chain and TRON. Works with no account; an optional API key only raises the rate limit. View on npm
No excuse not to check AML.
It's free, fast, and protects your users.