TLDR
- TRM Labs said HTX rotates wallets across TRON, Ethereum, BNB Smart Chain, and Solana.
- UK authorities sanctioned HTX in May over alleged Russian sanctions evasion activity.
- TRM Labs said wallet rotation makes static address-based sanctions screening less effective.
- HTX rejected the claims, calling the activity routine security-driven platform operations.
- UK regulators also filed legal proceedings against HTX over alleged unlawful financial promotions.
HTX is facing renewed sanctions scrutiny after TRM Labs said the exchange rotates wallets across four blockchains following UK sanctions. The report raises questions about address-based screening, while HTX says the activity reflects routine security operations across its platform systems.
TRM Labs Flags HTX Wallet Activity
TRM Labs reported that HTX has been rotating hot wallets and funding addresses across TRON, Ethereum, BNB Smart Chain, and Solana. The blockchain intelligence firm said the exchange changes addresses every few hours.
The firm said this pattern makes static address-based screening less effective. Traditional screening tools often rely on fixed wallet lists, which can fall behind when addresses change frequently.
UK authorities sanctioned Huobi Global S.A., now known as HTX, in May 2026. The sanctions were linked to allegations that the exchange helped support Russian sanctions evasion.
TRM Labs said HTX has continued operating since the sanctions. The firm described the exchange’s onchain footprint as “a continuous moving target.”
Screening Tools Face Moving Wallets
TRM Labs said HTX’s wallet rotation shows why static screening can miss activity tied to sanctioned entities. The firm argued that investigators need tools that detect behavior, not only wallet addresses.
Ari Redbord, global head of policy at TRM Labs, said, “HTX is changing its wallets every few hours to stay a step ahead of screening built on static lists.”
TRM Labs said behavior-based attribution can link new wallets to sanctioned entities by studying onchain patterns. These may include funding flows, timing, network activity, and wallet relationships.
The company said, “When an entity spins up a new wallet, behavior-based attribution recognizes it and ties it back to the designated entity as it comes online.” TRM added that such systems can update almost as fast as wallet rotation occurs.
HTX Rejects TRM Labs Claim
An HTX spokesperson rejected the way TRM Labs described the wallet activity. The spokesperson said the transactions mentioned in the report reflect normal exchange security operations.
HTX said the activity “reflect routine, security-driven platform operations common across the industry.” The spokesperson added, “We categorically reject any characterization implying otherwise and have no further comment.”
HTX previously said regulatory compliance remains a “top priority.” The exchange also said it monitors and follows rules in jurisdictions where it operates, including the UK.
The exchange remains under UK regulatory pressure beyond the sanctions action. In February, the Financial Conduct Authority began legal proceedings against HTX over allegations of unlawful financial promotions.
The latest report places HTX’s wallet management under closer review. TRM Labs framed the issue as a sanctions-screening challenge, while HTX framed the activity as routine platform security.





