HTX Rapidly Cycles On-Chain Wallets Following UK Sanctions Designation

Rapid Wallet Rotation Outpaces Compliance Screening

Following the UK’s sanctions designation in May, cryptocurrency exchange HTX has undertaken a systematic overhaul of its on-chain infrastructure, rotating deposit and hot wallets across multiple blockchains at a rapid pace, according to blockchain intelligence firm TRM Labs. The exchange cycles wallets on TRON, Ethereum, BNB Smart Chain, and Solana, retiring each address and its associated funding sources within hours before migrating to freshly generated ones. This continuous rotation creates what TRM Labs characterizes as a “moving target” for compliance professionals attempting to track and block HTX activity through address-list screening, which TRM said “cannot keep pace” with the frequency of changes.

Sanctions Context and Alleged Kremlin Ties

The UK Office of Financial Sanctions Implementation designated Huobi Global S.A., the entity operating under the HTX brand, on May 26, marking the first time the UK applied such measures to a cryptocurrency exchange of that scale. The designation was part of a broader sanctions package targeting crypto exchanges and the “A7 network,” which UK authorities alleged was employed by Russia to circumvent existing restrictions and funnel resources to support its invasion of Ukraine. Government officials flagged HTX as a “major global cryptocurrency exchange” and indicated the entity was suspected of having channeled more than $1.5 billion toward the Kremlin. Despite this designation, HTX maintained operations under its existing brand while restructuring its technical foundation to navigate the sanctions regime.

Structural Response and Industry Precedent

The wallet rotation strategy reflects a broader pattern TRM Labs has observed among well-resourced sanctioned entities, which typically do not cease operations entirely but instead adapt their infrastructure. The firm drew parallels to Russian exchange Garantex, which, after its own designation in March 2025, established a successor entity called Grinex and migrated funds through the ruble-pegged stablecoin A7A5. HTX’s approach differs in that it preserved the original brand while reconstructing at the wallet level, maintaining continuity in branding and customer relationships while shifting the technical surface area that compliance systems target. TRM Labs emphasized that effective monitoring of such activity requires tracking the behavioral patterns and mechanisms behind rotating addresses rather than relying solely on static address lists.

Limited Regulatory Scope and HTX’s Response

A critical factor in HTX’s continued operation is that neither the U.S. Treasury’s Office of Foreign Assets Control (OFAC) nor the European Union has imposed designations on the exchange. Consequently, regulatory freeze obligations apply only to UK-regulated financial institutions, leaving HTX accessible to customers and counterparties outside that jurisdiction. TRM Labs nonetheless advised treating HTX as an “elevated sanctions-evasion risk” pending broader regulatory action. In response to the TRM Labs report, an HTX spokesperson characterized the observed wallet activity as reflecting “routine, security-driven platform operations” and rejected interpretations suggesting improper conduct or sanctions circumvention.

Source: TRM Labs, via Decrypt. Not financial advice.