⚡Aperture Finance Exploit: Traced On-chain
Two protocols were compromised through unlimited token approvals. Only Aperture Finance publicly acknowledged the issue and initiated on-chain communication with the attacker.
❗On-chain tracing shows ~$13M in stolen assets. About $3M in USDC remains untouched, while other assets were swapped into ETH — with ~540 ETH still sitting at the original address.
Funds followed a standard cross-chain laundering path via Relay and Superbridge. We completed full cross-chain tracing, including post-bridge dispersion on Ethereum. These wallets are currently dormant.
👉A second exploiter was identified. One address — originally funded via Tornado Cash, using the same infinite-approval vulnerability hours after the initial exploit.
Most funds remain traceable and inactive.
Two protocols were compromised through unlimited token approvals. Only Aperture Finance publicly acknowledged the issue and initiated on-chain communication with the attacker.
❗On-chain tracing shows ~$13M in stolen assets. About $3M in USDC remains untouched, while other assets were swapped into ETH — with ~540 ETH still sitting at the original address.
Funds followed a standard cross-chain laundering path via Relay and Superbridge. We completed full cross-chain tracing, including post-bridge dispersion on Ethereum. These wallets are currently dormant.
👉A second exploiter was identified. One address — originally funded via Tornado Cash, using the same infinite-approval vulnerability hours after the initial exploit.
Most funds remain traceable and inactive.
❤2
🆕 AMLBot KYT Now Supports Hyperliquid Monitoring
Hyperliquid is one of the fastest-growing decentralized trading environments — processing billions in daily trading volume.
But there’s an important architectural nuance.
Most tools monitor HyperEVM (the application layer).
⚡We indexes HyperCore. the settlement layer where value transfer occurs, and monitors the Arbitrum bridge used to move USDC in and out of the ecosystem.
❗For compliance teams this means visibility into:
— Deposits Entering Hyperliquid
— Internal Value Transfers
— Dithdrawals Back to Arbitrum
Request Access to Hypertliquid KYT Monitoring: https://hubs.li/Q045LVXs0
Hyperliquid is one of the fastest-growing decentralized trading environments — processing billions in daily trading volume.
But there’s an important architectural nuance.
Most tools monitor HyperEVM (the application layer).
⚡We indexes HyperCore. the settlement layer where value transfer occurs, and monitors the Arbitrum bridge used to move USDC in and out of the ecosystem.
❗For compliance teams this means visibility into:
— Deposits Entering Hyperliquid
— Internal Value Transfers
— Dithdrawals Back to Arbitrum
Request Access to Hypertliquid KYT Monitoring: https://hubs.li/Q045LVXs0
🆕 The Next Step In Crypto Compliance Is Detecting Illicit Intent
Transaction monitoring already flags risky transfers in real time.
But INTENT rarely appears in a single transaction.
❗Illicit activity is structured:
- Split across deposits
- Timed to stay below thresholds
- Individually acceptable yet collectively suspicious
⚡We added Behavioral Alerts to AMLBot’s KYT Dashboard. This allows for evaluating activity cumulatively across time and risk categories.
Instead of manually piecing together transfers, the system automatically detects patterns.
Not just detecting risk — detecting intent.
START DETECTING INTENT: https://hubs.li/Q045y3WK0
Transaction monitoring already flags risky transfers in real time.
But INTENT rarely appears in a single transaction.
❗Illicit activity is structured:
- Split across deposits
- Timed to stay below thresholds
- Individually acceptable yet collectively suspicious
⚡We added Behavioral Alerts to AMLBot’s KYT Dashboard. This allows for evaluating activity cumulatively across time and risk categories.
Instead of manually piecing together transfers, the system automatically detects patterns.
Not just detecting risk — detecting intent.
START DETECTING INTENT: https://hubs.li/Q045y3WK0
Media is too big
VIEW IN TELEGRAM
🇪🇺EU Travel Rule: Identity Data Is Now Part of Every CASP Transfer
Under Regulation (EU) 2023/1113, crypto transfers between CASPs in the EU must now include verified originator and beneficiary information.
This applies across all Member States and it’s directly enforceable.
👉In this video, we break down:
• What the EU hashtag#TravelRule Actually Requires?
• Who Qualifies As a hashtag#CASP Under MiCA?
• Why This Changes Crypto Operations In Practice
📌Part 2 Is Coming! We'll cover zero thresholds and unhosted wallets.
The Detailed Article on EU Crypto Travel Rule: https://hubs.li/Q043QSSQ0
Under Regulation (EU) 2023/1113, crypto transfers between CASPs in the EU must now include verified originator and beneficiary information.
This applies across all Member States and it’s directly enforceable.
👉In this video, we break down:
• What the EU hashtag#TravelRule Actually Requires?
• Who Qualifies As a hashtag#CASP Under MiCA?
• Why This Changes Crypto Operations In Practice
📌Part 2 Is Coming! We'll cover zero thresholds and unhosted wallets.
The Detailed Article on EU Crypto Travel Rule: https://hubs.li/Q043QSSQ0
🇰🇷South Korean Prosecutors Attempted to Seize Nearly 1,800 BTC Linked to An Illegal Gambling Operation
They secured part of it.
Another large portion moved during the search.
And even the seized funds later left the official wallet — before being returned years after.
👉This case is about:
• Shared wallet access during seizure
• Exchange-level exposure
• Timing gaps in operational control
• What happens when custody procedures aren’t airtight
Check the slides below for the detailed breakdown.
📍If you work with investigations, compliance, or asset recovery and want to trace flows at this level yourself — explore AMLBot Tracer:
https://hubs.li/Q044T5t-0
They secured part of it.
Another large portion moved during the search.
And even the seized funds later left the official wallet — before being returned years after.
👉This case is about:
• Shared wallet access during seizure
• Exchange-level exposure
• Timing gaps in operational control
• What happens when custody procedures aren’t airtight
Check the slides below for the detailed breakdown.
📍If you work with investigations, compliance, or asset recovery and want to trace flows at this level yourself — explore AMLBot Tracer:
https://hubs.li/Q044T5t-0