Crypto Mixer Sanctioned by U.S. Treasury for North Korea Allegations, as FBI, Dutch and Finnish Police Seize Website
Sinbad was used to launder stolen crypto assets, according to the Treasury.

The U.S. Treasury Department has blocked a crypto mixing service from the global dollar financial system on allegations it supported transactions tied to North Korea's infamous hacking group.
Sinbad's website was also seized by the FBI, Dutch Financial Intelligence and Investigation Service (FIOD), Openbaar Ministerie (the Netherlands' public prosecutor's office) and Finnish National Bureau of Investigation.
A Treasury press release described Sinbad as "a virtual currency mixer that serves as a key money-laundering tool of the OFAC-designated Lazarus Group, a state-sponsored cyber hacking group of the Democratic People’s Republic of Korea (DPRK)."

Treasury's Office of Foreign Assets Control, or OFAC, designated two Bitcoin addresses and two email addresses tied to Sinbad, banning all U.S. persons and anyone who transacts with the global financial system from interacting with the addresses in future.
According to a Blockchain.com block explorer, one address currently holds around 0.35 BTC (worth around $13,000) at the moment, but has received a hair over 15 BTC (worth around $570,000 at current prices) overall.
The other address, designated an alternate, holds around $67 worth of bitcoin.
Sinbad processed funds from the hacks of Horizon Bridge and Axie Infinity, the release said. It's also moved funds tied to "sanctions evasion, drug trafficking, the purchase of child sexual abuse materials and additional illicit sales on darknet marketplaces."
Sinbad is a relatively young mixer, crypto analytics service Chainalysis said, which began advertising in October 2022.
Fellow analytics service Elliptic claimed Sinbad was also used to move some of the $35 million stolen from Atomic Wallet earlier this year.
The Treasury Department's sanctions watchdog has previously designated Tornado Cash and other mixers as being bad actors for allowing illicit activity. Tornado Cash in particular saw similar North Korea allegations when OFAC sanctioned it last year.
A U.S. Department of Justice spokesperson referred CoinDesk to the FBI when asked for comment. The FBI did not immediately return an email.
UPDATE (Nov. 29, 2023, 16:06 UTC): Adds additional detail.
More For You
Protocol Research: GoPlus Security

What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
U.S. Senate's Crypto Market Structure Bill Gets Messy as Calendar Weighs Down

The White House has shut down proposals, and lawmakers are circulating the Democrats' asks in what had been a close negotiation, revealing 11th-hour pressure.
What to know:
- Democrats shared a response to Republicans outlining their continuing priorities for a crypto market structure bill, which they said was intended to "reach an agreement and proceed towards a mark-up."
- The document laid out concerns with financial stability, market integrity and public officials' ability to trade and profit off of crypto, echoing concerns laid out in a framework Democrats shared in September.
- The Senate is running out of time in the Congressional calendar to hold a markup hearing — a key step toward progressing the bill — before 2025 ends.











