# HTX Investigates 'Tainted' Transactions to User Wallets

Crypto exchange HTX probes suspicious small transfers to accounts amid sanctions compliance risks.

- **Source:** [INCRYPTED](https://brifing.si/source/7cd4625d-3f08-4cc1-983d-4c7d991839ba)
- **Published:** 2026-08-18
- **Topic:** [Finance](https://brifing.si/c/finance)
- **Original article:** <https://incrypted.com/htx-nachala-rassledovanye-po-povodu-zarazhennyh-tranzaktsyj-na-koshelkyh-polzovatelej/>
- **On Brifing:** https://brifing.si/s/826eea24-6469-41b3-8a32-113d9cf01c1f

## Wave of Suspicious Transfers

HTX crypto exchange users began receiving small USDT transfers on August 18, 2026, allegedly from HTX-linked addresses. These transactions to competitor exchanges like Coinbase could trigger sanctions-related freezes of recipient wallets. Users on social media dubbed the phenomenon 'AML contamination,' expressing concerns about account suspensions despite receiving negligible amounts.

## Sanctions-Related Exposure

HTX faced UK sanctions in May 2026 and EU restrictions in July 2026, flagging any interacting wallets as 'high-risk.' Users fear even minor transactions from HTX could prompt exchanges to freeze accounts. Coinbase reportedly warned some users about potential account closures without satisfactory explanations. This highlights the unintended consequences of sanctions on ordinary crypto holders.

## Exchange's Crisis Response

HTX Markets Head Liu Ye confirmed an internal investigation, calling the transfers either a misunderstanding or deliberate sabotage. The exchange denies originating these transactions and promises transparency. Ye emphasized HTX's zero-tolerance policy for such activities while acknowledging the need for urgent resolution. The situation tests HTX's ability to manage compliance crises under sanctions.

## AML System Exploitation

The incident reveals how bad actors could weaponize compliance protocols. By sending trivial amounts to innocent users, attackers might trigger automated freezes—a novel attack vector. Cybersecurity experts urge exchanges to implement secondary verification for sanction-linked transactions. This case underscores the delicate balance between security measures and user protection in decentralized finance.

## Community Backlash

Users like @0xZiye shared screenshots of suspicious $7.5 deposits to their Coinbase accounts, asking if HTX founder Sun Ge was 'taking revenge on society.' The crypto community debates whether HTX is 'polluting' external wallets intentionally. Some speculate this could be indirect pushback against sanctions, while others suspect a security breach or competitor interference.

## Sanctions' Ripple Effects

HTX's sanctions have caused a 40% drop in trading volume over three months, demonstrating regulatory actions' market impact. The incident shows how sanctions can extend beyond targeted entities to affect ordinary users—a first in crypto compliance history. Analysts warn this may complicate cross-exchange collaborations as platforms heighten risk aversion.

## Possible Scenarios

Two primary theories emerge: Either HTX's systems were compromised, or a bad actor is impersonating HTX to target users. A third possibility—HTX attempting sanctions evasion—seems less likely given official statements. The investigation's findings could set new security precedents, potentially reshaping how exchanges handle sanctioned transactions and user protections.

## Industry-Wide Implications

This event exposes tensions between crypto's decentralized ethos and regulatory realities. The exploitation of AML policies may prompt stricter oversight. With 'innocent' wallets at risk, debates about asset security and user liability intensify. HTX's response could determine whether this becomes a watershed moment for crypto compliance standards or a cautionary tale about regulatory overreach.

## Sources covering this story

- https://incrypted.com/htx-nachala-rassledovanye-po-povodu-zarazhennyh-tranzaktsyj-na-koshelkyh-polzovatelej/ — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
