Server-rendered tracker page for enforcement regulation in Global. This page is built for Google and LLM crawlers: every event below links to a permanent policy-event URL with source data and APAC FINSTAB analysis.
Jurisdiction: Global. Regulator: Financial regulator. Topic: Enforcement. Latest event: September 27, 2026 — Bitget Stolen Funds Reportedly Move Through USDT0 And Wasabi CoinJoin.
Use this page to compare rule changes, licensing signals, enforcement posture, and market-access implications for exchanges, stablecoin issuers, protocols, custodians and institutional teams operating across APAC.
AMLBot monitoring reported that part of the Bitget theft proceeds moved from TRX into USDT, crossed through USDT0 to Ethereum, and then entered Wasabi CoinJoin. The path compresses the freezing window for exchanges, stablecoin issuers and cross-chain monitoring teams.
The CFTC said Cash FX Group, its CEO and related parties were charged over an alleged $950 million retail forex and commodity pool fraud scheme. The action keeps high-yield crypto-adjacent investment programs in the enforcement frame for solicitation, referral and cross-border fund-flow controls.
Circle and Tether blacklisted a wallet labeled Bitget Exploiter 8, freezing about 218,023 USDT and 99,990 USDC after the Bitget theft. The response shows how stablecoin issuer blacklist authority, on-chain labeling and exchange intelligence-sharing drive post-hack sanctions and asset recovery workflows.
Onchain analysis linked Bitget stolen funds to TraderTraitor infrastructure and prior Lazarus-linked flows, while reports put the affected asset mix across XRP, ETH, stablecoins, XAUt, BNB and AVAX. If confirmed, venues face sanctions-screening, cross-chain tracing, deposit interdiction and law-enforcement coordination pressure.
PeckShield-linked monitoring reported that an attacker exploited SingularityNET-related bridge contracts to mint 260 million AGIX and 53.83 million WMTX on Ethereum. The incident forces exchanges and liquidity venues to reassess deposit controls, contaminated liquidity, and token-supply integrity.
Interpol is rolling out its Silver Notice mechanism so 196 member countries can share leads on cash, cryptocurrency, real estate and other illicit assets. The pilot has already involved 82 countries and identified at least EUR36 million in criminal assets, raising expected freeze-and-information requests for exchanges and custodians.
MultiversX paused block progression after confirming an attacker attempted to exploit a virtual-machine atomicity issue that created invalid on-chain state changes. Recovery will depend on patched VM code, replay testing and clear treatment of affected balances, bridge messages and exchange deposits.
A reported Notional Finance custody contract exploit led to about USD 1.7 million in DAI and USDC losses, with funds swapped into ETH and deposited into Tornado Cash. The flow affects exchange deposit monitoring, sanctions screening, victim recovery, and root-cause disclosure expectations for DeFi custody contracts.
The Justice Department said court-authorized actions let the FBI seize more than $560,000 in cryptocurrency and take control of online infrastructure tied to Hamas fundraising. Exchanges, stablecoin issuers and wallet providers need sanctions screening, domain intelligence and law-enforcement response procedures that can connect on-chain flows with off-chain infrastructure.
INTERPOL Operation Jackal IV targeted West African organized cybercrime across 22 jurisdictions, leading to 58 arrests and 263 identified suspects. The operation reinforces AML monitoring pressure on crypto investment fraud proceeds, OTC channels, wallet clusters and fiat off-ramps.
TRM Labs reported that AI adoption in crypto crime rose 40% over the past year, with scams the most mature use case and deepfake or AI-chatbot reports increasing sharply. Compliance teams face higher pressure to detect AI-generated identities, fraud campaigns and synthetic project materials during onboarding and asset review.
P2P trading platform NoOnes began a wind-down after unresolved sanctions issues caused it to lose key partners and led blockchain monitoring providers to flag related transactions as high risk. The case shows how sanctions labels can quickly propagate through payments, monitoring vendors and counterparty controls.
Daily policy intelligence flagged a suspected breach of Coinsbuy-related wallets with more than $7.9 million in losses and laundering through exchange routes into Monero. The case reinforces AML monitoring needs around compromised exchange wallets, cross-chain flows, privacy-coin conversion and freeze-coordination playbooks.
WIRED reported that Kumio CTO Vangelis Stykas found evidence North Korea-linked hackers impacted 1,640 companies across 57 countries, including hundreds of crypto-related targets with access to keys, cloud infrastructure and blockchain systems. The case ties cyber compromise directly to sanctions, AML and custody controls for crypto firms.
A Wu Blockchain legal analysis warned that perpetual crypto contracts can move toward gambling or casino-operation characterization in China when platforms use extreme leverage, low liquidation thresholds, counterparty betting, fee extraction or manipulated price feeds. Offshore licensing may not protect local promotion, payment, agency or technical-support chains that touch mainland users.
On-chain investigators reported that a threat actor bought darknet laundering services and then received 666,000 USDT, with the funds frozen by Tether days later. The case reinforces stablecoin issuer freezing as an AML intervention point for darknet, scam and laundering-service exposure.
Bloomberg reported that analysis of Polymarket activity found about $200 million of first-half 2026 wagers showing suspected insider-trading characteristics, with many profitable wallets created shortly before trades. The report shifts prediction-market compliance toward market surveillance, wallet clustering and non-public information controls.
Drop Site News reported that Consensys unknowingly hired a DPRK-linked developer consultant who used the Tyler Knapp alias and worked on MetaMask-related code. The case turns developer onboarding, vendor screening, repository access and sanctions controls into a front-line wallet compliance issue.
Bitrace reporting in the policy channel linked roughly $1.7 million in stolen Gate-related funds to Xinbi guarantee groups and Newpay addresses following the Huione crackdown. The case signals that Southeast Asian illicit guarantee platforms are reorganizing rather than disappearing, requiring updated KYT address clusters.
Bitrace reported that multiple Tether-frozen addresses were tied to Southeast Asia human-trafficking entities, with known flows reaching centralized exchanges. The case highlights why issuers and exchanges need coordinated sanctions, KYT and high-risk corridor controls for USDT flows.
The Wall Street Journal reported that Iran, Russia, North Korea and other sanctioned actors handled about USD100 billion in crypto last year, citing blockchain analytics firms and Western authorities. The scale reinforces pressure on exchanges, stablecoin issuers and bridges to strengthen sanctions screening and illicit-flow monitoring.
Blockchain analytics firms flagged concentrated and potentially circular activity around the ruble-backed A7A5 stablecoin while its promoters claimed much larger payment volumes. The dispute reinforces that sanctions reviews for stablecoins need issuer, liquidity, counterparty and onchain-pattern checks rather than headline volume alone.
Security monitors reported that about $800,000 in USDC was taken from Hinkal and later routed through Tornado Cash and THORChain. The case highlights continuing AML exposure where privacy tools and cross-chain liquidity are used in post-exploit laundering paths.
Europol said Operation Endgame disrupted SocGholish, Amadey and StealC infrastructure while identifying, freezing or restricting more than EUR41 million in criminal cryptocurrency assets. The action reinforces AML and KYT expectations around malware, credential theft and ransomware-linked flows.
OFAC designated Iran-based Nobitex, Wallex, Bitpin, and Ramzinex under Iran sanctions, warning foreign financial institutions and non-U.S. persons of secondary sanctions exposure. The action raises AML and sanctions-screening pressure on crypto exchanges, OTC brokers, and USDT-linked Iran corridors.
ICIJ reported that Kraken transferred at least $1.1 billion of bitcoin to crypto ATM operators, including flows to Athena Bitcoin after official scrutiny of ATM fraud. The report increases pressure on exchanges and liquidity providers to monitor downstream ATM and cash-out channels.