Nation-State Crypto
Threat Intelligence
Track cryptocurrency activities linked to North Korea, Iran, and Russia. Free public API and real-time dashboard for researchers, journalists, and compliance teams.
329
Tracked Wallets
15
Clusters
$25.70B
Total Volume
48
Active Alerts
3
Nations Tracked
Threat Overview
North Korea
4 threat actors
Iran
3 threat actors
Russia
5 threat actors
Wallet Clustering
15 identified clusters linking 329 wallets
Free API Access
100 requests/day free tier. Build your own integrations.
Recent Alerts
Bybit Cold Wallet Drained - $1.46B Stolen
401,346 ETH stolen via multisig UI manipulation. Funds dispersing to multiple addresses.
DMM Bitcoin Cluster Active Laundering Detected
$12M moved from DMM-linked wallets to YoMix mixer
New Garantex-linked addresses identified
5 new ETH addresses showing patterns consistent with sanctioned exchange
IRGC Mining Cluster increased output
25% increase in BTC mining rewards routed to known IRGC wallets
Largest Crypto Thefts by Nation-States
View AllBybit Cold Wallet Hack
$1.46B
Bybit Exchange
Ronin Bridge Hack
$620.00M
Ronin Network / Axie Infinity
DMM Bitcoin Hack
$308.00M
DMM Bitcoin Exchange
WazirX Hack
$230.00M
WazirX Exchange
Why Use NSCTIP?
The first free, public platform providing real-time nation-state crypto threat intelligence.
Real-Time Data
Blockchain data updated every 15 minutes. OFAC designations synced daily.
Wallet Clustering
Advanced chain analysis linking related wallets across multiple blockchains.
Free API
100 requests/day free tier. Build your own tools and integrations.
Alert System
Get notified when sanctioned wallets move funds or new designations occur.
Multi-Chain
Track across Bitcoin, Ethereum, Tron, BSC, Polygon, and more.
Research Grade
Academic-quality data. Perfect for researchers, journalists, and analysts.
Start Tracking Threats Today
Get free API access and start building compliance tools, research projects, or investigative journalism.