◈

Welcome

About this dashboard

◈ Coldtrail crypto theft & sanctioned wallet movement
About

Where it lands

Country ranking

The table view of the map above. Every shaded value is readable here.

Country Losses Incidents Attributed out Wallets Value held

Volume by year

Stacked by whether an attacker was ever publicly attributed to North Korea.

News alerts

    Sources. Incidents from the DefiLlama hacks feed. Sanctioned wallets from the OFAC SDN list, including Treasury's own country attribution for each designated party. Balances read live from public Bitcoin, Ethereum, Tron, Solana and Litecoin endpoints. Prices from Coinbase, with CoinGecko as fallback. News alerts pulled once a day from OFAC, the US Department of Justice, Chainalysis, Krebs on Security, Cointelegraph and Google News.
    Country attribution for incidents is curated, not measured. Victim jurisdiction is the entity's home country; attacker origin is set only where a government or a named forensics firm has published an attribution. Most incidents are neither, and the coverage figures above say how much. Treat this as a research aid, not evidence.