ChainZen

Risk report

0x098B716B8Aaf21512996dC57EB0615e2383E2f96

Risk
Severe
Recommendation
BLOCK
Entity
OFAC SDN LAZARUS GROUP
sanctions
AI review
99% escalate
theft hack

Summary

The Ethereum address 0x098B716B8Aaf21512996dC57EB0615e2383E2f96 is rated Severe risk and is attributed to OFAC SDN LAZARUS GROUP (sanctions). Main driver: Identified as Sanctioned Entity. The AI review classifies it as theft hack and gives a 99% probability that it should be escalated. Recommended action: BLOCK.

Key findings

Counterparty exposure

Counterparty Category Direction USD Source
OFAC SDN LAZARUS GROUP (0x35fB6f6D…) sanctions sent $74,861,007.14 OFAC SDN
OFAC SDN LAZARUS GROUP (0xF7B31119…) sanctions sent $56,037,383.12 OFAC SDN
OFAC SDN LAZARUS GROUP (0x3e37627d…) sanctions sent $52,472,047.46 OFAC SDN
OFAC SDN LAZARUS GROUP (0x53b69365…) sanctions sent $48,236,340.73 OFAC SDN
OFAC SDN LAZARUS GROUP (0x08723392…) sanctions sent $28,089,030.44 OFAC SDN
Binance reserve wallets ETH (0xf977814e…) exchange received $0 GraphSense TagPacks: Binance reserve wallets (MIT)

Behavioural signals

No unusual patterns detected in the sampled history.

AI risk review

Question Answer
Escalate for enhanced due diligence? 99% yes
Risk level Severe (score 3.00 of 3, 100% confidence)
Typology theft hack (49% confidence)
Other likely typologies theft hack 55%, sanctions evasion 45%, laundering mixing 0%

The AI review agrees with the rules engine.

Recommended action

Do not process transactions with this address. Freeze related funds where legally required, file the required reports (for example a blocked-property report to the sanctioning authority and a SAR), and document the decision.

Data limitations

Address Screening API response (JSON)
{
  "address": "0x098B716B8Aaf21512996dC57EB0615e2383E2f96",
  "risk": "Severe",
  "cluster": {
    "name": "OFAC SDN LAZARUS GROUP",
    "category": "sanctions"
  },
  "riskReason": "Identified as Sanctioned Entity",
  "addressType": "PRIVATE_WALLET",
  "addressIdentifications": [
    {
      "category": "sanctions",
      "name": "SANCTIONS: OFAC SDN LAZARUS GROUP 0x098B716B8Aaf21512996dC57EB0615e2383E2f96",
      "description": "This address is listed as a digital currency address of LAZARUS GROUP on the US Treasury OFAC Specially Designated Nationals list (program: DPRK3), SDN entry 27307.",
      "url": "https://sanctionssearch.ofac.treas.gov/"
    }
  ],
  "exposures": [
    {
      "category": "sanctions",
      "value": 259695808.89,
      "exposureType": "direct",
      "direction": "both_directions"
    },
    {
      "category": "exchange",
      "value": 0,
      "exposureType": "direct",
      "direction": "both_directions"
    }
  ],
  "triggers": [
    {
      "category": "sanctions",
      "percentage": 99.91,
      "message": "99.91% of the address's sampled volume ($259,695,808.89) is direct exposure to sanctions.",
      "ruleTriggered": {
        "risk": "Severe",
        "minThreshold": 0,
        "maxThreshold": 100,
        "exposureType": "direct",
        "direction": "both_directions"
      }
    }
  ],
  "status": "COMPLETE"
}

Generated Fri, 06 Nov 2026 19:57:27 GMT by the ChainZen rules engine with AI review by jev-1.14.0.