Imagine someone slipping a few pennies into your coat pocket without you noticing. Now imagine those pennies are radioactive.
That is basically what happened to some Kraken customers this month. The crypto exchange temporarily locked accounts after users received tiny, unwanted transfers from a wallet tied to HTX, a sanctioned exchange. Kraken calls it a "dust attack," and it is exposing a messy truth about how hard it is to police money on blockchains.
Between Aug. 17 and Aug. 24, nearly 12,000 small transfers flowed from that wallet to addresses linked to Kraken. The values were typically just a handful of cents or dollars. But the amounts did not matter. The source did.
Kraken's compliance team locked affected accounts while they sorted things out.
A Kraken spokesperson said the attacks look like "an attempt to spread UK- and EU-sanctioned funds" to other platforms, adding that the goal is to "discredit the broader industry." The spokesperson added that whoever is behind it probably expects a full account lock when sanctioned funds land in a customer account.
HTX denies sending the transfers. A spokesperson said the exchange is investigating and suggested the real cause could be misattributed transfer origins or third-party malicious activity.
Rates, prices and policy all end up in your budget eventually. Get the free Market Briefs daily newsletter and see it coming.
Here is the uncomfortable part: on a blockchain, you cannot refuse a payment. Anyone can send you crypto, whether you want it or not. That makes it possible to "poison" someone's transaction history without their consent.
BlockSec CEO Andy Zhou put it plainly. He said "attackers can deliberately manipulate the transaction graph at very low cost", comparing it to poisoning a user's history. The attack is not about stealing money. It is about weaponizing the compliance system itself.
This is not a new trick. For instance, in 2022, after the US Treasury placed sanctions on the crypto mixer Tornado Cash, small amounts of Ether were sent to prominent wallets in a similar pattern. The goal then was the same: make innocent people look guilty by association.
The wallet in question was linked to HTX by Arkham Intelligence, which matched it to addresses HTX publicly disclosed for proof of reserves. That link matters because HTX has been in regulators' crosshairs for a while.
On May 26, the UK added Huobi Global SA, the company that runs HTX, to its Russia sanctions list. The accusation: helping Russia evade restrictions related to the Ukraine war. HTX denied wrongdoing. Then in July, the EU announced its own sanctions, and exchanges including Bybit, OKX, and Binance started restricting or reviewing transactions involving HTX.
Justin Sun, a crypto billionaire, is an adviser to HTX. That connection has kept the exchange in the spotlight even as it denies any misconduct.
If you hold crypto on an exchange, this story is a reminder that the industry's guardrails are still being built. The same transparency that lets anyone trace a wallet also lets bad actors use that transparency against innocent users.
The good news is that Kraken caught the problem and reversed the account locks. The bigger question is what happens next time. As long as sanctioned funds exist on open blockchains, someone can always try to spread them around like glitter at a parade.
For investors, the takeaway is not to panic. It is to understand that exchanges are fighting a constant game of whack-a-mole. The tools that make crypto open also make it vulnerable to this kind of mischief. That tension is not going away anytime soon.
The best financial decisions come from understanding the whole picture. Join Market Briefs free and get the full brief each morning.
