Where money taken in large public crypto thefts is sitting right now, from this service's free on-chain feeds. Totals cover wallets the tracker has publicly tied to an incident. They are not a full accounting of the theft.
One incident per refresh. The page opens on the feed's default. Other incident ids that show up in the cleared / retired list are linked below. You can also type an id.
Held: still in wallets attributed to the incident. Frozen: blocked by the token issuer's on-chain list (for example USDT or USDC), which is not the same as money returned to the owner. Moved: left those wallets. Bridged: sent across chains or through a mixer. Sent to an exchange: arrived at a deposit address the tracker recognizes. The window is the last 24 hours unless a line says last hour. A shown zero is a reported zero. A dash means that field was not in the response.
Loading incidents…
The free alert feed includes the newest alert overall and the newest alert on each chain, with time, kind, and size when the feed has them. It is not the full alert history.
Loading alerts…
Records the tracker has closed: funds marked frozen or returned, and labels or facts marked retired or replaced. Frozen here means an on-chain blocklist observation. It does not mean the funds were paid back.
Loading cleared and retired records…
Wallet-by-wallet holdings, freeze status, and the full alert list are not on this free page. A $5/month plan is not for sale here yet.
Subscribe — $5/monthPublic blockchain totals from this service's free feeds. Not a loss estimate, not a recovery status, and not financial, legal, or security advice.