Bitcoin was designed as a censorship resistant p2p payment system. Yet, thanks to Lazarus, we are in a situation right now where any p2p transaction can yield you a tainted coin. Third party AML verifiers like BitOK and GreenStage will identify your UTXO as "stolen", and Binance or any other regulated entity will use this as an excuse to block your account.
This is a serious attack on fundamental principles of Bitcoin Network. What can we do? Start asking everyone to show you the UTXO they will use before the transaction? Chainanalysis companies, for a fee, will gladly help you decide. But their results are not a yes or no answer, but rather a percentage:
Address Report
Address: xxxx
Blockchain: bitcoin
Risk: 96.8%
Cluster: xxxx
Category:
- 91.3% consists of Stolen Coins
- 4.8% consists of Mixing Service
- 2.8% consists of Exchange With Low ML Risk
- 0.5% consists of Exchange With Moderate ML Risk
- 0.2% consists of Payment Processor
- 0.1% consists of Miner Status: Active First: Mar 25, 2025 01:55 PM Last: Mar 25, 2025 01:55 PM Received: 0.61132493 BTC Sent: 0 BTC Transactions: 1
AML-check crypto-address by GreenStageBot
https://t.me/green_stage_bot
Or this:
ㅤ
🔵 Address: yyyy
⛓️ Blockchain: Bitcoin (BTC)
Connections of the address:
• Dust - 34.8%
• Exchange - 32.0%
• Mixer - 24.0%
• Custodial wallet - 7.4%
• Stolen Funds - 0.6%
• Scam - 0.4%
• Mining - 0.3%
• Payment Service Provider - 0.1%
Less than 0.1%:
• Other
• High-Risk Exchange
• Darknet Market
• Mining Pool
📈 Risk level: Medium (74.0%)
Is "medium" risk of 74% good or bad? Will a CEX block your account if you move your coin there??
I think this whole chainanalysis situation is utter nonsence. Neither we, Bitcoin users, nor the judge and jury can understand or verify how the reports were produced. But Binance trusts them and blocks the accounts, so what can you do if this happens to you?
This is a grey area: use normies legal system, such is English Law, to defend against a purely technical accusation of money laundering.
I think a CEX client should write to the exchange and argue using this legal vocabulary: "I acquired these tainted coins in good faith during an arm's length transaction." Swapping Lightning for onchain at Boltz is an arm's length transaction, for example.
Make such cases public, hire real lawyers if the amount is worth it. Either all UTXOs should be ruled equal, or people should stop using CEXes at all.
The specific situation with Lazarus is hypocritical, in my view. They are not stolen coins, they are spoils of war. Of a cyberwarfare of North Korea against some other countries, to be exact. And in the North Korea's legal framework, these coins are not tainted or stolen, they are legally obtained in a special operation.
Three centuries ago, English privateers looted Spanish galleons lawfully. They had a license from the Crown to do so. They did not have to launder anything - the looted gold went right back into international circulation. I say we came full circle - Lazarus hackers had a license from Kim to plunder ByBit. Karma is a bitch.