Sanctions mean nothing if you can't find the wallet.
That's the uncomfortable truth sitting at the heart of what TRM Labs has uncovered about HTX, Justin Sun's exchange. The UK put HTX on its sanctions list. And HTX, according to TRM Labs, responded by doing what any operation determined to keep moving would do — it started rotating its hot wallets across multiple blockchains, staying one step ahead of the address-list screening tools meant to stop it.
This isn't a glitch in the system. This is the system being gamed, deliberately and effectively.
Address Lists Don't Work If the Address Keeps Changing
The way sanctions enforcement works in crypto, at its most basic level, is this: regulators publish a list of wallet addresses tied to sanctioned entities, and exchanges or compliance tools check transactions against that list. It's straightforward. It also assumes the target sits still.
HTX, per TRM Labs, has not been sitting still. By rotating hot wallets — cycling through new addresses across different blockchains — the exchange creates a moving target that static address lists simply cannot keep up with. By the time a wallet gets flagged and added to a screening database, another one is already operational.
This is exactly the kind of behaviour that makes [UK lawmakers' ongoing inquiry into crypto banking access](/getohedz/crypto/uk-lawmakers-launch-inquiry-into-crypto-banking-access) feel both timely and wildly insufficient. Parliament is asking why banks won't touch crypto firms. The more pressing question right now is whether the compliance infrastructure built to police this space is anywhere near fit for purpose.
The FATF Warning Nobody Took Seriously Enough
FATF has been saying for a while now that centralised control frequently persists inside DeFi structures — that the lines between genuinely decentralised and nominally decentralised are blurred enough to matter for regulators. The HTX situation is a different but related problem: a centralised, sanctioned exchange using the native flexibility of on-chain infrastructure to evade the controls designed for centralised entities.
The tools built to catch this kind of thing — address screening, transaction monitoring — were designed around a relatively cooperative target. An exchange that simply registers, lists its wallets, and plays within the rules. HTX, under UK sanctions, is not that. And TRM Labs' findings suggest the current toolkit isn't built for adversarial evasion at this level.
We've written before about how [key failures and human error cost protocols $35M](/getohedz/crypto/bitcoin-and-ethereum-protocols-lost-35m-to-key-failures) — the blockchain itself wasn't the problem, the people operating around it were. This is the mirror image of that problem. The blockchain isn't helping HTX evade sanctions — it's just indifferent to whether it does or doesn't. The chain moves funds. It doesn't ask questions.
Our Take
The UK put HTX on a sanctions list and, if TRM Labs is right, HTX responded by making itself harder to find rather than stopping. That's a fairly direct verdict on whether the current framework works.
Adding a wallet address to a list is a bureaucratic act. Rotating wallets across chains is a technical one. Right now, the technical response is winning. Until regulators and compliance providers can operate at blockchain speed — not filing-cabinet speed — sanctioned entities will keep finding room to breathe. HTX appears to be making full use of it.