Inside the HTX wallet hack, UK sanctions and safety claims

The HTX Wallet Hack: What Happened

Back in September 2023, Huobi Global - the exchange that later changed its name to HTX - got hit by a serious security breach. The attacker went after the project's hot wallet and managed to steal about $7.9 million, moving 4,999 ETH to an address that had never been used before. Justin Sun, who's a major investor in the project, confirmed publicly that it was a real security breach, not some inside error or glitch.

The day after the attack, someone from an address linked to Huobi sent a message straight to the attacker's Ethereum address. They offered a deal: return the funds minus a 5% "white hat bonus" within seven days, or face legal action. It's unclear if the attacker responded or if any funds were recovered. But the incident raised obvious questions about how safe your crypto really sits on an exchange, especially when you're trusting someone else's hot wallet to hold it.

The UK Sanctions Explained

On May 26, 2026, the UK government designated 18 entities and individuals under the Russia sanctions regulations. The focus was on cryptocurrency exchanges and networks that Russia has been using to move value and fund its war economy. Among those named was Huobi Global S.A., with UK officials stating they had "reasonable grounds to suspect" the entity supported the Russian government by providing financial services and making funds available to A7 Limited Liability Company, described as a firm operating in a sector of strategic significance to the Kremlin.

The UK Foreign Office pointed to what they called the "A7 network" - a Kremlin-backed infrastructure system that moved over $90 billion in a single year. That's roughly half of Russia's annual military budget flowing through this network. If you run a blockchain exchange account on one of these designated platforms, this is directly relevant to your ability to move funds freely and without legal risk.

UK officials called the A7 network a Kremlin-backed infrastructure system that moved over $90 billion in a single year, roughly half of Russia's annual military budget.

Just How Much Flowed Through HTX-Linked Addresses

The numbers here are staggering. TRM's blockchain data shows Huobi Global (HTX) sent more than $4.9 billion in direct on-chain transactions to UK-sanctioned entities, including Russia-linked exchanges and high-risk platforms. In 2023 alone, $1.18 billion went to these entities. And in 2025, $838 million went specifically to the A7 network.

Key flow figures from HTX-linked addresses

What's especially notable is how these flows surged after Garantex was taken down in March 2025. In the 26 months before the takedown, about $111 million flowed from Huobi to successor exchanges. In just 14 months after, that jumped to $1.13 billion. The A7 network absorbed the largest share. This pattern suggests that when one channel closes for sanctioned entities, the volume doesn't disappear - it just shifts to other platforms.

Other Exchanges Named in the Sanctions

HTX wasn't the only exchange targeted. The UK's list included several other platforms with deep ties to Russia-linked financial networks.

Other exchanges designated

Bitpapa stands out because it's now under sanctions from three different national regimes. It was already familiar territory for anyone doing a crypto search into flagged platforms. Exmo is another interesting case - they publicly claimed to have exited Russia after the 2022 invasion, but their blockchain footprint told a different story.

HTX's Response: Different Entity, Different Rules

HTX community representative HTX Molly put out a detailed statement addressing the sanctions. Her main argument was that "Huobi Global S.A." - the entity named by the UK - and the HTX trading platform that everyday users interact with are not the same legal entity. She explained that behind any global crypto brand, there are often multiple entities spread across different jurisdictions, each with its own registration, licenses, and operational structure.

Molly emphasized that this is an "entity sanction," not a "brand sanction." The practical impact, she said, is limited to the UK's legal and financial systems: freezing of related assets in the UK, UK financial institutions pausing partnerships, and interruptions in payment and agency relationships. She stressed that global user assets are not frozen, the platform hasn't stopped operating, and users can still trade and withdraw normally.

Molly also addressed the secondary problem: other platforms started applying blanket "high-risk" labels to HTX-linked addresses, which disrupted regular users' fund flows and triggered panic. She offered two options: do nothing and wait for HTX to finish communications with relevant parties, or temporarily withdraw your crypto on-chain since deposit and withdrawal functions remain fully operational. For anyone with a my wallet account on HTX, that withdrawal option gives you a straightforward way to reduce your risk right now.

"Global user assets are not frozen, the platform has not stopped operating, and users can still trade and withdraw coins normally." - HTX Molly, community representative

Justin Sun Speaks Up

Justin Sun, founder of Tron and Global Advisory Board member at HTX, posted that he was aware of the developments and would monitor the situation closely. His statement was brief but direct: he said they believe in full compliance with all applicable laws and cooperation with law-enforcement agencies worldwide, and that he's confident the team will work with UK authorities to address any concerns.

That's worth noting carefully. It's a commitment to cooperation, but it doesn't resolve the underlying concern about those $4.9 billion in flows to sanctioned entities. Compliance going forward doesn't undo the transaction history that's already on the blockchain and publicly visible to anyone running analytics on smart contracts crypto flows through the network.

How Other Exchanges Reacted

The response from rival exchanges was fast. Within hours of the sanctions announcement, major platforms were putting up warnings and tightening controls.

Rival exchange responses

OKX was particularly pointed, quoting reports about HTX being part of alleged infrastructure used by Russia to circumvent sanctions and move $1.5 billion back to the Kremlin. When two of the largest exchanges in the world are publicly flagging your counterpart, that's not just a PR problem. It's a practical barrier to moving funds. If you maintain a crypto currency usa -based account alongside one on HTX, you might want to think twice about direct transfers between them.

HTX's History with UK Regulators

These sanctions weren't HTX's first run-in with British authorities. Back in February 2026, the UK Financial Conduct Authority initiated legal proceedings against the exchange for allegedly publishing unlawful financial promotions targeting UK customers across its website, TikTok, X, Facebook, Instagram, and YouTube. HTX had restricted its availability to new UK customers in response.

That earlier action gives context to the sanctions. It suggests UK regulators had already flagged HTX as non-compliant in at least one area. The financial promotions charge was about how they marketed to UK users. The sanctions charge is about what the platform's associated entities actually did. Two different problems, same exchange.

The A7 Ruble-Pegged Stablecoin Angle

One detail that's easy to miss in all of this is the A7A5 ruble-pegged stablecoin. According to UK government figures, it processed $9.3 billion in just four months. A7 LLC is co-owned by sanctioned Moldovan oligarch Ilan Shor and state bank Promsvyazbank. It relies on Kyrgyz-registered entities for exchange infrastructure and token issuance. Kyrgyzstan has become a key hub for Russia-linked crypto infrastructure since Garantex was disrupted.

Stablecoins are supposed to be boring - pegged to a fiat currency, easy to use, low volatility. But when a ruble-pegged stablecoin processes that kind of volume in a short window, it's not boring at all. It's a capital movement machine. And if you're researching Crypto currency listing options for any exchange associated with this ecosystem, you'd want to be very careful about which tokens you're bringing in.

Bigger Picture: Exchange Sanctions and Wallet Safety

What's happening with HTX is part of a broader shift. Exchanges that were once loosely monitored are now squarely in the crosshairs of international sanctions regimes. The UK action didn't name HTX as the only guilty party - it listed 18 entities. The pattern is clear: any platform that services or inadvertently facilitates flows to sanctioned networks is going to face consequences.

For regular users, the practical takeaway is about where you keep your funds and how freely you can move them. A wallet safety cards approach - where you diversify storage and don't leave everything on one platform - makes more sense than ever. The sanctions don't just affect the named entities. They ripple outward, causing other platforms to freeze interactions, block addresses, and flag transactions. Your funds might be legally yours, but access to them can get complicated fast.

If you've got assets on HTX right now, the exchange says withdrawal is still working. That's your exit ramp, and it's worth considering seriously - not because HTX is necessarily going anywhere, but because the compliance environment around it is getting stricter, not looser.