{"id":9287,"date":"2026-08-16T02:33:19","date_gmt":"2026-08-15T23:33:19","guid":{"rendered":"https:\/\/handoli.com\/index.php\/2026\/08\/16\/we-found-htxs-reserves-at-poloniex\/"},"modified":"2026-08-16T02:33:19","modified_gmt":"2026-08-15T23:33:19","slug":"we-found-htxs-reserves-at-poloniex","status":"publish","type":"post","link":"https:\/\/handoli.com\/index.php\/2026\/08\/16\/we-found-htxs-reserves-at-poloniex\/","title":{"rendered":"We found HTX\u2019s reserves at Poloniex"},"content":{"rendered":"<div><\/div>\n<p>HTX\u2019s situation has appeared increasingly precarious as both the <a href=\"https:\/\/protos.com\/european-union-sanctions-justin-suns-htx\/\" target=\"_blank\" rel=\"noreferrer noopener\">European Union Council<\/a> and the United Kingdom\u2019s <a href=\"https:\/\/protos.com\/uk-sanctions-htx-for-alleged-russian-sanctions-violations\/\" target=\"_blank\" rel=\"noreferrer noopener\">Foreign, Commonwealth, &amp; Development Office<\/a> have chosen to sanction the exchange.<\/p>\n<p>Since then, it\u2019s made some big changes to how it manages users\u2019 reserves.<\/p>\n<p>Its June proof of reserves report was the first that acknowledged that it had moved huge swaths of its reserves to an undisclosed \u201cThirdParty.\u201d<\/p>\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-protos wp-block-embed-protos\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"730R4UtphS\"><p><a href=\"https:\/\/protos.com\/htx-moved-1-3-billion-from-reserves-to-undisclosed-thirdparty\/\">HTX moved $1.3 billion from reserves to undisclosed \u2018ThirdParty\u2019<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p><em>Read more: <a href=\"https:\/\/protos.com\/htx-misrepresents-huobi-global-s-a-after-uk-sanctions\/\" target=\"_blank\" rel=\"noreferrer noopener\">HTX misrepresents Huobi Global S.A. after UK sanctions<\/a><\/em><\/p>\n<p>HTX claims on its website that you can verify these balances by reaching out to the custodian; unfortunately, it doesn\u2019t tell users who that custodian is. As a result, Protos has been unable to verify most of those balances.<\/p>\n<p>Further complicating this, TRM Labs, a blockchain intelligence firm, released a report in which it detailed how HTX has begun churning through its wallets at a prodigious rate.<\/p>\n<p>Ari Redboard, the global head of policy for TRM, described this behavior as an attempt \u201cto stay a step ahead of screening built on static lists.\u201d<\/p>\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-protos wp-block-embed-protos\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"ql043nLlBY\"><p><a href=\"https:\/\/protos.com\/trm-claims-htx-is-rotating-wallets-to-stay-ahead-of-screening\/\">TRM claims HTX is rotating wallets to \u2018stay ahead of screening\u2019<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p><em>Read more: <a href=\"https:\/\/protos.com\/someone-is-taking-advantage-of-htxs-reserves\/\" target=\"_blank\" rel=\"noreferrer noopener\">\u2018Someone\u2019 is taking advantage of HTX\u2019s reserves<\/a><\/em><\/p>\n<p>HTX, for its part, previously claimed that this was <strong>totally normal cybersecurity behavior<\/strong>.<\/p>\n<p>Since then, Protos was able to track a substantial portion of HTX\u2019s staked ETH (stETH) through Poloniex addresses.<\/p>\n<p>Now, we can add that various other HTX assets have also recently passed into Poloniex.<\/p>\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-protos wp-block-embed-protos\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"kIDHiYhxE4\"><p><a href=\"https:\/\/protos.com\/is-justin-sun-mixing-htxs-reserves-with-poloniex\/\">Is Justin Sun mixing HTX\u2019s reserves with Poloniex?<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p><em>Read more: <a href=\"https:\/\/protos.com\/justin-suns-poloniex-and-htx-withdraw-huge-amounts-from-aave\/\" target=\"_blank\" rel=\"noreferrer noopener\">Justin Sun\u2019s Poloniex and HTX withdraw huge amounts from AAVE<\/a><\/em><\/p>\n<p>First, HTX distributes a tool that used to enable people to gain greater insight into its reserves, even <a href=\"https:\/\/github.com\/huobiapi\/Tool-Node.js-VerifyAddress\/blob\/main\/snapshot\/huobi_por.csv\" target=\"_blank\" rel=\"noreferrer noopener\">including<\/a> which addresses the reserves were held in.<\/p>\n<p>We can use these past reports to determine where certain assets were claimed to be at a certain time and can use the blockchain transactions to follow some portion of the reserves as they move.<\/p>\n<p>Consider 0x18709e89bd403f470088abdacebe86cc60dda12e, which was an address that HTX used to hold many of the Ethereum-based DeFi positions it maintained, for some reason.<\/p>\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/protos-media.s3.eu-west-2.amazonaws.com\/wp-content\/uploads\/2026\/08\/13164251\/Screenshot-2026-08-13-at-10.00.19-AM.png\" data-lbwps-width=\"970\" data-lbwps-height=\"1802\" data-lbwps-srcsmall=\"https:\/\/protos-media.s3.eu-west-2.amazonaws.com\/wp-content\/uploads\/2026\/08\/13164251\/Screenshot-2026-08-13-at-10.00.19-AM.png\"><img loading=\"lazy\" decoding=\"async\" loading=\"lazy\" width=\"551\" height=\"1024\" src=\"https:\/\/protos-media.s3.eu-west-2.amazonaws.com\/wp-content\/uploads\/2026\/08\/13164251\/Screenshot-2026-08-13-at-10.00.19-AM-551x1024.png\" alt=\"\" class=\"wp-image-131978\" \/><\/a><\/figure>\n<p>On May 30, immediately before we get the transition to ThirdParty, we can watch the Sun-advised wrapped BTC (WBTC) <a href=\"https:\/\/etherscan.io\/tx\/0x4de73e941227b9154e080436aa630bfcd67dd64d93995201256aeab85b848d33\" target=\"_blank\" rel=\"noreferrer noopener\">move<\/a> from this HTX address to 0xeB245796376912af7Fadd4986f73743feEA61e6E.<\/p>\n<p>These funds were then <a href=\"https:\/\/etherscan.io\/tx\/0x4dc6c40164e451a7ff43f6f60af5346849f14896df906af3dd13457ab490dfb0\" target=\"_blank\" rel=\"noreferrer noopener\">transferred<\/a> to 0x8fCA4adE3a517133fF23ca55CdAea29C78C990b8, an address that Etherscan labels as Poloniex 7.<\/p>\n<p>These funds were then quickly <a href=\"https:\/\/etherscan.io\/tx\/0x0fc14669e7229a475d77a46ebe4894e7da31c3e1ce8acd57c78fa47d0d54b3c2\" target=\"_blank\" rel=\"noreferrer noopener\">sent<\/a> to 0x29065a4C1f2F20d1E263930088890d6F49Fe715a, an address that Etherscan labels as Poloniex 10.<\/p>\n<p>Finally, this WBTC was <a href=\"https:\/\/etherscan.io\/tx\/0x7bfea37957d91df5b0a8c8d92da474f8dc79cf47857ad4784a26fb7ada749997\" target=\"_blank\" rel=\"noreferrer noopener\">sent<\/a> to 0x176F3DAb24a159341c0509bB36B833E7fdd0a132, an address that Etherscan labels as Poloniex 9.<\/p>\n<p>This WBTC which came from HTX, is still stored in this Poloniex address.<\/p>\n<h2 class=\"wp-block-heading\">The HTX to Poloniex pattern repeats<\/h2>\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/protos-media.s3.eu-west-2.amazonaws.com\/wp-content\/uploads\/2026\/08\/13163916\/Screenshot-2026-08-13-at-10.30.10-AM.png\" data-lbwps-width=\"954\" data-lbwps-height=\"1940\" data-lbwps-srcsmall=\"https:\/\/protos-media.s3.eu-west-2.amazonaws.com\/wp-content\/uploads\/2026\/08\/13163916\/Screenshot-2026-08-13-at-10.30.10-AM.png\"><img loading=\"lazy\" decoding=\"async\" loading=\"lazy\" width=\"504\" height=\"1024\" src=\"https:\/\/protos-media.s3.eu-west-2.amazonaws.com\/wp-content\/uploads\/2026\/08\/13163916\/Screenshot-2026-08-13-at-10.30.10-AM-504x1024.png\" alt=\"\" class=\"wp-image-131976\" \/><\/a><\/figure>\n<p>The <a href=\"https:\/\/github.com\/huobiapi\/Tool-Node.js-VerifyAddress\/blob\/31a35fc16773bad88d3158210ccdc2ec435627d4\/snapshot\/huobi_por.csv\" target=\"_blank\" rel=\"noreferrer noopener\">May PoR<\/a> for HTX had a problem. It claimed that it had a bunch of STEAK-USDC, but it was wrong; <strong>there was no STEAK-USDC in that address on that date<\/strong>.<\/p>\n<p>However, there was a matching amount of Sky Savings USDS (sUSDS) in that address, suggesting that while HTX failed to accurately label its own reserves \u2014 troubling on its face \u2014 it did have another position that represented that value.<\/p>\n<p>We start with approximately $200 million worth of sUSDS <a href=\"https:\/\/etherscan.io\/tx\/0xc49147fc0fdbfb86b39aa9e88faa7b5ef5223d87b1b1d9f7c2038cae3383fbfd\" target=\"_blank\" rel=\"noreferrer noopener\">moving<\/a> to 0x7fed2E5e06CF7B8918bB93158C4E990794da33b8.<\/p>\n<p>These funds are then <a href=\"https:\/\/etherscan.io\/tx\/0xd464944d9e62ec54d4186a327a68192d1a497133626f42924eb35ca9857650b7\" target=\"_blank\" rel=\"noreferrer noopener\">sent<\/a> onward to Poloniex 7.<\/p>\n<p>These were then <a href=\"https:\/\/etherscan.io\/tx\/0x8e893a694ad8bcb60cf1596d3a2e0379c12ddc721cb1d98eb242f8439bf893e5\" target=\"_blank\" rel=\"noreferrer noopener\">forwarded<\/a> <a href=\"https:\/\/etherscan.io\/tx\/0xdd6d906ea0f46f28fd576168f83f490d258a90672d66498849fbda3f93a2b48d\" target=\"_blank\" rel=\"noreferrer noopener\">in<\/a> <a href=\"https:\/\/etherscan.io\/tx\/0xe8514a29af880bb98c6757c8c6608f7a22f465accc1fdfba54c4af0c845de8e6\" target=\"_blank\" rel=\"noreferrer noopener\">three<\/a> transactions to Poloniex 10.<\/p>\n<p>Finally, these funds were <a href=\"https:\/\/etherscan.io\/tx\/0xf60aaddd2282542975c29115b24859c6fd32e57cb7b3c9a05d4df59b13a4298c\" target=\"_blank\" rel=\"noreferrer noopener\">forwarded<\/a> to Poloniex 9.<\/p>\n<p>Similar patterns can also be observed for various Spark positions, some of which may have been since redeemed.<\/p>\n<p>These related-party transactions, involving many hundreds of millions of dollars worth of value, raise serious questions about the internal controls and management of both of these Sun-owned exchanges.<\/p>\n<p>They furthermore raise questions about Poloniex\u2019s role in interacting with this repeatedly sanctioned entity.<\/p>\n<p>Protos reached out to HTX with questions about these transfers, but it didn\u2019t respond before publication.<\/p>\n<p><em>Got a tip? Send us an email securely via\u00a0<a href=\"https:\/\/leaks.protos.com\/\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Protos Leaks<\/em><\/a>. For more informed news and investigations, follow us on\u00a0<a href=\"https:\/\/twitter.com\/protos\" target=\"_blank\" rel=\"noreferrer noopener\">X<\/a>,\u00a0<a href=\"https:\/\/bsky.app\/profile\/protos.com\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Bluesky<\/em><\/a>, and\u00a0<a href=\"https:\/\/news.google.com\/publications\/CAAqJAgKIh5DQklTRUFnTWFnd0tDbkJ5YjNSdmN5NWpiMjBvQUFQAQ\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Google News<\/em><\/a>, or subscribe to our\u00a0<a href=\"https:\/\/youtube.com\/protosmedia\" target=\"_blank\" rel=\"noreferrer noopener\"><em>YouTube<\/em><\/a>\u00a0channel.<\/em><\/p>\n<p>The post <a href=\"https:\/\/protos.com\/we-found-htxs-reserves-at-poloniex\/\">We found HTX\u2019s reserves at Poloniex<\/a> appeared first on <a href=\"https:\/\/protos.com\/\">Protos<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>HTX\u2019s situation has appeared increasingly precarious as both the European Union Council and the United Kingdom\u2019s Foreign, Commonwealth, &amp; Development Office have chosen to sanction the exchange. Since then, it\u2019s made some big changes to how it manages users\u2019 reserves. Its June proof of reserves report was the first that acknowledged that it had moved [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":9288,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":[],"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[147],"tags":[],"class_list":["post-9287","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-invest"],"_links":{"self":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts\/9287","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/comments?post=9287"}],"version-history":[{"count":0,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts\/9287\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/media\/9288"}],"wp:attachment":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/media?parent=9287"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/categories?post=9287"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/tags?post=9287"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}