The U.S. Treasury Department blocked a crypto-mixing service from the global financial system because it was alleged that it supported transactions linked to North Korea’s notorious hacking group.

The FBI, Openbaar Ministerie in the Netherlands (public prosecutor’s office), and Finnish National Bureau of Investigation also seized Sinbad’s site.

In a Treasury press release, Sinbad was described as “a virtual currency mixer that serves as a money-laundering instrument of the OFAC designated Lazarus Group (a state-sponsored hacking group of Democratic People’s Republic of Korea).

Sinbad’s site was taken by the FBI, along with the Dutch Financial Intelligence and Investigation Service and the Finnish National Bureau of Investigation. (

Treasury’s Office of Foreign Assets Control (OFAC) has designated two Bitcoin addresses, and two email accounts tied to Sinbad. This bans all U.S. citizens and anyone transacting with the global financial systems from ever interacting with these addresses.

According to an block-explorer one address holds about 0.35 BTC at the moment (worth approximately $13,000), but has received just a little over 15 BTC overall (worth $570,000 at current exchange rates).

The alternate address holds approximately $67 in bitcoin.

The release stated that Sinbad processed money from hacks on Horizon Bridge and Axie infinity. The money was also used to move funds related to “sanctions avoidance, drug trafficking and the purchase of materials for child sexual abuse, as well as additional illicit sales in darknet marketplaces.”

Sinbad is still a young DJ, according to Chainalysis, a crypto analytics service that began advertising in October of 2022.

According to Elliptic , a competitor analytics service, Sinbad was used in the theft of $35 million from Atomic Wallet this year.

Treasury Department’s watchdog on sanctions has designated Tornado Cash, and other mixers, as bad actors because they allow illicit activity. Tornado Cash was targeted by OFAC last year for similar allegations about North Korea.

When asked for comment, a spokesperson from the U.S. Department of Justice referred CoinDesk directly to FBI. The FBI did no return an email immediately.

UPDATE (Nov. 29, 2023, 16:06 UTC): Adds additional detail.

Nick Baker is the editor.