Illicit Crypto Transactions Hit All-time High of $14B in 2021

Criminal activity surged last year — but represented all-time low 0.15% of crypto transaction volume

article-image

Blockworks exclusive art by axel Rangel

share
  • Illicit transaction volume increased 79% year over year while total crypto volume rose by 567%, according to Chainalysis
  • Cybercriminals have laundered roughly $33 billion worth of crypto since 2017

Illicit crypto transactions reached an all-time high $14 billion last year, but criminal activity’s share of cryptocurrency transaction volume has never been lower, according to a Chainalysis report published Wednesday.

Although the value of illicit transactions surged in 2021 from $7.8 billion the year before, these nefarious transactions accounted for 0.15% of crypto volume last year, down from 0.62% in 2020, the report said.

Source: Chainalysis Report

Total transaction volume across cryptocurrencies tracked by Chainalysis grew to $15.8 trillion in 2021, up 567% from 2020.

“Given that roaring adoption, it’s no surprise that more cybercriminals are using cryptocurrency,” the report states. “But the fact that the increase in illicit transaction volume was just 79% — nearly an order of magnitude lower than overall adoption — might be the biggest surprise of all.”

Crypto-based crime spiked in 2019 as transactions involving illicit addresses represented nearly 3.4% of crypto transaction volume, the Chainalysis report notes. The PlusToken Ponzi scheme occurred that year, reportedly defrauding investors out of more than $2 billion worth of crypto.

Decentralized finance (DeFi) protocols played a much greater role in laundering illicit funds in 2021, the report adds. Laundering through DeFi protocols increased by 1,964% from the prior year, reaching $900 million.

Cybercriminals have laundered roughly $33 billion worth of crypto since 2017, with most of that moving to centralized exchanges over time.

The amount of crypto that criminals are holding is hard to know, according to Chainalysis, as law enforcement has seized illicitly obtained assets.

The IRS Criminal Investigation team announced in November that it had seized $3.5 billion worth of cryptocurrency in 2021. The Department of Justice also recovered $2.3 million from the ransomware group responsible for the attack on Colonial Pipeline.

More recently, the DOJ announced last week that it had recovered the majority of the cryptocurrency stolen during the 2016 Bitfinex hack, valued at roughly $3.6 billion.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Javits Center North | 445 11th Ave

Tues - Thurs, March 24 - 26, 2026

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Research Report Templates (8).png

Research

Kinetiq has established itself as Hyperliquid's dominant liquid staking protocol, holding 82.5% of LST market share with $610M in TVL. The protocol is now expanding beyond its kHYPE staking core into higher take-rate verticals: iHYPE for institutional custody rails, Launch for HIP-3 capital formation, and Markets for builder-deployed perpetuals. We view Markets, launching Jan. 12, as the highest-potential product line given its mechanically scalable, activity-linked unit economics. Near-term revenue remains anchored by kHYPE's KIP-2 fee schedule (~$1.6M annualized), while Markets provides embedded optionality if HIP-3 economics normalize post-Growth Mode. KNTQ's setup is relatively clean: zero insider unlocks until November 2026, 6.2% buyback yield from staking revenue, and cleared airdrop overhang. Risks center on unproven Markets execution, declining kHYPE TVL despite ongoing incentives, and competition from Hyperliquid's native initiatives.

article-image

BTC finished the week up 1.6%, while L2s, RWAs and the treasury trade continued to grind lower

article-image

DTCC moves DTC-custodied Treasuries onchain via Canton, while Lighter’s LIT launches trading at a fees multiple in Hyperliquid territory

article-image

In the 90s, rapt audiences worldwide watched a coffee pot — will that fascination ever turn to crypto?

article-image

Some systems improve by failing — and crypto has no choice

article-image

Yield Basis introduces an IL-free AMM design that already dominates BTC DEX liquidity

article-image

Maybe tokenholders don’t need the rights that corporate shareholders have come to expect

Newsletter

The Breakdown

Decoding crypto and the markets. Daily, with Byron Gilliam.

Blockworks Research

Unlock crypto's most powerful research platform.

Our research packs a punch and gives you actionable takeaways for each topic.

SubscribeGet in touch

Blockworks Inc.

133 W 19th St., New York, NY 10011

Blockworks Network

NewsPodcastsNewslettersEventsRoundtablesAnalytics