OFAC sanctions 10 wallets linked to LockBit takedown

Europol said authorities have frozen over 200 crypto accounts linked to LockBit

article-image

Artwork by Crystal Le

share

The Treasury’s Office of Foreign Assets Control added several wallet addresses tied to two Russian nationals to its specially designated nationals list. 

Artur Sungatov and Ivan Kondratyev were indicted on charges related to ransomware deployment. The two were tied to LockBit, a ransomware group that received over $120 million in ransom payments, according to the Department of Justice. 

OFAC identified 10 wallet addresses tied to Sungatov and Kondratyev.

The US worked with the UK and other law enforcement agencies across the world to charge and take action against LockBit. 

A press release from Europol said that law enforcement agencies from 10 countries worked together to freeze over “200 cryptocurrency accounts linked to the criminal organization, underscoring the commitment to disrupt the economic incentives driving ransomware attacks.”

Read more: Crypto money laundering activity down 29% from 2022: Chainalysis 

Sungatov and Kondratyev, the DOJ said, were designated due to their cyberattacks.

The Cybersecurity and Infrastructure Security Agency put out a cybersecurity advisory on LockBit in June, noting that the ransomware variant continued to be “prolific in 2023” after becoming the most deployed variant in 2022.

“LockBit ransomware operation functions as a Ransomware-as-a-Service (RaaS) model where affiliates are recruited to conduct ransomware attacks using LockBit ransomware tools and infrastructure,” the warning said.

The takedown, dubbed Operation Cronos, took 34 servers down across the Netherlands, US, Finland, France and the UK. 

The UK’s National Crime Agency, according to Europol, took control of the “technical infrastructure that allows all elements of the LockBit service to operate, as well as their leak site on the dark web, on which they previously hosted the data stolen from victims in ransomware attacks.”

Chainalysis, earlier this month, said that ransomware payments topped $1 billion in 2023 after the figure declined to $567 million in 2022.

Read more: North Korea is still a threat to crypto: Chainalysis

The $1 billion marked the “highest number ever observed,” the firm noted.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Unlocked by Template (10).png

Research

Innovations on Aptos’ technical design through Raptr, Shardines, and Zaptos approach near-optimal latency and throughput by unlocking 100% utilization of network resources, with the capacity to settle 260k transactions per second with latencies less than 800ms. The original Move language was revamped with the launch of Move 2, supporting more expressivity in smart contract logic and a scalable ability to interact with high volume datasets. The ecosystem has benefitted from strong asset inflows, now hosting over $1.3B in stablecoins, $450M in bridged BTC, and $530M in RWAs. Activity in the Aptos ecosystem has grown notably over the past year, with monthly application revenue reaching ~$835k and monthly DEX volumes growing to over $5B, both at new all time highs.

article-image

The Stripe-acquired firm has big plans for a streamlined, multi-wallet future

article-image

Both founders of the former crypto lender have now landed in new crypto industry roles

article-image

Bitcoin’s recent peak is a victory lap for curvers left and right

article-image

Securitize CEO Carlos Domingo says institutions are eager to get exposure to tokenization

article-image

Trade isn’t war and prosperity isn’t a contest