TRM Labs

🚨 Introducing Beacon Network: The first real-time crypto crime response network. Exchanges, issuers, and law enforcement can now trace funds instantly — and act before criminals cash out. Learn more: trmlink.info/41fyPXw #BeaconNetwork #TRMLabs

In June, TRM Labs convened senior compliance leaders from major financial institutions and crypto-native firms in NYC. Six priorities cut across every session: 1️⃣ Stablecoins changed the sanctions evasion equation 2️⃣ Regulators want outcomes, not activity metrics 3️⃣ #AI amplifies whatever program it runs on 4️⃣ Legacy risk infrastructure can't keep up with on-chain speed 5️⃣ Criminal networks are coordinated; compliance must be too 6️⃣ Secondary market monitoring is the next expectation for #stablecoin issuers Read the full recap: trmlink.info/4psZgE4

🤝 𝗧𝗥𝗠 𝗟𝗮𝗯𝘀 𝗮𝗻𝗱 𝗨𝗻𝗶𝘁𝟮𝟭 𝗷𝗼𝗶𝗻 𝗳𝗼𝗿𝗰𝗲𝘀 𝘁𝗼 𝗯𝗿𝗶𝗻𝗴 𝗯𝗹𝗼𝗰𝗸𝗰𝗵𝗮𝗶𝗻 𝗶𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 𝘁𝗼 𝗔𝗜-𝗻𝗮𝘁𝗶𝘃𝗲 𝗰𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗼𝗽𝗲𝗿𝗮𝘁𝗶𝗼𝗻𝘀 We're teaming up with @unit21inc to give crypto and fintech compliance teams one workflow for on-chain and fiat risk. TRM Wallet Screening now feeds Unit21's rules engine, and TRM Transaction Monitoring alerts flow straight into Unit21 case management — so crypto risk no longer lives in a separate system from everything else. Join us for a happy hour on July 30 in Chicago to celebrate the launch! Learn more: unit21.ai/blog/trm-labs-…

🚨 Today, @USTreasury's OFAC sanctioned FirstVPN Service (1VPNS), admin Dmytro Rashevskyi, and Yevgeniy Silayev — who sold "cryptors" disguising malware as safe files. Since 2014, FirstVPN promised cybercriminals no logs, no cooperation with law enforcement. Ransomware groups used that shield to hide attacks on US hospitals, financial firms, and municipal governments. TRM had already attributed FirstVPN on-chain: Anubis, Qilin, and Sinobi all paid the service directly across BTC, ETH, LTC, and TRX. Today's action lists 20 addresses tracing to that same infrastructure. The takeaway: OFAC is targeting the infrastructure behind ransomware — not just the groups themselves. Read our full breakdown: trmlink.info/4bbkGjd

🚨 Last chance to register! Tune in for TRM's 𝐐𝐮𝐚𝐫𝐭𝐞𝐫𝐥𝐲 𝐂𝐫𝐲𝐩𝐭𝐨 𝐏𝐨𝐥𝐢𝐜𝐲 𝐑𝐨𝐮𝐧𝐝𝐭𝐚𝐛𝐥𝐞 on July 14. We’re breaking down what's shifting across the Americas, EMEA, and APAC; how AI is reshaping cyber risk; and what Q2's DeFi hacks reveal about accountability. Join us for a great conversation with TRM’s @ARedbord and @ChaseFinCrim + @Circle's David Katz. Register now: bigmarker.com/series/quarter…

New #TRMTalks coming Wednesday! @ARedbord sits down with @VatsaNarasimha (CEO of @ComplyAdvantage) to talk about the industrialization of fraud, the Mesh platform, and how we can bring on and off-chain insights together for a fuller picture of risk. Follow TRM Talks on Spotify to be the first to tune in 👉 open.spotify.com/show/2f9v6MaVk…

As a money services business serving institutional clients, HIFI's risk profile looks different from a retail platform's. Beyond checking whether a wallet is directly tied to illicit activity, HIFI's compliance team watches for behavior inconsistent with what's expected, flagging patterns like repeated bridge activity in a short timespan or recurring exposure to gambling wallets. That approach was tested early: shortly after launch, HIFI identified and blocked a wave of suspicious businesses attempting to onboard, and fraudulent attempts dropped off sharply afterward. 📄 Read the full case study: trmlink.info/3PifqCl

400 TB of blockchain transaction data, 30+ API routes, a deadline of 1.5 quarters, and no industry playbook. In our latest post on the TRM Tech Blog, Engineering Manager Amit Plaha writes about how his team migrated Address Transfers against those very odds. Hear about the five execution principles his team followed, and the leadership lessons that came with them ➡️ trmlink.info/3SFTHWB

Regulators in D.C., Brussels, Singapore, Dubai, the UK, and beyond are writing the playbooks for crypto right now — and compliance teams are working to keep up in real time. On July 14, TRM Labs' @ARedbord and @ChaseFinCrim break it down with David Katz (@Circle) in our 𝗤𝟮 𝗖𝗿𝘆𝗽𝘁𝗼 𝗣𝗼𝗹𝗶𝗰𝘆 𝗥𝗼𝘂𝗻𝗱𝘁𝗮𝗯𝗹𝗲 — covering what’s happening across the Americas, EMEA, APAC, AI/Cyber, and DeFi. Register now ➡️ bigmarker.com/series/quarter…

On this week's #TRMTalks, @ARedbord and the @Unchained_pod’s @DEXintheCityPod — @kkirkbos, Jessi Brooks (@RibbitCapital), and @TuongvyLe12 (@veda_labs) — talk about going on offense against North Korea instead of just blaming protocols. Catch the full episode 👉 trmlink.info/4oVTCd8

New on the TRM Tech Blog, Staff Software Engineer Andrew Fisher writes about migrating 500 billion rows of blockchain data and why time partitioning failed. With extreme address-level skew, queries were scanning ~25,000 Iceberg files per lookup. But bucket partitioning by address brought that down to ~300, landing P95 under 2.5s. Read his post here 👉 trmlink.info/3SCxpF8

Introducing TRM MCP 🎉 Your transaction monitoring alerts didn’t pause over the weekend. Now your agents can work them from triage to disposition, all while keeping you in control of the decision. ▪️ Triage alerts in seconds ▪️ Investigate exposure paths with prompts ▪️ Document every decision Learn more: trmlink.info/4govpKm

Most companies 𝘴𝘢𝘺 they want people to speak up. But few build disagreement into how decisions actually get made. At TRM, challenging ideas before a decision is final is a named, expected practice: farming for dissent. New on the TRM blog, Devin Blase (our SVP of People) writes about what it looks like in practice and what it signals about who thrives here. Read the post here 👉 trmlink.info/4vIBPsu

TRM Labs is hiring a Senior Cloud Security Engineer to own GCP IAM, lead TRM's FedRAMP 20x expansion, and drive the organization toward continuous, agentic cloud security posture management. If you have knowledge in Deep GCP, Terraform, and IAM experience, apply here 👉 trmlink.info/3Fdug8p #TRMCareers #TRMLabs

Stablecoin rules are going live. DeFi is getting tested. And AI is rewriting compliance. Q2 didn't hold back. Join TRM Labs' @ARedbord, @ChaseFinCrim, and special guest David Katz (@Circle) for our Quarterly Crypto Policy Roundtable covering the Americas, EMEA, APAC, AI/Cyber, and DeFi. Register now ➡️ bigmarker.com/series/quarter…

Attackers carried out 207 crypto hacks in H1 2026 — a record for any six-month period — but total losses fell to USD 972 million, less than half of the USD 2.3 billion stolen in H1 2025. Two distinct patterns explain the divergence. 🔹 Infrastructure compromises made up roughly 15% of incidents but drove approximately 76% of losses, concentrated in two North Korea-linked operations against Drift Protocol and KelpDAO totaling USD 577 million. 🔹 Smart contract exploits accounted for most incidents but a far smaller share of stolen value, with a median loss of about USD 219,000. The lower total reflects the absence of another record-setting theft, not a reduction in attacker capability. Read our full analysis here ➡️ trmlink.info/4v8cp6z

TRM Labs is proud to be a blockchain intelligence partner for Robinhood Chain, the new Ethereum Layer 2 from @RobinhoodCrypto designed to support real-world assets. For builders on Robinhood Chain, that means screening for sanctions and AML risk is enabled at the infrastructure layer -- and scalable as the ecosystem grows. Read more about the launch here: x.com/RobinhoodCrypt…

🚨 OFAC just sanctioned 134 crypto addresses tied to ISKP (ISIS's Afghanistan affiliate) that moved over USD 2 million. TRM has tracked this network since 2022 — including tracing funds from the 2024 Moscow attack to an ISKP wallet within hours. Read our full breakdown ➡️ trmlink.info/4vIMVOr

New #TRMTalks: Join @ARedbord and the @Unchained_pod’s @DEXintheCityPod crew — @TuongvyLe12 (@veda_labs), Jessi Brooks (@RibbitCapital), and @kkirkbos — for a conversation on why the CFTC suddenly matters, why North Korea's USD 600 million in hacks is a national security story, and why privacy brings institutions on-chain. Tune in now 👉 trmlink.info/4oVTCd8

TRM MCP is now live! Connect your AI agents to TRM’s blockchain intelligence to work every transaction monitoring alert from triage to disposition, all while keeping you in control of the decision. ▪️ Triage alerts in seconds ▪️ Investigate exposure paths with prompts ▪️ Document every decision Learn more ➡️ trmlink.info/4oYmPnS

Coming Wednesday on #TRMTalks: A crossover with the lawyers behind @Unchained_pod’s @DEXintheCityPod. @ARedbord speaks with @TuongvyLe12 (@veda_labs), Jessi Brooks (@RibbitCapital), and @kkirkbos on the CFTC's rise, North Korea, and privacy as crypto's real unlock. Follow TRM Talks on Spotify to be the first to tune in 👉 open.spotify.com/show/2f9v6MaVk…