Stolen Funds
Stolen funds is a broad risk category covering any cryptocurrency confirmed to have been taken without authorization, whether through a hack, an exploit, a phishing scheme, or theft from a compromised account. It is the umbrella label that exploit and phishing addresses both fall under.
Stolen Funds
Stolen funds is a broad risk category covering any cryptocurrency confirmed to have been taken without authorization, whether through a hack, an exploit, a phishing scheme, or theft from a compromised account. It is the umbrella label that exploit and phishing addresses both fall under.
What it means
The category matters as a distinct finding because provenance tracing follows stolen funds through however many intermediate wallets an attacker routes them through, and the "stolen" designation stays attached to the funds through that entire chain, not just at the original theft address. A wallet ten hops downstream from a hack can still carry meaningful stolen-funds exposure if the chain of custody is traceable.
FreezeRadar's own lost funds tracker specifically follows this category over time, because stolen funds have a distinct lifecycle: an initial theft, a laundering phase moving through mixers or bridges, and often an eventual partial or full recovery through law enforcement, negotiated returns, or, less commonly, an issuer-side freeze and reissuance.
Real-world example
The FBI's 2016 investigation into Bitfinex hack proceeds tracked a portion of the roughly 120,000 stolen Bitcoin for years through the blockchain before a 2022 arrest and civil forfeiture recovered a large share of it, one of the longest-running public stolen-funds tracing cases on record.
Related terms
In FreezeRadar
FreezeRadar's lost funds tracker follows stolen-funds cases from initial theft through laundering and any eventual recovery, and a scan flags exposure at any point along that chain.
By FreezeRadar Team
Research and product team behind FreezeRadar.
Related reading
Continue exploring FreezeRadar knowledge content.