{"investigation":{"slug":"noones","entity_name":"Noones","trust_score":18,"severity_base":null,"score_modifier":0,"confidence":1,"status":"published","content_type":"investigation","summary":"Noones is a peer-to-peer cryptocurrency trading platform targeting Africa and the Global South, founded and initially led by Ray Youssef, co-founder of the now-defunct Paxful. In January 2025, the platform suffered an $8 million hot-wallet exploit that was concealed for nearly three weeks before on-chain investigator ZachXBT publicly exposed the breach. Compounding platform risk, Youssef was subsequently indicted by the DOJ in early 2026 on federal AML charges stemming from his leadership of Paxful, and stepped down as Noones CEO shortly thereafter.","sections":[{"content":"Noones launched in 2023 as a P2P crypto super-app focused on the Global South, particularly Africa. Its founding CEO, Ray Youssef, previously co-founded Paxful, one of the largest P2P Bitcoin marketplaces globally before its 2023 shutdown. Youssef explicitly positioned Noones as a successor platform, publicly encouraging Paxful users outside the United States to transition to Noones. The platform's largest markets are Nigeria, Ghana, Cameroon, India, and the Philippines. By January 2025 Noones reported more than 2 million users and approximately $4 million in daily trading volume. The platform supports trading in Bitcoin, USDT, and USDC against local fiat currencies, with zero trading fees as a stated feature.","heading":"Background and Paxful Connection","sources":[],"severity":"medium"},{"content":"Between January 1 and 2, 2025, Noones' hot wallets across Ethereum, Tron, Solana, and Binance Smart Chain were drained in a coordinated exploit. On-chain investigator ZachXBT documented hundreds of suspicious outflows, each typically under $7,000, consistent with a smurfing strategy designed to evade detection thresholds. Total losses were approximately $7.9 million. Stolen funds were consolidated across three wallet clusters, each containing over twenty addresses, then bridged to Ethereum and Binance Smart Chain before being routed through Tornado Cash to obscure their origin. Rather than disclose the breach, Noones issued a routine 'New Year maintenance' announcement. It was not until January 24, 2025, nearly three weeks after the exploit, that ZachXBT published his findings publicly. Only after ZachXBT's disclosure did CEO Ray Youssef confirm the breach, attributing it to a vulnerability in the platform's Solana cross-chain bridge. Youssef stated that user funds were 'SAFU' and that the bridge had been immediately suspended. The Solana bridge remained offline pending a comprehensive penetration test. Flow-of-funds analysis by Merkle Science identified the following consolidation wallets on Binance Smart Chain and Ethereum: 0x72c1eabafc42a2ac6d0447b02c657b96f07402e6, 0x4b0edd27196063476d91b634333be289beca9202, and 0x6c9b55b50e6a42fd7a14b49ba7747096090b0465.","heading":"January 2025 Hack and Concealment","sources":[],"severity":"medium"},{"content":"In approximately February 2026, the U.S. Department of Justice indicted Ray Youssef in the U.S. District Court for the Eastern District of California on charges related to his leadership of Paxful. The indictment alleged that Paxful operated without proper licensing, failed to implement effective AML controls, lacked adequate KYC procedures, failed to file timely Suspicious Activity Reports, and facilitated transactions linked to unlawful activities including commercial sex advertising through Backpage. Prosecutors alleged Paxful embedded a 'Pay with Paxful' button directly on Backpage, enabling Bitcoin purchases for platform transactions. Four days before Youssef's indictment, Paxful pleaded guilty to three federal criminal charges: conspiracy to promote illegal prostitution, operating as an unlicensed money transfer business, and failing to maintain proper AML controls. Paxful agreed to a $4 million criminal fine and a $3.5 million FinCEN civil penalty. Youssef claims he was deported from Mexico to Los Angeles under DOJ orders, was briefly detained in Santa Ana, then released under court supervision with a restriction from leaving the United States. Youssef publicly called the charges 'bogus.' On or around February 20, 2026, Youssef announced his departure from Noones. Noones confirmed his exit on February 26, 2026, stating that 'any legal matters involving Ray Youssef are personal and unrelated to NoOnes.' No successor CEO has been named.","heading":"Ray Youssef DOJ Indictment and CEO Departure","sources":[],"severity":"medium"},{"content":"The regulatory history of Paxful, the platform Youssef co-founded and that Noones effectively succeeded in terms of user base, provides material context for assessing Noones' compliance posture. FinCEN found that Paxful had no written AML program until July 2019, more than four years after beginning operations in 2015. Even after implementing a program, it 'remained deficient.' Paxful operated for years without a compliance officer, marketed itself as not requiring KYC, and failed to file a single Suspicious Activity Report until November 2019 despite documented awareness of suspicious and criminal activity including ransomware, child sexual abuse material, darknet market transactions, hostile nation-state actors, and terrorist financing. Across the period February 2015 through April 2023, Paxful facilitated over 26.7 million trades totaling nearly $3 billion in Bitcoin transactions while AML controls were inadequate. Noones has stated it uses Sumsub for AML screening and KYC onboarding, and claims to 'take AML protocol seriously.' However, independent rating service KYCnot.me classified Noones as a 'KYC Level 4 Aggregator,' indicating significant KYC requirements that may present barriers in regions with limited identification infrastructure.","heading":"Paxful AML/KYC Compliance History","sources":[],"severity":"medium"},{"content":"Noones operates primarily in jurisdictions with limited banking infrastructure, including Nigeria, Ghana, and Cameroon, which are also high-risk markets for fraud and AML violations per international regulatory standards. The platform's delayed breach disclosure in January 2025 indicates inadequate incident response transparency. Post-hack, CEO Youssef stated the platform would reduce hot wallet balances to a maximum of $1-2 million as a remediation measure. The platform remains operational as of mid-2026 but is without a named CEO and navigating the reputational fallout from both the $8 million hack and its founder's federal indictment. The future regulatory status of Noones is uncertain given the ongoing DOJ proceedings against Youssef and the institutional knowledge he carried from founding the platform.","heading":"Operational and Platform Risk","sources":[],"severity":"medium"}],"timeline":[{"date":"2023","event":"Noones launched as a P2P crypto super-app targeting Africa and the Global South.","source":"","source_url":"https://forklog.com/en/noones-how-ex-paxful-chief-ray-youssefs-p2p-project-works/","date_original":"2023-01-01"},{"date":"2023-10","event":"Ray Youssef, former Paxful co-founder and CEO, announced as Noones CEO. Youssef directed Paxful users to transition to Noones following Paxful's 2023 shutdown.","source":"","source_url":"https://www.theblock.co/post/265896/paxful-co-founder-ray-youssef-becomes-noones-ceo","date_original":"2023-10-01"},{"date":"2025","event":"Noones hot wallets across Ethereum, Tron, Solana, and Binance Smart Chain exploited via a Solana bridge vulnerability. Approximately $7.9 million stolen. Platform issues routine 'maintenance' notice rather than disclosing breach.","source":"","source_url":"https://cryptoslate.com/noones-acknowledges-8-million-exploit-after-zachxbt-raises-concerns/","date_original":"2025-01-01"},{"date":"2025-01-24","event":"On-chain investigator ZachXBT publishes findings exposing the Noones breach, documenting hundreds of suspicious sub-$7,000 outflows and tracing funds to Tornado Cash.","source":"","source_url":"https://www.theblock.co/post/337004/noones-ceo-ray-youssef-8-million-exploit-crypto-sleuth-zachxbt-investigation"},{"date":"2025-01-24","event":"CEO Ray Youssef publicly confirms the January 1 Solana bridge exploit and attributes the delay in disclosure to ongoing remediation. Claims user funds are 'SAFU.'","source":"","source_url":"https://cryptoslate.com/noones-acknowledges-8-million-exploit-after-zachxbt-raises-concerns/"},{"date":"2025","event":"Noones reports surpassing 2 million global users.","source":"","source_url":"https://bitcoinke.io/2025/01/noones-surpasses-2-million-users/","date_original":"2025-01-01"},{"date":"2025-12","event":"Paxful pleads guilty to three federal criminal charges: conspiracy to promote illegal prostitution via Backpage, operating as an unlicensed money transfer business, and failing to maintain proper AML controls. Agrees to pay $4 million criminal fine.","source":"","source_url":"https://beincrypto.com/ray-youssef-indicted-doj-paxful-case/","date_original":"2025-12-01"},{"date":"2026-02-10","event":"U.S. District Court formally sentences Paxful in connection with its December 2025 guilty plea. FinCEN separately imposes $3.5 million civil penalty on Paxful.","source":"","source_url":"https://www.fincen.gov/system/files/2025-12/PaxfulConsentOrder.pdf"},{"date":"2026-02-14","event":"DOJ indicts Ray Youssef in U.S. District Court for the Eastern District of California on AML-related charges stemming from Paxful operations. Youssef is arrested after deportation from Mexico to Los Angeles.","source":"","source_url":"https://beincrypto.com/ray-youssef-indicted-doj-paxful-case/"},{"date":"2026-02-20","event":"Ray Youssef announces he is stepping down as Noones CEO, offering no public explanation.","source":"","source_url":"https://techpoint.africa/news/crypto-exchange-noones-confirms-ray-youssef-is-no-longer-ceo/"},{"date":"2026-02-26","event":"Noones officially confirms Youssef's departure as CEO via public statement, characterizing his legal matters as 'personal and unrelated to NoOnes.' No successor named.","source":"","source_url":"https://techpoint.africa/news/crypto-exchange-noones-confirms-ray-youssef-is-no-longer-ceo/"}],"sources_used":[],"source_tags":["zachxbt"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet","created_at":"2026-05-04T16:05:03.323653+00:00","updated_at":"2026-08-29T01:35:56.374+00:00"}}