Skip to main content
Sign in
ChipMixer1 decision on this page

Audit log

Every state-changing event for ChipMixer: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-30 18:25:09Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 423,210,400
    sig
    4duq6rEmuDSF…GGQHGWzPexplorer ↗
    hash
    8Vnm2xp4E78G…Ah49zAHMsha256 → base58
    verifying row…full verify ↗
    canonical bytes (7182 B) ▸
    {"actor":"system:backfill","investigation_id":"960a8e90-c086-4073-9efc-f536471c6cfa","kind":"publish","page_slug":"chipmixer","published_at":"2026-05-30T18:25:09.511Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"ChipMixer","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.justice.gov/archives/opa/pr/justice-department-investigation-leads-takedown-darknet-cryptocurrency-mixer-processed-over-3","type":"other","url":""},{"credibility":3,"name":"https://flashpoint.io/blog/usa-vs-minh-quoc-nguyen/","type":"other","url":""},{"credibility":3,"name":"https://www.moneylaunderingnews.com/2023/03/darkweb-cryptocurrency-mixer-chipmixer-shut-down-for-allegedly-laundering-3-billion-worth-of-crypto/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.justice.gov/archives/opa/pr/justice-department-investigation-leads-takedown-darknet-cryptocurrency-mixer-processed-over-3","type":"other","url":""},{"credibility":3,"name":"https://flashpoint.io/blog/usa-vs-minh-quoc-nguyen/","type":"other","url":""},{"credibility":3,"name":"https://www.europol.europa.eu/media-press/newsroom/news/one-of-darkwebs-largest-cryptocurrency-laundromats-washed-out","type":"other","url":""},{"credibility":3,"name":"https://eucrim.eu/news/chipmixer-taken-down/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.justice.gov/archives/opa/pr/justice-department-investigation-leads-takedown-darknet-cryptocurrency-mixer-processed-over-3","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/ronin-bridge-hackers-used-chipmixer-to-launder-over-73m-of-stolen-funds/","type":"other","url":""},{"credibility":3,"name":"https://flashpoint.io/blog/usa-vs-minh-quoc-nguyen/","type":"other","url":""},{"credibility":3,"name":"https://thehackernews.com/2023/03/authorities-shut-down-chipmixer.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.justice.gov/archives/opa/pr/justice-department-investigation-leads-takedown-darknet-cryptocurrency-mixer-processed-over-3","type":"other","url":""},{"credibility":3,"name":"https://www.europol.europa.eu/media-press/newsroom/news/one-of-darkwebs-largest-cryptocurrency-laundromats-washed-out","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/policy/2023/03/15/germany-and-us-seize-over-46m-crypto-tied-to-chipmixer-investigation-europol","type":"other","url":""},{"credibility":3,"name":"https://www.ice.gov/news/releases/hsi-arizona-investigation-leads-takedown-cryptocurrency-mixer-processed-over-3","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.justice.gov/archives/opa/pr/justice-department-investigation-leads-takedown-darknet-cryptocurrency-mixer-processed-over-3","type":"other","url":""},{"credibility":3,"name":"https://flashpoint.io/blog/usa-vs-minh-quoc-nguyen/","type":"other","url":""},{"credibility":3,"name":"https://vietnaminsiders.com/a-vietnamese-phd-wanted-by-fbi-for-3-billion-cryptocurrency-laundering-case/","type":"other","url":""},{"credibility":3,"name":"https://www.inquirer.com/news/chip-mixer-crypto-bitcoin-seized-ming-quoc-nguyen-charges-20230315.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.justice.gov/archives/opa/pr/justice-department-investigation-leads-takedown-darknet-cryptocurrency-mixer-processed-over-3","type":"other","url":""},{"credibility":3,"name":"https://www.moneylaunderingnews.com/2023/03/darkweb-cryptocurrency-mixer-chipmixer-shut-down-for-allegedly-laundering-3-billion-worth-of-crypto/","type":"other","url":""},{"credibility":3,"name":"https://www.fincen.gov/enforcement-actions-failure-register-money-services-business","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.europol.europa.eu/media-press/newsroom/news/one-of-darkwebs-largest-cryptocurrency-laundromats-washed-out","type":"other","url":""},{"credibility":3,"name":"https://www.bankinfosecurity.com/chipmixer-shut-down-for-allegedly-laundering-3-billion-a-21445","type":"other","url":""},{"credibility":3,"name":"https://www.trmlabs.com/resources/blog/us-treasury-sanctions-north-koreas-preferred-mixer-sinbad","type":"other","url":""}]}],"sources_used":[],"summary":"ChipMixer was a darknet Bitcoin mixing service that operated from August 2017 to March 2023, processing over $3 billion in illicit cryptocurrency on behalf of ransomware groups, North Korean state hackers, Russian military intelligence, and darknet drug markets. On March 15, 2023, U.S. and German authorities seized its infrastructure, domains, and approximately $46 million in cryptocurrency in a coordinated international takedown. Minh Quoc Nguyen, 49, a Vietnamese national residing in Hanoi, was charged in the Eastern District of Pennsylvania with money laundering, operating an unlicensed money transmitting business, and identity theft; he remains a fugitive.","timeline":[{"date":"2017-08-01","event":"ChipMixer launches as an unlicensed Bitcoin mixing service on the darknet and clearnet, with no FinCEN registration and no KYC procedures.","source":""},{"date":"2020-06-01","event":"North Korea's Lazarus Group conducts the Harmony Horizon Bridge theft; funds are later traced through ChipMixer according to DOJ court filings.","source":""},{"date":"2020-08-01","event":"FBI and NSA publish joint advisory disclosing Drovorub malware linked to Russian GRU unit 26165 (APT 28); DOJ later alleges infrastructure for Drovorub was purchased using Bitcoin laundered through ChipMixer.","source":""},{"date":"2022-03-29","event":"Lazarus Group executes the Axie Infinity Ronin Bridge hack, stealing approximately $625 million in cryptocurrency; on-chain research later identifies roughly 3,460 BTC of these funds routed through ChipMixer.","source":""},{"date":"2022-04-05","event":"OFAC sanctions Hydra Market, the Russia-based darknet market for which ChipMixer processed over $60 million in customer transactions.","source":""},{"date":"2022-08-08","event":"OFAC sanctions Tornado Cash, a competing mixer; ChipMixer remains active and continues to attract displaced users.","source":""},{"date":"2023-03-14","event":"Criminal complaint against Minh Quoc Nguyen filed in the Eastern District of Pennsylvania (Case 2:23-mj-00528); federal arrest warrant issued.","source":""},{"date":"2023-03-15","event":"DOJ, FBI, HSI, Europol, BKA, and authorities from Belgium, Poland, and Switzerland execute coordinated takedown: domains seized, GitHub account seized, backend servers in Germany seized, and approximately $46 million in cryptocurrency seized. Approximately 7 TB of data recovered.","source":""},{"date":"2023-03-16","event":"Vietnam's government confirms FBI is seeking Nguyen; Nguyen remains at large in Hanoi. Vietnam has no extradition treaty with the United States.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 06f58b8c-bb23-4796-bfba-b29fed9a9020
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.