Skip to main content
AVOID.NET

Sinbad.io

avoid.net/sinbad-io→2/100·97% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·51t9Ar…gR34
last updated 2026-08-29

Summary

Sinbad.io was a Bitcoin mixing service that operated from October 2022 until its seizure by U.S., Dutch, and Finnish law enforcement in November 2023. OFAC designated it a key money-laundering tool of North Korea's Lazarus Group, which used it to launder proceeds from multiple major crypto hacks including Axie Infinity's Ronin Bridge and Atomic Wallet. On-chain analytics firms assessed it to be highly likely a rebranding of Blender.io, the first crypto mixer ever sanctioned by OFAC.

Connected Entities

8 entities · 60 linked investigations
Relationships
  • Axie Infinity→mentioned with→Ronin Bridge(90%)
  • Sinbad.io→mentioned with→CoinEx(60%)
  • Sinbad.io→mentioned with→Bitcoin(70%)
  • CoinEx→mentioned with→Bitcoin(80%)
  • CoinEx→mentioned with→Axie Infinity(80%)
  • Atomic Wallet Hack→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
  • CoinEx→mentioned with→North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign(80%)
  • Atomic Wallet Hack→mentioned with→Ronin Bridge(80%)
  • Atomic Wallet Hack→mentioned with→Harmony Horizon Bridge(80%)
  • Harmony Horizon Bridge→mentioned with→Ronin Bridge(80%)
  • + 14 more
Have evidence about Sinbad.io?

Timeline(9 events)

April 2022

Blender.io ceases operations, approximately one month before OFAC sanctions it.

6 May 2022

OFAC sanctions Blender.io, the first cryptocurrency mixer ever designated by the U.S. government, for laundering North Korean Lazarus Group funds from the Ronin Bridge hack.

October 2022

Sinbad.io begins advertising and accepting users as a Bitcoin mixing service.

13 February 2023

Elliptic publishes analysis concluding Sinbad is 'highly likely' a rebranding of the sanctioned Blender.io mixer, based on on-chain Bitcoin transaction tracing linking both services to the same operator wallet.

June 2023

Lazarus Group hacks Atomic Wallet, stealing approximately $100 million; $35 million of the proceeds are subsequently traced to Sinbad.io by Elliptic.

29 November 2023

OFAC designates Sinbad.io under E.O. 13722 and E.O. 13694, adding the service to the SDN List. Simultaneous multinational law enforcement operation by the FBI, Dutch FIOD, and Finnish National Bureau of Investigation seizes Sinbad's web infrastructure and servers.

December 2024

Roman Vitalyevich Ostapenko and Alexander Evgenievich Oleynik, two Russian nationals alleged to be Blender/Sinbad operators, are arrested.

7 January 2025

A federal grand jury in the Northern District of Georgia returns an indictment against Ostapenko, Oleynik, and a third defendant, Anton Vyachlavovich Tarasov, on counts of money laundering conspiracy and operating an unlicensed money transmitting business. Tarasov remains at large.

10 January 2025

U.S. Department of Justice publicly announces the indictment against the three alleged Blender.io and Sinbad.io operators.

Provenance & Audit Trail

Decision Log

  • #1publishRecorded on Solana ✓5/30/2026, 6:29:38 PM
    slot 423211056 · hash 8XtnnyPE8szmQF5pERPDfQhMQoH1KAMe9SMxjjAZEYSc

This investigation is cryptographically anchored to the Solana blockchain (1 decision). 18 of 19 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/30/2026, 6:29:34 PM

last updated: 8/29/2026, 1:33:57 AM

4 views

avoid.net — verified advice for a post-truth world