Company

Sinbad

Sanctioned entity

Named in 2 sanctions listings.

Screen this subject

Summary

Virtual currency mixer, which was used by DPRK cyberthreat actors to launder stolen digital assets. Suspected to be a rebrand of Blender.io, which was designated by US authorities in May 2022. Sinbad reportedly processed millions of dollars’ worth of virtual currency from Lazarus Group heists, including the Horizon Bridge and Axie Infinity heists.

"Most recently, in August 2023 the FBI attributed the June 2023 Atomic Wallet heist to the Lazarus Group, and open-source reporting indicates that the Lazarus Group used specific services including Sinbad, a CVC mixer, to launder the stolen CVC."

Sanctions and listings2

  • Listed
    19 Oct 2023
    Ended
    6 Oct 2026

    Official designation

    Financial Crimes Enforcement NetworkUS FinCEN 311 and 9714 Special MeasuresUnited States

    federalregister.govfincen.gov

  • Listed
    29 Nov 2023

    Cyber-Related Sanctions - CYBER2

    Office of Foreign Assets ControlUS OFAC Specially Designated Nationals (SDN) ListUnited States

    CYBER2, DPRK3 and block

    Secondary sanctions risk: North Korea Sanctions Regulations, sections 510.201 and 510.210

    Transactions Prohibited For Persons Owned or Controlled By U.S. Financial Institutions: North Korea Sanctions Regulations section 510.214

    Executive Order 13722 (North Korea)

    Executive Order 13694 (Cyber)

    Programme US-CYBReference 44437treasury.govofac.treasury.gov

Connections1

Other links1

  • Blender.ioSanctionedDebarred
    Linked from
    "Sinbad is "likely [to be] a rebrand of Blender""

Other names1

Also known as1

Sinbad.io

This page shows the public record as its publishers state it. A name here is not by itself a finding: whether a record refers to a particular person or company is what screening decides. Read the full notice.