Sinbad
Sanctioned entityNamed in 2 sanctions listings.
Summary
Virtual currency mixer, which was used by DPRK cyberthreat actors to launder stolen digital assets. Suspected to be a rebrand of Blender.io, which was designated by US authorities in May 2022. Sinbad reportedly processed millions of dollars’ worth of virtual currency from Lazarus Group heists, including the Horizon Bridge and Axie Infinity heists.
"Most recently, in August 2023 the FBI attributed the June 2023 Atomic Wallet heist to the Lazarus Group, and open-source reporting indicates that the Lazarus Group used specific services including Sinbad, a CVC mixer, to launder the stolen CVC."
Sanctions and listings2
- Listed
- 19 Oct 2023
- Ended
- 6 Oct 2026
Official designation
Financial Crimes Enforcement NetworkUS FinCEN 311 and 9714 Special MeasuresUnited States
- Listed
- 29 Nov 2023
Cyber-Related Sanctions - CYBER2
Office of Foreign Assets ControlUS OFAC Specially Designated Nationals (SDN) ListUnited States
CYBER2, DPRK3 and block
Secondary sanctions risk: North Korea Sanctions Regulations, sections 510.201 and 510.210
Transactions Prohibited For Persons Owned or Controlled By U.S. Financial Institutions: North Korea Sanctions Regulations section 510.214
Executive Order 13722 (North Korea)
Executive Order 13694 (Cyber)
Programme US-CYBReference 44437treasury.govofac.treasury.gov
Connections1
Other links1
- Blender.ioSanctionedDebarredLinked from"Sinbad is "likely [to be] a rebrand of Blender""
Other names1
Also known as1
This page shows the public record as its publishers state it. A name here is not by itself a finding: whether a record refers to a particular person or company is what screening decides. Read the full notice.