News Heat Trend
Project Overview
Chainalysis is the blockchain data platform that provides data, software, services, and research to government agencies, exchanges, financial institutions, and insurance and cybersecurity companies in over 70 countries. Its data powers investigation, compliance, and market intelligence software which has been used to solve some of the world's most high-profile criminal cases and facilitate safe consumer access to cryptocurrency.
Arbitrum Activates ArbOS 61 Elara Upgrade, Introducing Optional Compliance Filtering and Priority Fee Support for Dedicated Chains
According to The Defiant, Arbitrum officially activated the ArbOS 61 Elara upgrade on August 20, which was approved for deployment via an ArbitrumDAO governance vote. The core features of this upgrade include: introducing an optional protocol-level transaction filtering mechanism for Dedicated Chains, allowing chain owners to independently select external compliance service providers such as TRM Labs and Chainalysis to configure restricted address rules; the filter is disabled by default and does not affect existing Arbitrum One users; adding Priority Fee support, also disabled by default, with its activation on Arbitrum One still requiring a separate DAO constitutional vote; introducing the BaseFeeManager contract, which authorizes Offchain Labs to adjust the L2 minimum Gas fee within a DAO-approved range of 0.01 to 0.10 gwei over a two-year authorization period; additionally, the maximum code size limit for Stylus contracts has been increased from 24 KB to 96 KB, though this does not apply to Solidity contracts.
Chainalysis Files Lawsuit Over ICE Awarding $94.6 Million Contract to TRM Labs
Blockchain analytics company Chainalysis Government Solutions filed a bid protest with the U.S. Court of Federal Claims on July 27, challenging the U.S. Immigration and Customs Enforcement (ICE) award of an approximately $94.6 million blockchain forensics software and support services contract to competitor TRM Labs on a sole-source basis. The contract term is from July 1, 2026 to June 30, 2027, for investigations related to the Homeland Security Special Operations Group.
Chainalysis sues U.S. government over ICE's $94.6 million contract awarded to TRM Labs
blockchain forensics firm Chainalysis Government Solutions filed a bid protest with the U.S. Court of Federal Claims on July 27, opposing the U.S. Immigration and Customs Enforcement's (ICE) decision to award a contract worth approximately $94.6 million to competitor TRM Labs on a sole-source basis. The contract, covering the period from July 1, 2026, to June 30, 2027, involves blockchain forensics software and support services for Homeland Security task forces investigating fraud, cybercrime, and sextortion cases. Chainalysis argues that ICE's decision was arbitrary and unreasonable. TRM Labs joined the case as an intervenor-defendant on July 28, defending the contract alongside the U.S. government. The court has allowed Chainalysis to temporarily seal its complaint, with oral arguments scheduled for September 2. ICE stated that after approximately six days of market research, it determined that none of the eight responding companies could meet the requirements. (Decrypt)
France Proposes Legislation to Automatically Share Crypto Tax Data with 48 Countries
Odaily News – French Foreign Minister Jean-Noël Barrot submitted Bill No. 921 to the Senate on July 17, proposing to incorporate the Crypto-Asset Reporting Framework (CARF) developed by the Organisation for Economic Co-operation and Development (OECD) into French law, and to automatically exchange crypto data with 48 countries that have signed related agreements. The exchanged information includes specific transactions, user names, addresses, tax identification numbers, place of residence, and cumulative transaction value during the reporting period. EU member states are already preparing for relevant data exchanges under the DAC-8 directive, which will take effect on September 30, 2027. Once the bill is approved, the French government will accelerate crypto data collection. A Chainalysis report shows that as of 2026, France has recorded 30 publicly known violent robberies of crypto assets; the report also states that a tax official in the Paris region is suspected of selling data on high-net-worth crypto holders.
Approximately $30 million stolen in the first 10 minutes, Coldcard vulnerability attacker prioritized highest-value wallets first
Odaily News, according to Bitcoin News monitoring, Chainalysis analysis of the Coldcard exploit involving over $38 million shows that the attacker deliberately targeted the highest-value wallets first, including one holding $1.8 million, indicating that victims had already been profiled before asset transfers began. Approximately $30 million was stolen in the initial 10 minutes, followed by around 500 wallets being drained within 25 minutes. Block's Clay Garrett stated that investigators also confirmed the attacker used a paid account with a well-known blockchain service provider to query victim addresses during the operation. The provider's internal logs match the request timestamps and sequence, but Block stated that no evidence was found suggesting the company knowingly assisted in the theft. Relevant information has been shared with authorities.
EU Sanctions "Most Prolific Ransomware Operator" Stern, Linked to Over $300 Million in Ransom Payments
the United States, the European Union, and the United Kingdom have jointly announced sanctions against a group of individuals involved in state-sponsored hacking organizations, cybercriminal groups, and their infrastructure providers. The targets are accused of causing billions of dollars in losses to global enterprises, critical infrastructure, and government agencies. Among them, the most notable is the EU's sanction against Russian cybercriminal Vitaly Nikolayevich Kovalev, also known as "Stern." The EU identified Stern as one of the core managers of the notorious Trickbot Group ransomware syndicate, which is behind high-risk ransomware variants such as Conti ransomware and Ryuk.On-chain analysis shows that wallet addresses linked to Stern have collectively received over $300 million in ransom payments, potentially making him the most prolific ransomware operator ever identified.According to the analysis, the $300 million figure represents only Stern's personal gains, while the total illicit income of the Trickbot Group could be significantly higher. On-chain fund flows indicate that Stern had transactional ties with multiple ransomware ecosystems, including Ryuk, Conti, Diavol, Karakurt, Royal, and Quantum.The investigation reveals that Stern played a role similar to a "CEO" within the Trickbot organization, responsible for budget management, personnel recruitment, infrastructure procurement, and attack planning. (Chainalysis)
EU Sanctions "Most Prolific Ransomware Operator" Stern, Linked to Over $300 Million in Ransom Payments
the United States, the European Union, and the United Kingdom have jointly announced sanctions against a group of individuals involved in state-sponsored hacking organizations, cybercriminal groups, and their infrastructure providers. The targets are accused of causing billions of dollars in losses to global enterprises, critical infrastructure, and government agencies. Among them, the most notable is the EU's sanction against Russian cybercriminal Vitaly Nikolayevich Kovalev, also known as "Stern." The EU identified Stern as one of the core managers of the notorious Trickbot Group ransomware syndicate, which is behind high-risk ransomware variants such as Conti ransomware and Ryuk.On-chain analysis shows that wallet addresses linked to Stern have collectively received over $300 million in ransom payments, potentially making him the most prolific ransomware operator ever identified.According to the analysis, the $300 million figure represents only Stern's personal gains, while the total illicit income of the Trickbot Group could be significantly higher. On-chain fund flows indicate that Stern had transactional ties with multiple ransomware ecosystems, including Ryuk, Conti, Diavol, Karakurt, Royal, and Quantum.The investigation reveals that Stern played a role similar to a "CEO" within the Trickbot organization, responsible for budget management, personnel recruitment, infrastructure procurement, and attack planning. (Chainalysis)
OFAC updates ISIS-K sanctions list, adds 134 cryptocurrency wallet addresses; Tether has frozen all TRON address balances
According to Chainalysis, the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) updated its sanctions list against ISIS-K (Islamic State Khorasan Branch) on July 1, adding 134 cryptocurrency wallet addresses, of which 131 are on the TRON chain and 3 are Monero addresses. On-chain data shows that the aforementioned TRON wallets have cumulatively received over $1.4 million since 2023 and transferred out over $880,000, with some funds flowing to Syrian crypto exchangers. Currently, Tether has frozen the balances of all 131 TRON addresses. Additionally, on the same day, OFAC also sanctioned two Brazilian individuals and four companies related to the Latin American criminal organization "Primeiro Comando da Capital" (PCC), accusing them of using cryptocurrency to transfer over $30 million in illegal proceeds across borders from the United States to Brazil.
Chainalysis proposes on-chain tracking standard system, introducing "Address Clustering Ontology" to unify blockchain forensics methods
Blockchain analysis firm Chainalysis has released a new methodological proposal aimed at establishing a unified on-chain fund tracking standard framework for law enforcement agencies and investigators to identify address clusters and determine their probable control relationships.The proposal defines the on-chain analysis structure in the form of an "ontology," centralizing the systematic decomposition of the currently industry-wide non-standardized concept of "cluster" (address clustering) into wallet segments and functional roles. It describes on-chain relationships through a two-tier structure: the first layer defines the transaction graph structure, and the second layer assesses the inferred confidence level.Chainalysis states that the framework aims to enhance the interpretability and legal applicability of on-chain forensic methods and has been validated through its practical experience in cases related to the U.S. Department of Justice, including analysis applied in the Bitcoin Fog mixing service case. The company's Chief Scientist, Jacob Illum, noted that the proposal's goal is to answer "on what evidentiary basis can these addresses be considered to belong to the same entity," but emphasized that on-chain analysis alone cannot directly identify end-user identities and must still be combined with legal investigative methods involving centralized entities such as exchanges.Chainalysis stated that the standard proposal is currently open for industry discussion, aiming to promote a more unified technical standard for on-chain analysis methods in the fields of law enforcement and compliance. (CoinDesk)
Chainalysis: Gray-market peptide suppliers accelerate shift to Bitcoin and stablecoins, with Q1 crypto inflows surging 159% year-on-year
According to The Block, blockchain analytics firm Chainalysis’ latest report states that as the gray-market peptide industry’s scale exceeds an annualized $100 million, leading suppliers are accelerating adoption of Bitcoin and stablecoins as primary settlement instruments. In Q1 2026, cryptocurrency inflows into this industry reached $32 million—a 159% quarter-on-quarter surge. Due to widespread bans imposed by traditional banks and credit card payment channels on prescription-grade compounds and unregulated substances, numerous Chinese chemical manufacturers have turned to cryptocurrencies for transactions, with high-value orders especially favoring stablecoins to hedge against price volatility risk.
Chainalysis: Gray Market Peptide Suppliers Increasingly Using Bitcoin and Stablecoins
Chainalysis has released a report stating that as demand for gray market peptide products (such as weight loss drugs like semaglutide) grows rapidly, related suppliers and buyers are increasingly using cryptocurrencies for transactions, with leading suppliers primarily relying on Bitcoin and stablecoins.The report shows that crypto funds flowing into this sector reached $32 million in the first quarter of 2026, a 159% increase from $12 million in the previous quarter, with the annualized scale already exceeding $100 million.Chainalysis points out that demand for peptide products is driven by trends in medical aesthetics, health and wellness, and the popularity of GLP-1 drugs. However, since these products often involve prescription-grade compounds or unregulated substances, traditional banks and credit card processors typically restrict their transactions, prompting the market to shift towards crypto payments.The agency also noted that some leading suppliers have adopted more professional on-chain fund management methods. Particularly among suppliers with average single deposits exceeding $1,000, the proportion of stablecoins has significantly increased, likely to mitigate the risk of large supply chain orders being affected by crypto market volatility.
Chainalysis Tracks THORChain Attack Source: Proficient Money Laundering Skills, Cross-Chain Fund Transfer Weeks Before Attack
Odaily Chainalysis posted on X platform, stating that prior to the THORChain theft, wallets suspected to be linked to the attacker had been transferring funds through Monero, Hyperliquid, and THORChain for several consecutive weeks. As early as late April, the attacker-associated wallets deposited funds into Hyperliquid positions via Hyperliquid and the Monero privacy bridge. These funds were subsequently converted to USDC and transferred to Arbitrum, then bridged to Ethereum. Some of the ETH was then moved to THORChain to stake as RUNE for a newly joined node, which is believed to be the source of the attack.Subsequently, the attacker bridged a portion of the RUNE back to Ethereum and split it into four chains. One chain went directly to the attacker, passing through intermediate wallets before transferring 8 ETH to the wallet that would ultimately receive the stolen funds, just 43 minutes before the attack. The funds from the other three chains flowed in reverse. Between May 14 and 15, these wallets bridged the ETH back to Arbitrum again, deposited it into Hyperliquid, and transferred it into Monero via the same privacy bridge, with the final transaction occurring less than 5 hours before the attack commenced. As of Friday afternoon, the stolen funds remain untouched, but the attacker has demonstrated sophisticated cross-chain money laundering capabilities. The Hyperliquid to Monero path may be the next move.
Crypto Violent Heists Exceed $30 Million in 2026, France Becomes a Hard-Hit Area
According to The Block, data from blockchain analytics firm Chainalysis shows that violent robberies targeting cryptocurrency holders in the first half of 2026 have resulted in losses exceeding $30 million. If the trend continues in the second half, the full-year total will surpass the historical peak of $58 million in 2025. France has become the world's largest "Wrench Attack" hotspot, with 30 public cases recorded in the first half of 2026, while the French Minister of the Interior stated that actual cases exceed 70. Chainalysis attributes this to the 2024 French tax authority data breach—a tax official was suspected of stealing and selling the names, addresses, holdings, and tax records of high-net-worth crypto holders, causing the attack frequency to surge from a monthly average of 1.9 in 2025 to a monthly average of 4.6 in the first half of 2026. Attack methods have also deteriorated; cases targeting family members rather than the holders themselves now account for over 40% of French cases, and the proportion of home invasions rose from 14% in 2025 to 37%. Stolen funds are typically quickly moved on-chain, with some laundered through tools such as decentralized exchanges and cross-chain bridges; advanced criminal networks are even linked to cartel money laundering and terrorist financing channels.
Coldcard Security Losses Show Regional Disparities: Canadian BTC Holders Absorb 25% of Attributable Losses, Followed by Australia, the US, and Thailand
Odaily News, Chainalysis posted on X platform stating that the Coldcard hack has been particularly devastating for Bitcoin holders in Canada. Our analysis of the attackers and victims found that Canadian BTC holders accounted for 25% of the attributable losses.According to aggregated estimates from Galaxy Research, losses have reached as high as $110 million. We analyzed the geographic distribution of this ongoing hacking campaign. Users in Australia, the United States, and Thailand have also suffered significant losses.
LpdFi Protocol Suffers Flash Loan Manipulation Attack, Attacker Profits Approximately $700,000
According to Chainalysis, Hexagate detected that the LpdFi protocol suffered an attack of approximately $700,000. The attacker first utilized approximately $44 million in flash loans to artificially inflate the price of LPD tokens on decentralized exchanges to approximately 71 times, subsequently using only approximately $2 million worth of tokens to forge approximately $140 million in deposit positions within the protocol.
$282 Million in Bitcoin and Litecoin Stolen in Trezor Impersonation Support Scam
Odaily News, January 10 - A Bitcoin and Litecoin holder provided a 12-word recovery phrase to attackers impersonating Trezor support personnel, resulting in the theft of approximately $282 million in assets, including about $139 million in Bitcoin and $153 million in Litecoin. Blockchain forensics firm ZeroShadow stated that the incident stemmed from a social engineering attack, not a compromise of wallet software or private key infrastructure. The stolen funds were split via the THORChain cross-chain bridge within minutes and converted into Monero through instant exchange services. ZeroShadow's monitoring team flagged and froze approximately $700,000 in funds within 20 minutes. Under the BIP39 standard, a 12-word recovery phrase contains approximately 128 bits of entropy, while a 24-word phrase contains 256 bits of entropy. Chainalysis estimates that up to 23% of all mined Bitcoin is permanently inaccessible due to lost keys, involving millions of BTC, with causes including forgotten recovery phrases, damaged backups, and a lack of inheritance planning.
Approximately $30 million stolen in the first 10 minutes, Coldcard vulnerability attacker prioritized highest-value wallets first
Odaily News, according to Bitcoin News monitoring, Chainalysis analysis of the Coldcard exploit involving over $38 million shows that the attacker deliberately targeted the highest-value wallets first, including one holding $1.8 million, indicating that victims had already been profiled before asset transfers began. Approximately $30 million was stolen in the initial 10 minutes, followed by around 500 wallets being drained within 25 minutes. Block's Clay Garrett stated that investigators also confirmed the attacker used a paid account with a well-known blockchain service provider to query victim addresses during the operation. The provider's internal logs match the request timestamps and sequence, but Block stated that no evidence was found suggesting the company knowingly assisted in the theft. Relevant information has been shared with authorities.
EU Sanctions "Most Prolific Ransomware Operator" Stern, Linked to Over $300 Million in Ransom Payments
the United States, the European Union, and the United Kingdom have jointly announced sanctions against a group of individuals involved in state-sponsored hacking organizations, cybercriminal groups, and their infrastructure providers. The targets are accused of causing billions of dollars in losses to global enterprises, critical infrastructure, and government agencies. Among them, the most notable is the EU's sanction against Russian cybercriminal Vitaly Nikolayevich Kovalev, also known as "Stern." The EU identified Stern as one of the core managers of the notorious Trickbot Group ransomware syndicate, which is behind high-risk ransomware variants such as Conti ransomware and Ryuk.On-chain analysis shows that wallet addresses linked to Stern have collectively received over $300 million in ransom payments, potentially making him the most prolific ransomware operator ever identified.According to the analysis, the $300 million figure represents only Stern's personal gains, while the total illicit income of the Trickbot Group could be significantly higher. On-chain fund flows indicate that Stern had transactional ties with multiple ransomware ecosystems, including Ryuk, Conti, Diavol, Karakurt, Royal, and Quantum.The investigation reveals that Stern played a role similar to a "CEO" within the Trickbot organization, responsible for budget management, personnel recruitment, infrastructure procurement, and attack planning. (Chainalysis)
Arbitrum Activates ArbOS 61 Elara Upgrade, Introducing Optional Compliance Filtering and Priority Fee Support for Dedicated Chains
According to The Defiant, Arbitrum officially activated the ArbOS 61 Elara upgrade on August 20, which was approved for deployment via an ArbitrumDAO governance vote. The core features of this upgrade include: introducing an optional protocol-level transaction filtering mechanism for Dedicated Chains, allowing chain owners to independently select external compliance service providers such as TRM Labs and Chainalysis to configure restricted address rules; the filter is disabled by default and does not affect existing Arbitrum One users; adding Priority Fee support, also disabled by default, with its activation on Arbitrum One still requiring a separate DAO constitutional vote; introducing the BaseFeeManager contract, which authorizes Offchain Labs to adjust the L2 minimum Gas fee within a DAO-approved range of 0.01 to 0.10 gwei over a two-year authorization period; additionally, the maximum code size limit for Stylus contracts has been increased from 24 KB to 96 KB, though this does not apply to Solidity contracts.
Chainalysis Files Lawsuit Over ICE Awarding $94.6 Million Contract to TRM Labs
Blockchain analytics company Chainalysis Government Solutions filed a bid protest with the U.S. Court of Federal Claims on July 27, challenging the U.S. Immigration and Customs Enforcement (ICE) award of an approximately $94.6 million blockchain forensics software and support services contract to competitor TRM Labs on a sole-source basis. The contract term is from July 1, 2026 to June 30, 2027, for investigations related to the Homeland Security Special Operations Group.
Chainalysis sues U.S. government over ICE's $94.6 million contract awarded to TRM Labs
blockchain forensics firm Chainalysis Government Solutions filed a bid protest with the U.S. Court of Federal Claims on July 27, opposing the U.S. Immigration and Customs Enforcement's (ICE) decision to award a contract worth approximately $94.6 million to competitor TRM Labs on a sole-source basis. The contract, covering the period from July 1, 2026, to June 30, 2027, involves blockchain forensics software and support services for Homeland Security task forces investigating fraud, cybercrime, and sextortion cases. Chainalysis argues that ICE's decision was arbitrary and unreasonable. TRM Labs joined the case as an intervenor-defendant on July 28, defending the contract alongside the U.S. government. The court has allowed Chainalysis to temporarily seal its complaint, with oral arguments scheduled for September 2. ICE stated that after approximately six days of market research, it determined that none of the eight responding companies could meet the requirements. (Decrypt)
$282 Million in Bitcoin and Litecoin Stolen in Trezor Impersonation Support Scam
Odaily News, January 10 - A Bitcoin and Litecoin holder provided a 12-word recovery phrase to attackers impersonating Trezor support personnel, resulting in the theft of approximately $282 million in assets, including about $139 million in Bitcoin and $153 million in Litecoin. Blockchain forensics firm ZeroShadow stated that the incident stemmed from a social engineering attack, not a compromise of wallet software or private key infrastructure. The stolen funds were split via the THORChain cross-chain bridge within minutes and converted into Monero through instant exchange services. ZeroShadow's monitoring team flagged and froze approximately $700,000 in funds within 20 minutes. Under the BIP39 standard, a 12-word recovery phrase contains approximately 128 bits of entropy, while a 24-word phrase contains 256 bits of entropy. Chainalysis estimates that up to 23% of all mined Bitcoin is permanently inaccessible due to lost keys, involving millions of BTC, with causes including forgotten recovery phrases, damaged backups, and a lack of inheritance planning.
Goldman Sachs, JPMorgan Tighten Prediction Market Trading Rules Amid Rising Insider Trading Concerns
amid growing insider trading concerns surrounding prediction markets, Goldman Sachs has prohibited its employees from trading prediction market contracts related to the bank's own events, elections, financial markets, macroeconomic data, and geopolitics. Financial institutions such as Morgan Stanley, JPMorgan Chase, and Bank of America are also formulating or updating relevant policies. Bank of America, in particular, has begun clarifying prohibited practices in prediction market trading to its employees.Previously, the U.S. Commodity Futures Trading Commission (CFTC) and the Department of Justice accused a Google employee of using non-public information to trade "Search of the Year" related contracts on Polymarket, profiting approximately $1.2 million. Legal experts note that the CFTC still lacks well-established case law in enforcing insider trading rules for prediction markets, and the wide variety of prediction market contracts further complicates regulatory oversight.Currently, Kalshi and Polymarket have respectively launched employment verification tools and collaborated with Chainalysis and Palantir to monitor suspicious trading activities. (CNBC)
OFAC updates ISIS-K sanctions list, adds 134 cryptocurrency wallet addresses; Tether has frozen all TRON address balances
According to Chainalysis, the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) updated its sanctions list against ISIS-K (Islamic State Khorasan Branch) on July 1, adding 134 cryptocurrency wallet addresses, of which 131 are on the TRON chain and 3 are Monero addresses. On-chain data shows that the aforementioned TRON wallets have cumulatively received over $1.4 million since 2023 and transferred out over $880,000, with some funds flowing to Syrian crypto exchangers. Currently, Tether has frozen the balances of all 131 TRON addresses. Additionally, on the same day, OFAC also sanctioned two Brazilian individuals and four companies related to the Latin American criminal organization "Primeiro Comando da Capital" (PCC), accusing them of using cryptocurrency to transfer over $30 million in illegal proceeds across borders from the United States to Brazil.
Related news
Arbitrum Activates ArbOS 61 Elara Upgrade, Introducing Optional Compliance Filtering and Priority Fee Support for Dedicated Chains
According to The Defiant, Arbitrum officially activated the ArbOS 61 Elara upgrade on August 20, which was approved for deployment via an ArbitrumDAO governance vote. The core features of this upgrade include: introducing an optional protocol-level transaction filtering mechanism for Dedicated Chains, allowing chain owners to independently select external compliance service providers such as TRM Labs and Chainalysis to configure restricted address rules; the filter is disabled by default and does not affect existing Arbitrum One users; adding Priority Fee support, also disabled by default, with its activation on Arbitrum One still requiring a separate DAO constitutional vote; introducing the BaseFeeManager contract, which authorizes Offchain Labs to adjust the L2 minimum Gas fee within a DAO-approved range of 0.01 to 0.10 gwei over a two-year authorization period; additionally, the maximum code size limit for Stylus contracts has been increased from 24 KB to 96 KB, though this does not apply to Solidity contracts.
Rain Establishes Agency Payment Alliance, Over 25 Institutions Including Visa and Mastercard Join
Stablecoin payment infrastructure company Rain announced the formation of the Agentic Payments Alliance (APA), aiming to advance the infrastructure and standards for agent-driven commerce. The alliance's founding members include over 25 institutions such as Visa, Mastercard, Fiserv, Circle, Solana, Remitly, Chainalysis, Fireblocks, and Uniswap Labs.
Chainalysis Files Lawsuit Over ICE Awarding $94.6 Million Contract to TRM Labs
Blockchain analytics company Chainalysis Government Solutions filed a bid protest with the U.S. Court of Federal Claims on July 27, challenging the U.S. Immigration and Customs Enforcement (ICE) award of an approximately $94.6 million blockchain forensics software and support services contract to competitor TRM Labs on a sole-source basis. The contract term is from July 1, 2026 to June 30, 2027, for investigations related to the Homeland Security Special Operations Group.
Chainalysis sues U.S. government over ICE's $94.6 million contract awarded to TRM Labs
blockchain forensics firm Chainalysis Government Solutions filed a bid protest with the U.S. Court of Federal Claims on July 27, opposing the U.S. Immigration and Customs Enforcement's (ICE) decision to award a contract worth approximately $94.6 million to competitor TRM Labs on a sole-source basis. The contract, covering the period from July 1, 2026, to June 30, 2027, involves blockchain forensics software and support services for Homeland Security task forces investigating fraud, cybercrime, and sextortion cases. Chainalysis argues that ICE's decision was arbitrary and unreasonable. TRM Labs joined the case as an intervenor-defendant on July 28, defending the contract alongside the U.S. government. The court has allowed Chainalysis to temporarily seal its complaint, with oral arguments scheduled for September 2. ICE stated that after approximately six days of market research, it determined that none of the eight responding companies could meet the requirements. (Decrypt)
Chainalysis Sues US Government Over Contract Dispute, TRM Labs Intervenes
Blockchain analytics company Chainalysis Government Solutions filed a lawsuit with the U.S. Court of Federal Claims over a government procurement contract dispute, with competitor TRM Labs participating in the defense as an intervenor defendant. The court held an initial telephone conference on July 30, approved the plaintiff's confidentiality request and protective order, and established the case schedule—the administrative record was submitted on July 31, cross-motions from both parties will be completed by the end of August, oral argument is scheduled for September 2 at the National Courts Building in Washington, D.C., and the government requests a ruling by September 10.
France Proposes Legislation to Automatically Share Crypto Tax Data with 48 Countries
Odaily News – French Foreign Minister Jean-Noël Barrot submitted Bill No. 921 to the Senate on July 17, proposing to incorporate the Crypto-Asset Reporting Framework (CARF) developed by the Organisation for Economic Co-operation and Development (OECD) into French law, and to automatically exchange crypto data with 48 countries that have signed related agreements. The exchanged information includes specific transactions, user names, addresses, tax identification numbers, place of residence, and cumulative transaction value during the reporting period. EU member states are already preparing for relevant data exchanges under the DAC-8 directive, which will take effect on September 30, 2027. Once the bill is approved, the French government will accelerate crypto data collection. A Chainalysis report shows that as of 2026, France has recorded 30 publicly known violent robberies of crypto assets; the report also states that a tax official in the Paris region is suspected of selling data on high-net-worth crypto holders.