Illicit Crypto Addresses Received At Least $154 Billion in 2025
Stablecoins processed $28 trillion in adjusted economic volume as attackers adopted artificial intelligence faster than defenders and crypto theft exceeded $3.4 billion.
Illicit cryptocurrency addresses received at least $154 billion in 2025 as stablecoins expanded across payments and attackers adopted artificial intelligence faster than defenders.
The estimate increased 162% from the previous year and remains a lower-bound figure that may rise as more illicit addresses are identified. Sanctioned entities accounted for much of the increase, with the value they received rising 694%.
Illicit activity still represented less than 1% of attributed cryptocurrency transaction volume. The findings point to a growing need for continuous monitoring, stronger compliance controls and AI-assisted investigations as digital assets move into more financial functions.
Stablecoins processed $28 trillion in adjusted economic volume in 2025. The adjusted measure removes automated and liquidity-related activity while retaining transactions tied to payments, trading, decentralized finance, remittances, business-to-business transfers, treasury operations and settlement.
The adjusted figure has expanded sharply since 2023, reflecting a 133% annualized growth rate. Payment volumes could intersect with the off-chain transaction volumes of Visa and Mastercard between 2031 and 2039 if current trends continue.
Crypto theft exceeded $3.4 billion through early December 2025, with the February Bybit breach accounting for about $1.5 billion.
“The cryptocurrency ecosystem faced another challenging year, with stolen funds continuing their upward trajectory,” Chainalysis said in December 2025.
In the September Venus Protocol incident, detection came roughly 18 hours beforehand; Venus halted the protocol within 20 minutes of the exploit, and all stolen funds were recovered within 12 hours.
Chainalysis introduced blockchain intelligence agents on March 31, 2026. The agents are designed to support investigations, compliance analysis, alert enrichment, reporting and automated workflows, with rollout scheduled for summer 2026.
“Bad actors are already using AI to accelerate fraud, theft, money laundering, and more. We need to move fast to match and then outpace that acceleration,” Chainalysis said.
The agents are built around data quality, auditable results, deterministic workflows and human control. Blockchain data and investigative context remain necessary for reliable analysis.
“Without it, an agent is just a language model guessing,” Chainalysis said.
