What are the allegations involving KuCoin and the stolen cryptocurrency?

According to blockchain investigator ZachXBT, KuCoin received cryptocurrency through five alleged deposit addresses linked to the reported theft. He also alleged the accounts used “purchased mule KYC” identities, although those claims have not been independently verified.

What does the alleged KuCoin legal warning mean?

The screenshot shared by ZachXBT appears to show a message attributed to KuCoin stating that false or unlawful statements could lead to legal claims. KuCoin has not publicly confirmed the authenticity of the message or announced any legal action.

How has KuCoin's compliance history affected the latest allegations?

KuCoin has previously faced regulatory action over its compliance controls. In January 2025, the US Department of Justice said the exchange agreed to pay more than US$297 million after pleading guilty to operating an unlicensed money transmitting business and failing to maintain effective anti-money laundering and know-your-customer programmes.

What is KuCoin's current regulatory status in Europe?

KuCoin obtained a Markets in Crypto-Assets Regulation (MiCA) licence in Austria through its European subsidiary. Austria's financial regulator later restricted the subsidiary from onboarding new customers, citing compliance staffing issues.

Image for illustrative purposes only. Not a real photo.

KuCoin faces scrutiny over US$250K theft claims

Q: Why is KuCoin facing scrutiny over the US$250,000 theft claims?

KuCoin is facing scrutiny after blockchain investigator ZachXBT alleged about US$250,000 stolen in an Atomic stealer attack on 18 August 2025 was routed through five alleged KuCoin deposit addresses. The allegations have not been confirmed by a court or by KuCoin.

Written by Jon CuthbertPublished Jun 30, 2026, 8:05 AM

Blockchain investigator ZachXBT alleged KuCoin threatened legal action after he linked stolen cryptocurrency to five alleged exchange deposit addresses.
The claims have not been verified by a court or confirmed by KuCoin, adding to ongoing scrutiny of the exchange's compliance record.
The dispute follows KuCoin's previous anti-money laundering settlement and its continued efforts to expand regulated operations in Europe.

KuCoin is facing renewed scrutiny after blockchain investigator ZachXBT alleged the exchange sent legal warnings following claims that about US$250,000 stolen through an Atomic stealer attack on 18 August 2025 was routed through five alleged KuCoin deposit addresses.

The allegations have not been confirmed by court filings or an official statement from KuCoin, but the dispute follows the exchange's previous legal and regulatory challenges over anti-money laundering and know-your-customer compliance.

“False or unlawful statements may lead to legal claims,” said the message attributed to the KuCoin Customer Care and Support Team in a screenshot shared by ZachXBT.

ZachXBT alleged the deposit accounts involved “purchased mule KYC” identities, while another social media user, DNBWIZARD, claimed KuCoin had threatened legal action, although neither allegation has been independently verified.

The dispute comes as KuCoin continues operating under increased regulatory scrutiny, and following the allegations there was no immediate market or share price reaction because KuCoin is a privately held company.

In January 2025, the US Department of Justice said KuCoin pleaded guilty to operating an unlicensed money transmitting business and agreed to pay more than US$297 million in penalties after prosecutors alleged the exchange failed to maintain effective anti-money laundering and know-your-customer controls.

KuCoin later obtained a Markets in Crypto-Assets Regulation (MiCA) licence in Austria through its European subsidiary, although Austria's regulator subsequently restricted the subsidiary from onboarding new customers, citing compliance staffing issues.