Investigation of KuCoin
The cryptocurrency exchange KuCoin is under investigation following claims by blockchain analyst ZachXBT that it sent a legal warning to a victim of a significant theft, where stolen funds were purportedly funneled through accounts associated with the platform. The incident is linked to a theft involving $250,000 from an Atomic stealer on August 18, 2025, as detailed in ZachXBT’s post on Telegram.
Allegations and Legal Concerns
In his report, ZachXBT identified one theft address and five KuCoin deposit addresses connected to the incident. He alleges that these accounts utilized “purchased mule KYC,” a term referring to accounts that have been verified using the identification of another individual. While these allegations are serious, they have yet to be substantiated by any official court documents or an official response from KuCoin.
One screenshot shared via the post reportedly displays a response from KuCoin’s Customer Care and Support Team, emphasizing their right to address concerns through appropriate legal avenues but warning that any defamatory statements could result in legal action. The message concludes with a note indicating that “All rights are expressly reserved,” amplifying the concerns of potential retaliation against critics.
The situation gained traction when user DNBWIZARD remarked on X, ridiculing the idea of being threatened with a lawsuit.
Ongoing Compliance Issues
This situation unfolds against a backdrop of ongoing issues surrounding KuCoin’s compliance practices, with the U.S. Department of Justice having imposed scrutiny on the exchange. In January 2025, it was reported that KuCoin had admitted to operating an unlicensed money transmission operation and agreed to a settlement exceeding $297 million due to failings in their Anti-Money Laundering (AML) and Know Your Customer (KYC) measures, enabling illicit activity on the platform.
Earlier, in March 2024, the DOJ had charged KuCoin and its two founders for inadequately managing their anti-money laundering framework, stating that the exchange had processed over $5 billion in suspicious transactions from 2017 to 2024.
Fraudulent Activities and Regulatory Challenges
The reach of KuCoin’s alleged negligence extends to a fraudulent Ledger Live application that reportedly siphoned off upwards of $9.5 million from over 50 users this year, with investigations indicating that the stolen assets were transferred via more than 150 KuCoin deposit addresses before reaching a centralized mixing service. ZachXBT had previously traced these funds back to accounts linked to the theft.
Last year, KuCoin made strides to enhance its global regulatory standing by obtaining a MiCA license through its subsidiary based in Austria, allowing it to provide regulated services throughout the European Economic Area. However, Austria’s regulatory body later imposed restrictions on the exchange’s European division, prohibiting it from onboarding new customers, citing deficiencies in compliance staffing. This restriction was a setback to KuCoin’s strategy to rebrand itself as a regulated entity within the European market.
