KuCoin, a prominent cryptocurrency exchange, is facing heightened scrutiny following recent claims by blockchain investigator ZachXBT. Allegations have surfaced that several deposit addresses, possibly connected to KuCoin, played a role in a crypto theft involving $250,000 on August 18, 2025, linked to the Atomic Stealer malware.
Are KuCoin’s Deposit Methods Flawed?
Allegations center on the possibility of KuCoin’s involvement through deposit addresses reportedly linked to the exchange. ZachXBT shared insights via Telegram, identifying five such addresses. The investigation further speculated on the use of intermediary KYC verification, where personal data supposedly sourced from third parties might be employed. Yet, these assertions await judicial validation.
KYC, essential for identity verification, and AML, focusing on counteracting money laundering, are crucial regulatory elements in the financial landscape, particularly for platforms like KuCoin.
What Role Did Social Media Play?
Social media amplified these discussions when a community member named DNBWIZARD publicized related screenshots on the X platform, accusing KuCoin of potential legal threats. The company has not responded publicly or verified the authenticity of the purported KuCoin Support message.
Long recognized as an influential centralized exchange, KuCoin’s reputation has been subject to previous legal scrutiny, notably a settlement in the United States earlier in 2025.
KuCoin’s Complex Legal History
In January 2025, the U.S. Department of Justice disclosed KuCoin’s settlement over unlicensed money transmission accusations, imposing fines exceeding $297 million. These developments echoed prior criminal charges from March 2024 related to alleged illicit transactions.
- Alleged theft linked to KuCoin-related addresses: August 18, 2025
- Major U.S. penalty for unlicensed operations: January 2025
- Criminal allegations on fund flows from 2017 to 2024
Does KuCoin’s Past Repeat Itself?
Current allegations resonate with past incidents highlighting KuCoin, notably a scam involving a fake Ledger Live app that reportedly misappropriated $9.5 million. This deceptive application implicated over 150 KuCoin addresses, according to ZachXBT’s investigations.
Assets supposedly stolen by the AudiA6 group were similarly associated with KuCoin-linked addresses. Commentary from ZachXBT underscores the need for collaboration between exchanges and authorities to potentially reclaim stolen assets.
Though KuCoin expanded in Europe through a MiCA license acquisition in 2025, Austrian regulatory actions later precluded its local subsidiary from accepting new clientele, citing compliance workforce issues.
