An exchange that is not on any list. 534 wallets on TRON behave like exchange hot wallets: hundreds of customer deposit addresses sweep funds into each. In one week they received 1.97B USDT. As a single company they would rank third after Binance and OKX, above Bitfinex and Bybit.
None has a name. None of the ten largest carries a Tronscan tag (checked November 7, 2026). Our 65M-label database had no name for them either, until we found them by behaviour.
Concentration. The ten largest received 1.10B USDT, 56% of the flow. The largest, TSjYrK…KkVQu, took 273M USDT in a week from 2,127 senders.
They are new. Seven of the ten largest were created in 2026. Wallet TVsf4L…zMFaR8 appeared in late October and received 90M USDT in its first week.
Who they are. By behaviour these are custodial services: smaller exchanges, OTC and cash exchangers, payment processors, casinos, and new wallets of known exchanges nobody has labelled yet. One wallet alone cannot tell them apart, so we label them neither clean nor dirty, only “unnamed deposit receiver”.
Why it matters
For users. When an AML tool does not know who is behind an address, it reports “unknown” or “risk”. A customer of a small exchanger gets a yellow flag only because the exchanger has no label.
For the industry. One-twelfth of the visible USDT flow into hot wallets passes through services that cannot be named from open data. Sanctions and fraud screening there relies on address behaviour alone.
Method
Source: every USDT TRC-20 Transfer event for 7 days (blocks 87,490,486 – 87,692,086) via SQD Portal. We build a hub map of addresses with 100+ transfers a week.
Hot-wallet candidate: at least 100 senders, at most 20 receivers, inflow at least 5× outflow, no exchange or risk label in our database.
Deposit address: received USDT from outside and sent 90%+ to a single receiver, the candidate, with at most 10 outgoing transfers.
Hot wallet: at least 60 such deposits and at least 70% of the senders checked.
Brand volumes count only their hot wallets present in the hub map, so they are a lower bound. The 8.2% share is computed against unnamed plus known hot wallets in this map.
What we do with it
All 534 wallets and their 260k deposit addresses are labelled in the bot as “unnamed exchange: hot wallet”. Customers of these services no longer get a yellow flag for an “unknown” counterparty. Check any address right in a chat: @freezecheck_bot address.