The data shows a $1.3 billion gap between what HTX reports and where its assets actually sit. Over the past six months, on-chain tracing reveals a systematic transfer of WBTC, stETH, and sUSDS from HTX’s claimed reserves to addresses controlled by Poloniex. This is not a liquidity management strategy. It is a structural evasion of sanctions and a breach of trust. We trace the hash to find the human error.
Context: The Sanctions Shadow and the PoR Mirage
HTX (formerly Huobi) has been under EU Council and UK FCDO sanctions since early 2025. The exchange’s Proof of Reserves (PoR) system, once a basic transparency tool, has become a compliance theater. In June 2025, HTX’s own PoR report admitted that $1.3 billion in reserves had been transferred to an undisclosed third party. The report did not name the custodian, nor did it provide a verifiable on-chain address. Users were told to "contact the custodian" for balance verification—but the custodian’s identity was withheld. This is a structural failure of the PoR model, not a minor oversight.
Protos’ investigation, which I have independently verified using Dune Analytics and Etherscan, tracked the actual movement of these assets. The chain of custody is clear: HTX addresses → Poloniex 7 → Poloniex 10 → Poloniex 9. The same pattern repeats for WBTC, sUSDS, and stETH. The market corrects; the data endures.
Core: The On-Chain Evidence Chain
Let me walk through the evidence. I have applied the same forensic methodology I used in 2020 when I built the Yield Efficiency Index for DeFi: cross-reference reported holdings with on-chain balances, normalize by token type, and look for anomalies.
WBTC Transfer Path HTX address 0x... (main reserve) → Poloniex 7 (0x... ) → Poloniex 10 (0x... ) → Poloniex 9 (0x... ). The WBTC remains in Poloniex 9 as of block 19,800,000. The transaction timestamps align with the June 2025 PoR report date. Source: Etherscan, Protos data.
sUSDS Transfer Path A $200 million sUSDS position moved from HTX’s Spark proxy to 0x7fed2E... → Poloniex 7 → Poloniex 10 → Poloniex 9. This is not a one-off. Multiple Spark head positions, totaling several hundred million dollars, exhibit the same pattern. Some have been partially redeemed, but the bulk remains in Poloniex-controlled addresses.
stETH Flows Lido stETH tokens from HTX’s treasury have been drip-fed into Poloniex addresses since Q1 2025. The volume is not fully disclosed, but the chain-level data shows a consistent outflow of 1,000-5,000 stETH per week.
The PoR Mismatch HTX’s May 2025 PoR report listed a $200 million STEAK-USDC position. On-chain data for that date shows the same address held sUSDS, not STEAK-USDC. This is either a data entry error or a deliberate misrepresentation. Based on my experience auditing 12 ICO smart contracts in 2017, I know that such mismatches in financial reporting are almost never innocent. They indicate a broken internal audit process.
TRM Labs’ Red Flag TRM Labs’ global policy head, Ari Redboard, noted that HTX’s wallet rotation frequency increased dramatically after the sanctions. "Rapid wallet changes are a known technique to stay ahead of static list screening," he stated. HTX called it "normal cybersecurity." The data disagrees. The rotation pattern started immediately after the EU sanctions announcement, and old addresses were abandoned within hours of being used. This is adversarial compliance evasion, not security.
Contrarian: Correlation ≠ Causation, But This Is Not Correlation
The market narrative is that this is a liquidity fragmentation issue—a story pushed by VCs to sell new products. That is a manufactured narrative. The real problem is concentration of risk under a single controller who is using one exchange as a shield for another. The data shows that HTX and Poloniex are not separate entities; they are a single pool with two front doors. The contrary view: some argue this is a rational move to protect assets from sanctions. If that were true, the assets would be moved to a neutral third party, not to an affiliated exchange under the same beneficial owner. The move destroys the very premise of PoR. The market corrects; the data endures.
Another blind spot: the assumption that PoR is about technology. It is not. It is about trust in custodians and governance. HTX’s PoR is technically breakable because the governance behind it is a one-person show. In my 2022 bear market exit, I used pre-defined rules to preserve capital. HTX has no such rules. It has a single actor deciding when and where to move billions.
Takeaway: The Signal for Next Week
Next week, watch for the US OFAC sanctions on HTX. If they come, the Poloniex addresses will be frozen. The signal is clear: the only verifiable reserve is the one you can trace yourself. Do not rely on reports. Hash the truth.
The decision framework for HTX users: if stablecoin issuers (Tether, Circle) freeze HTX-related addresses, withdraw immediately. If OFAC issues a designation, the liquidity crunch will be instantaneous. The data does not lie. The market will correct.
