TRM LABS: TELEGRAM attempt to block Huione turned out to be ineffective

In May, the Telegram messenger blocked Hurantee and Xinbi Guarantee, which was washed as $ 35 billion in USDT. However, it has hardly affected the activity A large network of Chinese dartnetics, TRM Labs analysts report.

Researchers estimate that in 2024 the peak daily volume of input transactions reached $ 60 million, despite the fact that the accounts on Telegram failed to restore, the platform continues to operate in “cut mode”. Currently, daily activity has stabilized at $ 30 million.

The place of the blocked Huione Gurantee took dozens of Darknet Marketllys

At the same time, Xinbi returned to work under the same identifier. Since May 11, the playground activity has increased by 90%.

In parallel, the daily influx of Tudou platform related to the Chinese Darknet network has increased 70 times. Analysts have suggested that it was through Tudou that Huione is now hidden to avoid new blocking.

“On May 25, 2025, Huione Group created a new Telegram account. The channel was named Chinese, but it saved the “HW” initials from the previous Haowang brand, and the bot still uses this name. It seems that the company deliberately left part of the old brand to keep customers after blocking, ”the TRM report said.

The Huione Gurantee bot in Telegram still uses the name hawang. Source: TRM Labs.

In closed chats, Telegram Huione only left VIP sets. Other users were redirected to Tudou.

“The analysis of blockchain transactions shows that sellers who previously worked through Huione have switched to Tudou using the same Huione Pay wallets,” analysts said.

How are Huione Pay and Huione Gurantee Huione Pay is positioned as a separate service, but is closely linked to Huione Guarantee, TRM said. From 2021, Huione Pay Hot Wallets transfer funds directly to four platform deposit accounts.

Huione sellers have to make cryptocurrency pledge before starting work. These funds are a guarantee: in case of violation of the rules, the platform leaves a deposit.

In September 2024, Huione complicated the structure – six new wallets appeared. Each is for a separate type of service:

• for cyberchargri, such as phishing or harmful Softwarethe client has to pay from 1000 to 5000 USDT;
• For large -scale money laundering – from 20,000 to 70,000 USDT.

Huione Pay (top) transfer scheme to two sets of Huione Guarantee deposit purses. Source: TRM Labs.

“This gradation of deposits is likely to reflect the predictable risks and volumes of transactions for different types of services. Higher pledge is not only a guarantee, but also an indicator of the seller’s reliability in a shadow ecosystem, where there is almost no trust, ”analysts say.

Recall in early May FincenReferring to Elliptic research, she called Huione Group a “key source of money laundering” and suggested restricting her access to the US financial system. The company was also accused of facilitating cryptocurrency laundering for the North Korean Hacker Group of Lazarus Group.

The gun