Lastly, a new scoring system that tracks evasion behaviour using our algorithm would be more fun, and a lot more effective.

We show how easy it is to slip through. But also, how traceable those patterns are if you actually look.

I believe:
1. Static lists aren’t enough.
2. We need adaptive tagging.
3. Sanctions should follow funds, not addresses.
4. Enforcement has to think like adversaries — not just regulators.

Some services did "apply" sanctions, but it felt more like checking a box than actually stopping anything.
Sanctioning addresses without understanding the flow of money is like putting up a roadblock and hoping nobody finds a detour.

Within weeks, the vast majority had been moved out. Through new wallets. Through obfuscation. Through patterns so fast and automated, you'd think it was part of an exploit.

Together with Endong Liu, Mark Ryan, and Pascal Berrang, we studied this in our new paper: Evasion Under Blockchain Sanctions (arxiv.org/html/2507.11...)

Spoiler: the funds didn’t stay put. Not even close.