Is this crypto address safe? How to check an address before you send
· 3 min read · KadenaTrace
Before sending money to an address you have not used before, it is worth ten seconds to ask whether that address has a history. Check an address looks it up against every case, incident and freeze KadenaTrace has on record, on 11 networks. This guide explains what the answer means, and just as important, what it cannot tell you.
What the check looks at
For any address, the check asks:
- Is it the starting address of a recorded theft case, or an address a source attributes to an attacker? (An address a report only mentions gets a caution, not an attacker flag.)
- Did traced stolen funds pass through it, and how many hops from the theft?
- Has an issuer frozen it (USDT or USDC), read from the token contract?
- Is it a known service: an exchange, a bridge, a mixer?
It returns a level (high, medium or none), a one-line summary, and the reasons, each linked to the case or incident behind it.
Three real answers
A wallet that stolen funds came from. The TRON address TSpe5HC3…kyZ8A from the Binance hack returns high: "Do not send: this address is linked to reported stolen funds." The reason links case KT-18. Funds sent there may be taken by whoever controls it.
A frozen address. TG5iBMQP…zsGi, where Tether froze $312.7M in USDT on October 29, 2026, also returns high, with the reason "Tether froze $312.7M USDT on TRON. Stablecoins sent here can be frozen too." and a link to the freeze.
A poisoned look-alike. The address in the KT-20 address poisoning case, the one a victim mistook for their usual address, now returns high, naming the case and the $52K that left it. Before the theft was reported, it would have returned nothing, because nobody had reported it yet. That is the main limit of any check.
What "none" means
"No reports or traced stolen funds on record. This is not a guarantee: check the address with the person you are paying." A clean result means KadenaTrace has nothing on that address, not that the address is safe. New scam addresses are clean until someone reports them. For a payment that matters, confirm the address with the recipient through a second channel, and send a small test amount first. Address poisoning explains why comparing only the first and last characters is not enough.
What "linked to stolen funds" does not mean
- It does not name a person. An address is not an identity.
- It does not mean the owner is a criminal. A victim's own drained wallet is "linked to stolen funds": the funds were stolen from it. So is an exchange deposit address the thief used. The reasons say which.
- Distance matters. Funds five hops away from a theft, mixed with other money, say much less than an address the funds went to directly. The check reports the hop count.
For wallets and apps: the free API
The same check is an open endpoint:
GET https://trace.kadena.ws/api/risk?address=<address>
It returns JSON with risk, summary, reasons (each with a link to the evidence), the networks the address was seen on, and any service label. Wallets can call it before showing a send button, and show the summary as is. Please cache results for a few minutes rather than calling on every keystroke.
What this guide does not claim
The three results above were read from the live check on October 31, 2026; results change as cases are added and funds move, and the case pages have the current state. A result is evidence about an address, never about a person.