Regulation & Policy

Chainalysis Operation Lighthouse Flags 7,700 Crypto Accounts Tied to Child Exploitation Networks

3 min read
Chainalysis Operation Lighthouse Flags 7,700 Crypto Accounts Tied to Child Exploitation Networks

More than 7,700 crypto accounts tied to child sexual abuse material networks. That is what Chainalysis says its “Operation Lighthouse” law-enforcement collaboration flagged, generating 14,300 investigative leads across 11 exchanges in a multi-day sprint backed by Binance, Coinbase and Europol.

The operation investigated 29,120 crypto addresses and digital identifiers connected to more than 100 child sexual abuse material platforms, forums and distribution networks across the surface and dark web, Cointelegraph reported, citing a Tuesday press release shared with the outlet. Suspects surfaced across 125 countries and included 16 registered sex offenders, Chainalysis said.

That scope puts Operation Lighthouse among the larger publicly disclosed law-enforcement uses of onchain analytics against CSAM networks. The leads were not generic threat reports. They pointed to specific wallets and accounts that participants used to develop follow-on legal processes, Chainalysis said.

Europol, the UK National Crime Agency, Binance, Coinbase, Block and the Internet Watch Foundation all took part, according to Cointelegraph. The sprint ran out of the National Cyber-Forensics and Training Alliance in New York, following what Chainalysis described as months of data enrichment. Participants leaned on onchain intelligence to build leads for case development and follow-on legal action, the firm said.

Tom McLouth, senior intelligence analyst at Chainalysis, told Cointelegraph: “Behind every lead is a real child at risk.” The suspect pool, McLouth said, included military personnel, law enforcement officers, medical professionals and educators, among them individuals with direct access to children.

Joint action was essential, Europol said, because perpetrators exploit financial services, payment systems and internet platforms, according to the report. The agency did not name specific arrests or prosecutions.

None have been confirmed. Chainalysis said results were expected to lead to arrests, prosecutions and account-level disruption, though the press release described outcomes as prospective rather than completed. No dollar volume of crypto transactions traced was disclosed.

The operation builds on earlier crypto-assisted CSAM takedowns. In 2019, the US Justice Department announced the takedown of Welcome to Video, described as the largest darknet child sexual exploitation market by content volume. Authorities traced bitcoin payments to locate the server in South Korea and identify its administrator. The toll: 337 users arrested or charged, at least 23 victims rescued, roughly 8 terabytes of material seized. Chainalysis said its software was used to analyze those transactions.

More recently, Binance announced a partnership with nonprofit Stop The Traffik in July for intelligence and training on crypto activity linked to human trafficking and child exploitation, Cointelegraph reported.

Chainalysis framed the sprint as a model for public-private collaboration. The firms named had not published their own statements on the operation at press time.

The operation’s lead law-enforcement agency was not identified in the report. Nor were the specific roles of Block and the Internet Watch Foundation detailed.

Avatar of Theo Okafor

Theo Okafor

Theo Okafor reports on crypto policy and protocol governance for NFT Signals, following legislation through Congress and core development through the upgrade process.