[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUXpPJuJW2yUgUYOOS7XaYu2mpJQpsIflNvKHyGgg3bo":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":51},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"e68b2774-4592-4cd1-b092-f0b5226bd072","US bans MEXC crypto exchange over sanctions evasion, cybercrime links","us-bans-mexc-crypto-exchange-over-sanctions-evasion-cybercrime-links-7f7d89","The US Department of the Treasury has cut off the MEXC Global crypto exchange from the US financial system over sanctions evasion and links with cybercrime gangs. [...]","The US Treasury has banned the MEXC Global crypto exchange from the US financial system due to its alleged facilitation of illicit transactions totaling at least $16 billion. These transactions are linked to cybercrime, sanctions evasion by Iran, North Korea, and Russia, and darknet markets. The ban exposes US entities to secondary sanctions for engaging with MEXC.","US bans MEXC crypto exchange for sanctions evasion and cybercrime links.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fus-bans-mexc-crypto-exchange-over-sanctions-evasion-cybercrime-links\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F11\u002F09\u002FUS_Treasury_Department.jpg","2026-11-09T13:28:56+00:00","2026-11-09T14:00:19.401005+00:00",8,[17,20],{"name":18,"type":19},"MEXC Global","vendor",{"name":21,"type":22},"A7 sanctions evasion network","threat_actor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":23,"icon":25,"name":26,"slug":27},null,"Policy","policy",[29,34,39,41],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":40},{"id":23,"icon":25,"name":26,"slug":27},{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":49,"vendors":50},[],[],{"slug":52,"title":53,"body":54,"framework_refs":55,"framework_notes":63},"mexc-crypto-exchange-banned-for-enabling-16b-in-illicit-transactions","MEXC Crypto Exchange Banned for Enabling $16B in Illicit Transactions","The US Treasury's ban on MEXC Global highlights the critical importance of robust Anti-Money Laundering (AML) and Know Your Customer (KYC) compliance controls within financial and crypto platforms. MEXC allegedly facilitated over $16 billion in illicit transactions linked to cybercrime, sanctions evasion, and darknet markets, suggesting systemic failures in transaction monitoring and customer due diligence. This matters because inadequate compliance controls don't just expose an institution to regulatory penalties — they make the platform a direct enabler of nation-state cybercrime and global sanctions evasion. US entities that continue to engage with MEXC now face secondary sanctions risk, meaning the harm radiates outward to any organization that failed to vet its financial counterparties.",[56,57,58,59,60,61,62],"NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","CIS Control 17: Incident Response Management","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","GDPR Article 32","DORA Article 9","NIS2 Article 21(2)(b)",{"DORA Article 9":64,"GDPR Article 32":65,"NIS2 Article 21(2)(b)":66,"NIST SP 800-53 SI-2: Flaw Remediation":67,"CIS Control 17: Incident Response Management":68,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":69,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":70},"DORA mandates that financial entities implement information security controls and third-party risk management; any EU-connected institution using MEXC as a counterparty would have violated DORA's requirements to vet the security and compliance posture of their financial service providers.","Article 32 requires appropriate technical and organisational measures to ensure security; a platform handling financial data at this scale should have had organisational controls robust enough to detect and prevent processing of transactions from criminal and sanctioned sources.","NIS2 requires incident handling and monitoring capabilities for entities in scope; robust transaction monitoring aligned with this requirement would have surfaced the patterns of illicit activity flowing through MEXC far earlier.","While primarily technical, SI-2's principle of identifying and correcting systemic weaknesses applies here — MEXC's compliance failures represent unaddressed 'flaws' in its AML\u002FKYC controls that allowed illicit activity to persist at massive scale.","An effective incident response capability includes processes for detecting and acting on signs of illicit use; MEXC's apparent lack of meaningful response to $16B in suspicious transactions indicates a fundamental incident detection and escalation failure.","Beyond software vulnerabilities, organisations must manage process and compliance vulnerabilities; MEXC's unaddressed AML control gaps represent exactly the kind of known organisational weakness that this control requires to be identified and remediated.","Proper identity verification (KYC) of customers accessing the platform is a core access control function; MEXC's failure to adequately verify user identities enabled sanctioned actors to use the platform freely."]