ZachXBT: Over 87% of inflows to the money laundering service FreedomXMR on HL Core are linked to illicit activity.

PANews October 20 news: On-chain detective ZachXBT posted that in August 2026, a centralized money laundering service called FreedomXMR (FXMR) appeared on Hyperliquid Core (HL Core). More than 87% of its inflows were directly linked to illicit activity. After manual review, of all historical inflows to FXMR exceeding $10,000, more than $20 million originated directly from ransomware attacks, exploits, malware, and social engineering attack incidents, including:

DCENT wallet exploit incident (September 2026)

Fetch[.]ai exploit incident (September 2026)

Axelar exploit incident (September 2026)

A ransomware payment (September 2026, specific source not disclosed)

Gamdom exploit incident (October 2026)

The operator of this service obtained XMR liquidity from KuCoin (over 3,000 deposits), suspected to use a swap model similar to Wagyu. The FXMR ticker was purchased by the operator on July 27, 2026, in an HL auction for 518.28 HYPE (about $28,000). Multiple such centralized money laundering services have previously appeared on HL Core, exploiting the chain's "permissionless" design characteristics and its widespread use for illicit money laundering activities. The relevant data table has been shared with the Hyperliquid team.