On November 8, 2023, hackers drained 1,283 ETH ($2.4 million) from two CoinSpot hot wallets via a private key compromise. CertiK confirmed it was a "probable private key compromise." The stolen funds were laundered through THORChain and Wan Bridge to evade tracking.

DOJ settlement (November 2023): Binance pled guilty to conspiracy to violate the Bank Secrecy Act, operating an unlicensed money services business, and willful violation of IEEPA. Binance failed to report transactions associated with Hamas's Al-Qassam Brigades, Palestinian Islamic Jihad, Al Qaeda, and ISIS. Treasury Secretary Janet Yellen: "Binance turned a blind eye to its legal obligations in the pursuit of profit. Its wilful failures allowed money to flow to terrorists, cybercriminals, and child abusers." Total penalty: $4.316 billion -- the largest enforcement action in Treasury Department history.

In November 2013, JPMorgan Chase agreed to pay $13 billion -- the largest settlement to a single corporation in DOJ history -- to resolve claims that it misled investors about mortgage-backed securities. JPMorgan admitted that its employees knowingly sold loans to investors that were shakier than claimed. Internal due diligence found 27% of loans were failing, but the bank packaged at least half of those into securities and sold them anyway. The settlement included $9 billion in cash and $4 billion in borrower relief. The deal was negotiated in secret and never subjected to judicial review. The loans helped trigger the 2008 financial crisis that cost millions of Americans their homes.

Under the ATO data-matching program running since 2019, Swyftx shares names, contact details, wallet addresses, transaction records, and trade values with the Australian Taxation Office. In May 2024, the ATO confirmed it had requested personal and transaction details on 1.2 million Australian crypto users from exchanges.

Worldcoin's iris-scanning Orb has been banned or investigated in Kenya, Spain, Portugal, France, Germany, Brazil, and India. Kenya suspended operations after finding Worldcoin collected biometric data without adequate consent. Spain's data protection authority ordered deletion of all data collected from Spanish citizens. The project, co-founded by Sam Altman, offered free crypto tokens in exchange for iris scans — targeting developing countries where people were most likely to trade biometric data for small payments.

NAB's "introducer" program paid third parties commissions for referring home loan customers. NAB bankers fabricated customer information, forged signatures, and falsified loan documents to push through mortgages. Some customers didn't know they'd applied for loans. The Royal Commission heard evidence of 20 NAB bankers under investigation; several were dismissed. Customers were left with mortgages they never applied for or couldn't afford. The "rigorous assessment" was a forged signature.

AUSTRAC fined Westpac $1.3 billion in September 2020 for 23 million contraventions of AML/CTF laws — the largest fine in Australian corporate history. AUSTRAC found Westpac failed to adequately monitor transactions to the Philippines and Southeast Asia that were consistent with patterns used to pay for child exploitation material. Westpac's LitePay product enabled low-value international transfers with virtually no monitoring. The bank processed the payments. The children had no compliance framework.

AUSTRAC fined CBA $700 million in June 2018 — the largest civil penalty in Australian corporate history at the time. CBA's Intelligent Deposit Machines were used for money laundering: 53,506 transactions went unreported, some linked to terrorism financing. CBA's compliance team flagged the issue years before regulators acted — management ignored the warnings. CEO Ian Narev resigned. AUSTRAC CEO Nicole Rose said: "The sheer scale of the non-compliance is significant."