RU

AML check on Sui

Sui addresses are 0x plus 64 hex characters. This page covers how Sui's object model affects AML checks, risks seen on the network, and which checkers cover it.

Address format0x followed by 64 hexadecimal characters (32 bytes) — longer than an Ethereum address0x6035ec95cb438db4f4254818271987bb9aa6aaa8a25dfd654dc304c6823a6093Example for illustration, not a real address.
Note

Sui addresses look like Ethereum addresses but are longer (64 hex characters after 0x, not 40), and object IDs use the same 32-byte format, so make sure you are screening a wallet address. Funds stolen in the May 2025 Cetus exploit were frozen on Sui and later moved under a validator-approved protocol upgrade, so exposure to that incident can show up in a Sui wallet's history.

Services that check Sui

01ChainalysisEnterprise platformPrice on requestSupportedNot scored
02EllipticEnterprise platformPrice on requestSupportedNot scored
03TRM LabsEnterprise platformPrice on requestSupportedNot scored
04MistTrackWeb appAPI from $0.20 per checkSupported7.9
05Merkle ScienceEnterprise platformPrice on requestSupportedNot scored
06WebacyUse with careAPI for businessPrices shown after sign-inSupportedNot scored

How to check a Sui address

  1. Get the public addressAsk your counterparty for the address they will send from — or copy it from the incoming transaction.
  2. Pick a service that covers SuiChoose one marked “Supported” in the list above. Paste the full 66-character address (0x + 64 hex characters). A shorter 0x value may have its leading zeros dropped, and a 0x value can also be an object ID rather than a wallet, so confirm it is the wallet address before you run the check.
  3. Run the check and read itIf funds passed through Sui DeFi protocols, check whether the tool flags exposure to known exploit addresses (such as the May 2025 Cetus exploit) and whether it traces across bridges, since Elliptic reported that Cetus funds were bridged to Ethereum.
A real AML check needs only a public address. Never share a seed phrase or private key.

Sui specifics

  • A Sui address is a 32-byte value written as 0x followed by 64 hex characters; tools may accept a shortened form without leading zeros, but always output the full 66-character version.[1]
  • Everything on Sui is stored as an object that has an owner, either an address or another object, and an object owned by an address can only be used by that owner.[2]
  • On Sui a coin is itself an object: the Sui framework defines Coin<T> as a transferable object with its own ID and a balance.[3]
  • Issuers of 'regulated' coins on Sui can add addresses to a system-wide deny list that stops those addresses using that coin, and can pause the coin for all addresses.[4]
  • After the May 2025 Cetus exploit, validators holding 90.9% of stake voted yes to a protocol upgrade that moves funds frozen in two hacker accounts into a 4-of-6 multisig wallet (keys held by Cetus, the Sui Foundation and OtterSec), to be held in trust for affected users.[5]
  • Elliptic reported that Cetus Protocol, a decentralized exchange on Sui, was hacked for more than $200 million on 22 May 2025, starting around 10:30 UTC, and called it the second-largest hack of 2025 at the time.[6]
  • According to Elliptic, the Cetus exploiter swapped USDT to USDC on a DEX, bridged the funds to Ethereum and swapped them to ETH through a DEX aggregator, which shows how stolen funds can leave Sui across a bridge.[7]

Common risks on Sui

Stolen fundsHighCoins taken in hacks of exchanges, protocols or personal wallets.DeFi protocolLowEstablished on-chain lending, swaps and liquidity pools.ScamHighMoney taken through fake investments, phishing, impersonation and similar deception.

FAQ

Is a Sui address the same as an Ethereum address?

No. Both start with 0x, but a Sui address is 32 bytes (64 hex characters after 0x, 66 characters in total), while an Ethereum address is 20 bytes (40 hex characters). A similar look does not mean the two networks are interchangeable.

Can funds on Sui be frozen?

In some cases. Issuers of 'regulated' coins on Sui can put addresses on a deny list that stops them using that coin. After the May 2025 Cetus exploit, funds in two hacker accounts were frozen, and validators holding 90.9% of stake voted for a protocol upgrade to move them into a multisig wallet held in trust for affected users.

Is USDT issued natively on Sui?

Tether's own list of supported networks does not include Sui, while Circle lists Sui as a network with native USDC. Check which token contract you actually hold before assuming the issuer supports it.

How do I check a Sui address for AML risk?

Copy the public address, open one of the services listed above that supports Sui, and run the check. You never need a seed phrase or private key.

What does “Not verified” mean?

The service claims support somewhere — in marketing copy or a third-party page — but its own docs, pricing or FAQ do not list the network. Treat it as unknown.

Sources

  1. Sui Documentation (docs.sui.io) — SuiAddress (Sui GraphQL reference). Checked 4 Oct 2026.
  2. Sui Documentation (docs.sui.io) — Object Model. Checked 4 Oct 2026.
  3. Sui Documentation (docs.sui.io) — Module sui::coin. Checked 4 Oct 2026.
  4. Sui Documentation (docs.sui.io) — Coin Standard. Checked 4 Oct 2026.
  5. Sui Foundation — Response to the Cetus Incident - Onchain Community Vote (27 May 2025). Checked 4 Oct 2026.
  6. Elliptic — Cetus Protocol hacked for more than $200 million (22 May 2025). Checked 4 Oct 2026.
  7. Elliptic — Cetus Protocol hacked for more than $200 million (22 May 2025). Checked 4 Oct 2026.