As part of the [REDACTED] hackathon hosted by Helius Labs, we sponsored a $15,000 bounty to help map out money laundering routes in Solana.

The aim was simple: “How would you launder $1M through Solana without getting caught?”

In the aftermath of any exploit, it is usually a race against time to track the stolen funds and prevent the bad actors from cashing out. But, as displayed by the $1.5B Bybit hack, the process is chaotic and time-consuming – from tracking the complicated multi-hop transactions hackers make, to figuring out when one of those destination addresses is an offramp. 

Every hack eventually ends in an exit. By mapping the routes money could take – through mixers, bridges, CEXs, decentralized swappers, and off-ramps – we're giving investigators, compliance teams, and protocols a head start. This is how we build resilient infrastructure: not just by securing the front doors, but by watching what happens after the breach.

Now, we’re proud to announce the three bounty winners who helped us move forward the intelligence layer of Solana, with real intelligence, actionable data, and new insights.

1st Place ($11,000): Agent Aksusarya

Agent Aksusarya delivered a well-researched, methodical map of laundering techniques that spanned P2P platforms, OTC flows, retail fintech on-ramps, and bridges. He also labeled thousands of addresses, almost a thousand of which were tied to real off-ramping infrastructure  – tools often used legitimately, but vulnerable to abuse by bad actors acting quickly.

His submission was clean, comprehensive, and immediately usable within Range's monitoring systems.

2nd Place ($3,000): Ray

Ray’s submission focused on surfacing how smaller-volume laundering can fly under the radar, and identified some novel techniques bad actors may use.

The underutilized laundering vectors that Ray uncovered haven’t yet been widely exploited…yet. This type of forward-looking insight is exactly what we hoped this bounty would surface.

3rd Place ($1,000): Emmanuel

Emmanuel built a clear report identifying key off-ramping routes, including custodial swaps and cross-ecosystem bridges. Their work highlighted how the platforms that make crypto more accessible can also quietly exit significant volumes, if monitoring isn’t in place.

He also indicated several counter-measures that DeFi protocols or CEXs could implement to detect and stop money laundering, including tips on detecting multi-wallet rings, cross-industry collaboration and user-level protection implemented in wallet apps.

What’s Next

Huge thanks to Helius Labs for organizing the [REDACTED] hackathon and to Superteam Earn for powering the hackathon. Both teams helped us turn a bold idea into a smooth, community-powered intelligence exercise.

The insights and address lists submitted will be integrated into Range’s products and tools in the coming weeks. This will allow all teams in Solana to benefit from the work, build their own alerting pipelines, and track laundering flows more effectively.

This bounty was part of our larger commitment to strengthening Solana’s security infrastructure. Over the past year, we’ve partnered with the Solana Foundation and Squads Protocol to bring full-stack monitoring and intelligence to the ecosystem. Our capabilities include:

• Solana Transaction Security Standard: A set of APIs that help you simulate a transaction, analyze changes to your wallet balance, detect interaction with high-risk wallets, and more.

• Advanced Multisig Security for Solana: Going beyond just onchain security for your multisig, with device protections, opsec training, and proactive monitoring of your assets. 

• Bridge Flow Intelligence: Detect asset movements and risk patterns across nine different interoperability protocols with our cross-chain explorer, and perform forensic flow-of-funds analysis using Range Trail

• Automated monitoring and alerts: Integrate security into your stack without slowing down your team, by setting up monitoring for onchain events and flows that matter to you.

If you're building an app, wallet or have a multisig on Solana, contact us to see how Range can help protect your and your users’ assets.