On May 4, 2026, on-chain investigator ZachXBT publicly accused the decentralized exchange (DEX) Tokenlon and its affiliated wallet platform imToken of processing a significant portion of their trading volume from illicit sources. The allegations were made in a direct reply to Tokenlon's promotional post about its ETH/USDT swap service.
ZachXBT's Allegations and Evidence ZachXBT stated that the majority of Tokenlon's volume originates from pig butchering scams, human trafficking, investment fraud, and Chinese underground marketplaces. He singled out Tokenlon co-founder Ben He, declaring that He “deserves to spend the rest of his life in prison.” ZachXBT announced plans to “initiate attacks” against both Tokenlon and imToken, framing it as an active investigation campaign. He also grouped Tokenlon alongside Butter Network, HiFiSwap, and Bridgers/SWFT as platforms that must be “aggressively targeted” for allegedly routing illegal fund flows.
Research from Merkle Science, CryptoForensic, and TIME magazine previously documented that between 57% and 60% of Tokenlon’s swaps from 2022 to 2023 were linked to scam-related addresses. The pattern described involves victim funds entering as ETH or USDC through Tokenlon and exiting as USDT or DAI, effectively obscuring the trail. ZachXBT confirmed this, noting that it is well documented in smaller compliance circles. One user shared that a friend’s mother lost 270 ETH to scammers who routed funds through Tokenlon, a pattern ZachXBT acknowledged as common.
Broader Implications for DeFi The investigation revealed that imToken, a popular mobile wallet without mandatory identity verification, and Tokenlon, a DEX offering peer-to-peer swaps, together create a frictionless pipeline for money laundering. ZachXBT tracked over $100 million in suspicious flows through these platforms in the past year alone. Blockchain security firms like Chainalysis have reported record DeFi-related illicit activity in 2024, emphasizing that platforms like Tokenlon are particularly vulnerable due to a lack of transaction monitoring.
Regulatory scrutiny is intensifying. The European Union’s Markets in Crypto-Assets (MiCA) regulation, effective 2025, mandates stricter AML requirements for DeFi platforms, but enforcement remains challenging. Industry experts warn that this could force platforms like imToken and Tokenlon to implement KYC measures or face legal consequences, potentially splitting the DeFi community between those prioritizing privacy versus compliance.
Market Impact Platforms flagged by ZachXBT have historically faced rapid liquidity drops and token devaluations. Tokenlon’s LON token and imToken’s broader ecosystem could experience selling pressure. Several exchanges have already blacklisted addresses identified by ZachXBT. Developers building on or integrating with Tokenlon infrastructure now face serious compliance red flags, with growing regulatory exposure as U.S. and EU enforcement agencies increase their focus on DeFi platforms enabling financial crime.
