Chainalysis has generated 14,300 investigative leads after tracing 29,120 cryptocurrency addresses and digital identifiers linked to more than 100 child sexual abuse material (CSAM) platforms, forums and distribution networks during Operation Lighthouse, a multi-day investigative sprint held at the National Cyber-Forensics and Training Alliance in New York.
The operation identified more than 7,700 suspect accounts across exchanges and payment platforms, including 16 accounts linked to registered sex offenders, while suspects were uncovered in 125 countries. Participating private-sector firms included Binance, Coinbase and Block, alongside the Australian Federal Police, Royal Canadian Mounted Police, the United Kingdom’s National Crime Agency, Europol and the Internet Watch Foundation.
The resulting leads were shared across 11 cryptocurrency exchanges and payment services for further investigation and possible legal action. Binance Senior Program Manager for Anti-Child Sexual Exploitation Gavin Sather said the sprint showed how on-chain intelligence can enable quick collective responses, adding that blockchain transparency makes it difficult for offenders to hide financial activity for long. Binance separately reported spending about $300 million annually on compliance and employed nearly 1,500 people in related roles.
Chainalysis research published in February had found that cryptocurrency flows connected with suspected human trafficking services increased 85% during 2025. CSAM-related transfers in that dataset were smaller than some other categories, with an average payment below $100. One analyzed platform had used more than 5,800 cryptocurrency addresses and received over $530,000 since July 2022. Bitcoin had previously been common across identified CSAM services, while some operators had increasingly used privacy-focused Monero to obscure proceeds. Chainalysis also identified instant exchangers without know-your-customer requirements as part of the laundering process.
Lawmakers such as U.S. Senators Elizabeth Warren and Bill Cassidy had previously pressed federal agencies about cryptocurrency transactions connected with CSAM, citing concerns about privacy coins and mixers. Operation Lighthouse will continue moving through investigative channels as authorities and participating companies develop cases and pursue account-level disruptions.
