ChipMixer was a cryptocurrency mixing service, not malware. Operating primarily as a Tor hidden service, it accepted bitcoin deposits and commingled them with other customers' funds to make transaction tracing more difficult, while collecting no customer identity information. U.S. and German authorities dismantled its infrastructure in March 2023 after alleging that it had processed more than $3 billion connected to ransomware, darknet markets, fraud, cryptocurrency theft, and state-sponsored activity.