ChainwatchCrypto—blockchain intelligence and investigative operationsAll systems operational
Wallet Intelligence

Everything one address did, in one place.

A wallet profile collects activity, counterparties, exposure, attribution, evidence and investigation status behind a single address — so an analyst stops assembling the same picture by hand for the fourth time.

Per-address profileCounterparty viewEvidence trail
Wallet profilesample analysis Sample analysis
Address
0x4f2c8d1a77be3095cc41ff20be6d2a5b3e9ac2
Ethereum · mainnet Risk 72 / 100 · Elevated In case CW-20481
First seen
2021-06-14
Last activity
4 min ago
Transactions
1,284
Volume
$2.84M
Counterparties
43
Exposure
12%
Known services
3
Cluster
#4417

What is crypto wallet intelligence?

Wallet intelligence collects everything one address has done into a single view: balances, counterparties, exposure, clustering and behaviour over time. Two addresses are treated as one wallet only where a stated heuristic supports it. CoinJoin and similar privacy constructions defeat those heuristics, and the platform reports that rather than guessing.

When two addresses are one walletand when they are notCLUSTERING
Cluster resolvesHeuristic fails
Sections

Eight tabs on one wallet.

Overview

Identity of the address on-chain: network, first and last activity, balance history and current status.

Transactions

Every observed transfer, filterable by asset, direction, value and counterparty category.

Fund flow

The directed graph out of and into this address, expandable hop by hop.

Counterparties

Who this address transacts with, ranked by value and frequency, with each counterparty's own risk.

Risk

The score, its decomposition and its history — including what moved it and when.

Exposure

Direct and indirect exposure by category, with the hop limit stated on every figure.

Evidence

Artefacts attached to this address within a case: exports, screenshots, correspondence.

Notes

Investigator notes, timestamped and attributed, kept separate from asserted fact.

Clustering

When two addresses are treated as one wallet.

Clustering is a heuristic, not a fact. The platform records which heuristic produced each grouping so a reviewer can weigh it.

HeuristicApplies toConfidence
Common input ownershipBitcoin and other UTXO chainsStrong where inputs are genuinely co-spent; weakened by CoinJoin and similar constructions.
Change address detectionUTXO chainsModerate. Heuristic by nature and explicitly flagged as such.
Deposit address reuseAccount chainsStrong where a service assigns per-customer deposit addresses.
Behavioural co-occurrenceAll chainsWeak on its own. Used to raise a hypothesis, never to assert a link.
Clustering is labelled, always

A cluster in this platform is never presented as a fact about ownership. It is presented as a grouping produced by a named heuristic, with the confidence that heuristic carries.

Not from the chain alone. Public ledgers record addresses, not people. Where an address belongs to a service that identifies its customers, that service — not us — holds the identity, and obtaining it is a legal process rather than an analytical one.

It means exactly what it says: no source and evidence trail exists that would justify naming an entity. We would rather show 'unattributed' than a plausible guess that ends up in a filing.

Yes. Continued monitoring is one of the documented next steps at the end of a case, and it is often the most useful one when funds are sitting still.

Profile the address in your case.

Bring the address or the transaction hash. We will tell you what it shows and what it does not.