Wallet clustering
Heuristic + ML
Groups wallets that share operational patterns or ownership.
Ethereum Mainnet • Southeast Asia
Wallet Investigator for protocol security teams
Map wallet relationships, clustering, and transaction flows to uncover counterparties and hidden networks. Focus on smart contract security, counterparty risk, and operational safeguards for treasuries and protocols. Provide regulators and auditors with verifiable data on asset flows, ownership, and upgrade governance. Indonesia, Vietnam, and Singapore drive retail and institutional demand with strong gaming ecosystems.
- Graph visualizations connecting wallets via token transfers, LP shares, and governance activity.
- Entity tagging with metadata (team, treasury, exchange, MEV, mixers).
- Flow timelines to trace funds across chains and protocols.
- Proactively identifying malicious approvals and upgrade patterns is tedious.
Key metrics
Case exports
GraphML, JSON, PDF
Share investigation results with stakeholders or regulators.
Ethereum Mainnet profile
Deepest liquidity and broadest institutional adoption.
Base fees typically 15–40 gwei outside of NFT drops; priority fees ~1–2 gwei.
Unique insights
- Ethereum Mainnet: Base fees typically 15–40 gwei outside of NFT drops; priority fees ~1–2 gwei. Pair this with wallet investigator to continuous monitoring of allowance and upgrade activity with time-stamped notes..
- Southeast Asia: MAS and other regulators push for strict risk disclosures and capital reserve reporting. Align risk & security analysts workflows with fewer false positives in alerting systems..
- For protocol security teams, emphasize Combines automated clustering with analyst-friendly manual tagging. and track Completion of audit evidence requests without remediation findings. weekly.
Why teams rely on this tool
Core capabilities
Graph visualizations connecting wallets via token transfers, LP shares, and governance activity. Entity tagging with metadata (team, treasury, exchange, MEV, mixers). Flow timelines to trace funds across chains and protocols.
Audience fit
Proactively identifying malicious approvals and upgrade patterns is tedious. Fewer false positives in alerting systems.
Ethereum Mainnet focus
Uniswap, Lido, EigenLayer, and Aave drive high-value flow and require precise gas timing. Continuous monitoring of allowance and upgrade activity with time-stamped notes.
Operational playbook
- 1Seed the graph with addresses or transactions of interest.
- 2Expand relationships, apply entity tags, and flag suspicious flows.
- 3Export investigation packs or synchronize with compliance tickets.
Use cases
Continuous monitoring of allowance and upgrade activity with time-stamped notes. Partnerships rely on community activations and localized education events.
Automated transaction decoding for SAR/STR preparation. Partnerships rely on community activations and localized education events.
Cross-referencing CEX proof-of-reserve feeds with on-chain holdings. Partnerships rely on community activations and localized education events.
Proof points
- Security teams use the tool to triage exploits and track stolen funds.
- Compliance analysts gather intelligence before onboarding institutional clients.
- DAO contributors investigate grant usage and treasury distributions.
ChainUnified tools that pair well
Related pages
Frequently asked questions
Can I import existing clustering data?
Yes. Upload CSV or JSON cluster definitions to align with internal intelligence.
Do you integrate with chain analytics providers?
We overlay public attribution datasets and allow custom enrichment via API.
How are large graphs handled?
Graph rendering dynamically loads segments to keep performance stable even with thousands of nodes.