Attribution & Clustering

25 notes

Turning addresses into clusters and clusters into real-world identities, with explicit confidence.

Jump to any note in this section:

Concepts

Note
Wallet Clustering and Heuristics

Principles

Note
Never Trust a Single Source of Attribution

Frameworks

Note
Attribution Confidence Levels

Workflows

Note
Attribution Procedure (Seven Steps)
Crypto Address Attribution Process

Tactics

Note
Address Clustering (Common-Input-Ownership Heuristic)
Arkham for Attribution and Visualization
Change-Address Heuristics (UTXO Analysis)
Combined Timelines: Turning Tracing into Attribution
Exchange / VASP KYC Correlation
Gas-Funding Analysis to Cluster Controlled Addresses
Illicit vs Licit Transaction Behaviour Profile
View a Wallet’s Exposure with impersonator.xyz
Wallet Fingerprinting from Transaction Parameters

Checklists

Note
Advanced Attribution Techniques
Bitcoin UTXO Clustering Heuristics
Clustering Exchange Accounts From Subpoenaed Records
Verify a Landmark Address Before You Trust It

Cautions

Note
Address Labels Are Chain-Specific
Address Poisoning Attack
Change-Address Heuristic Failure Modes
Confirmation Bias and Misleading On-Chain Data
Self-Verified Contract Names Can Forge a Trace-Stopping Label

Reference

Note
Attribution Indicator Categories and Relative Evidentiary Value
VASP Types and What Each Interaction Means

Last updated on September 23, 2026

THORChain Memo Grammar on Bitcoin Wallet Clustering and Heuristics