Entity directory
Clusters group many addresses under one operating entity, so an investigation follows the entity rather than an address. Where that entity is a service, its AML posture is profiled: the same exposure means different things through a licensed custodian and a no-KYC venue.
85 cluster(s)
| Entity | Category | Attribution | On-chain party | Chains | Known addresses |
|---|---|---|---|---|---|
| Crescent Finance Network
crescent |
Terrorism financing
severity 10/10 |
moderate
corroborated open-source intelligence |
actor | BTC, ETH | 2 |
| Damascus Exchange House
damascus-eh |
Sanctioned entity or designated address
severity 10/10 |
moderate
corroborated open-source intelligence |
actor | BTC | 1 |
| Dark Harbour Hosting
dark-harbour |
Child sexual abuse material
severity 10/10 |
moderate
corroborated open-source intelligence |
actor | BTC | 1 |
| Minsk Logistics Sanctioned
minsk-log |
Sanctioned entity or designated address
severity 10/10 |
moderate
corroborated open-source intelligence |
actor | ETH | 1 |
| Northline Procurement
northline |
Terrorism financing
severity 10/10 |
moderate
corroborated open-source intelligence |
actor | ETH | 1 |
| Pyongyang Trade Office
pto |
Sanctioned entity or designated address
severity 10/10 |
moderate
corroborated open-source intelligence |
actor | ETH | 1 |
| Ronin Bridge Exploiter
lazarus |
Sanctioned entity or designated address
severity 10/10 |
high
law enforcement record or operator confirmation |
actor | ETH | 1 |
| Sanctioned Bank of Tehran
sbt |
Sanctioned entity or designated address
severity 10/10 |
moderate
corroborated open-source intelligence |
actor | ETH, BTC | 2 |
| Tornado Cash Router
tornado-cash |
Sanctioned entity or designated address
severity 10/10 |
high
law enforcement record or operator confirmation |
actor | ETH | 3 |
| Volga Petro Sanctions Target
volga-petro |
Sanctioned entity or designated address
severity 10/10 |
moderate
corroborated open-source intelligence |
actor | ETH, BTC | 2 |
| Abyss Market
abyss |
Darknet marketplace
severity 9/10 |
moderate
corroborated open-source intelligence |
actor | BTC | 1 |
| BlackVault Ransomware
blackvault |
Ransomware operator or affiliate
severity 9/10 |
moderate
corroborated open-source intelligence |
actor | BTC | 1 |
| CryptoLock Affiliate 7
cryptolock |
Ransomware operator or affiliate
severity 9/10 |
moderate
corroborated open-source intelligence |
actor | ETH | 1 |
| Hydra Bazaar
hydra-bazaar |
Darknet marketplace
severity 9/10 |
moderate
corroborated open-source intelligence |
actor | BTC, ETH | 2 |
| LockGrid Ransomware
lockgrid |
Ransomware operator or affiliate
severity 9/10 |
moderate
corroborated open-source intelligence |
actor | BTC, ETH | 2 |
| Nightshade Market
nightshade |
Darknet marketplace
severity 9/10 |
moderate
corroborated open-source intelligence |
actor | ETH | 1 |
| Sable Group Extortion
sable |
Ransomware operator or affiliate
severity 9/10 |
moderate
corroborated open-source intelligence |
actor | ETH, BTC | 2 |
| Silk Route Market
silk-route |
Darknet marketplace
severity 9/10 |
moderate
corroborated open-source intelligence |
actor | BTC | 1 |
| Blendr Tumbler
blendr |
Mixing or anonymising service
severity 8/10 |
moderate
corroborated open-source intelligence |
non custodial | BTC | 1 |
| CoinShuffle Service
coinshuffle |
Mixing or anonymising service
severity 8/10 |
moderate
corroborated open-source intelligence |
non custodial | BTC | 1 |
| Kestrel Exchange Hack
kestrel-hack |
Proceeds of hacks and exploits
severity 8/10 |
moderate
corroborated open-source intelligence |
actor | BTC, ETH | 2 |
| Meridian Bridge Exploiter
meridian-hack |
Proceeds of hacks and exploits
severity 8/10 |
moderate
corroborated open-source intelligence |
actor | ETH, BASE | 2 |
| Nordwind Mixer
nordwind |
Mixing or anonymising service
severity 8/10 |
moderate
corroborated open-source intelligence |
non custodial | ETH, BTC | 2 |
| Obsidian Pool
obsidian |
Mixing or anonymising service
severity 8/10 |
moderate
corroborated open-source intelligence |
non custodial | ETH, BASE | 2 |
| Solstice DEX Exploiter
solstice-hack |
Proceeds of hacks and exploits
severity 8/10 |
moderate
corroborated open-source intelligence |
actor | ETH | 1 |
| Vault9 Drainer
vault9 |
Proceeds of hacks and exploits
severity 8/10 |
moderate
corroborated open-source intelligence |
actor | ETH, OPTIMISM | 2 |
| Bluepeak Romance Scam
bluepeak |
Scam, phishing or investment fraud
severity 7/10 |
moderate
corroborated open-source intelligence |
actor | BTC, ETH | 2 |
| CardVault Fraud Shop
cardvault |
Fraud shop / stolen data vendor
severity 7/10 |
moderate
corroborated open-source intelligence |
actor | BTC | 1 |
| DocForge Vendor
docforge |
Fraud shop / stolen data vendor
severity 7/10 |
moderate
corroborated open-source intelligence |
actor | BTC | 1 |
| GoldenReturn Investment Scam
goldenreturn |
Scam, phishing or investment fraud
severity 7/10 |
moderate
corroborated open-source intelligence |
actor | ETH | 1 |
| IdentityBazaar
identitybazaar |
Fraud shop / stolen data vendor
severity 7/10 |
moderate
corroborated open-source intelligence |
actor | ETH | 1 |
| MetaAirdrop Phishing Kit
metaairdrop |
Scam, phishing or investment fraud
severity 7/10 |
moderate
corroborated open-source intelligence |
actor | ETH | 1 |
| Pig Butchering Cluster 12
pb-12 |
Scam, phishing or investment fraud
severity 7/10 |
moderate
corroborated open-source intelligence |
actor | ETH, BTC | 2 |
| SwiftYield Ponzi
swiftyield |
Scam, phishing or investment fraud
severity 7/10 |
moderate
corroborated open-source intelligence |
actor | ETH, BASE | 2 |
| Wallet Drainer as a Service
drainer-saas |
Scam, phishing or investment fraud
severity 7/10 |
moderate
corroborated open-source intelligence |
actor | ETH, BASE | 2 |
| AnonTrade Desk
anontrade |
Exchange with weak or absent KYC
severity 6/10 |
moderate
corroborated open-source intelligence |
custodial | ETH | 1 |
| Bazaar Exchange
bazaar-ex |
Exchange with weak or absent KYC
severity 6/10 |
moderate
corroborated open-source intelligence |
custodial | BTC, ETH | 2 |
| FastSwap No-KYC
fastswap |
Exchange with weak or absent KYC
severity 6/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BTC | 2 |
| Kiosk Cash Exchange
kiosk-cash |
Exchange with weak or absent KYC
severity 6/10 |
moderate
corroborated open-source intelligence |
custodial | BTC | 1 |
| Sunset Swap
sunset-swap |
Exchange with weak or absent KYC
severity 6/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, OPTIMISM | 2 |
| DiceStorm
dicestorm |
Gambling or betting service
severity 5/10 |
moderate
corroborated open-source intelligence |
custodial | ETH | 1 |
| LocalHands P2P
localhands |
Unlicensed peer-to-peer broker
severity 5/10 |
moderate
corroborated open-source intelligence |
brokered | BTC, ETH | 2 |
| LuckyChain Betting
luckychain |
Gambling or betting service
severity 5/10 |
moderate
corroborated open-source intelligence |
custodial | BASE, ETH | 2 |
| RollHigh Casino
rollhigh |
Gambling or betting service
severity 5/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BTC | 2 |
| SportsEdge Book
sportsedge |
Gambling or betting service
severity 5/10 |
moderate
corroborated open-source intelligence |
custodial | ETH | 1 |
| StreetSwap Broker
streetswap |
Unlicensed peer-to-peer broker
severity 5/10 |
moderate
corroborated open-source intelligence |
brokered | BTC | 1 |
| Telegram OTC Desk 44
otc-44 |
Unlicensed peer-to-peer broker
severity 5/10 |
moderate
corroborated open-source intelligence |
brokered | ETH | 1 |
| Anyswap Relay
anyswap-relay |
Cross-chain bridge
severity 3/10 |
moderate
corroborated open-source intelligence |
non custodial | ETH, BASE | 2 |
| Base Bridge
base-bridge |
Cross-chain bridge
severity 3/10 |
high
law enforcement record or operator confirmation |
non custodial | ETH | 1 |
| Helix Bridge
helix-bridge |
Cross-chain bridge
severity 3/10 |
moderate
corroborated open-source intelligence |
non custodial | ETH, BASE, OPTIMISM | 3 |
| Optimism Gateway
optimism-bridge |
Cross-chain bridge
severity 3/10 |
high
law enforcement record or operator confirmation |
non custodial | ETH | 1 |
| Portal Cross-Chain
portal |
Cross-chain bridge
severity 3/10 |
moderate
corroborated open-source intelligence |
non custodial | ETH, BTC, BASE | 3 |
| Wormlink Bridge
wormlink |
Cross-chain bridge
severity 3/10 |
moderate
corroborated open-source intelligence |
non custodial | ETH, OPTIMISM | 2 |
| AaveLike Lending
aavelike |
Decentralised finance protocol
severity 2/10 |
moderate
corroborated open-source intelligence |
non custodial | ETH, OPTIMISM | 2 |
| CurveLike StableSwap
curvelike |
Decentralised finance protocol
severity 2/10 |
moderate
corroborated open-source intelligence |
non custodial | ETH | 1 |
| GMXLike Perps
gmxlike |
Decentralised finance protocol
severity 2/10 |
moderate
corroborated open-source intelligence |
non custodial | OPTIMISM, ETH | 2 |
| LidoLike Staking
lidolike |
Decentralised finance protocol
severity 2/10 |
moderate
corroborated open-source intelligence |
non custodial | ETH | 1 |
| SushiLike Router
sushilike |
Decentralised finance protocol
severity 2/10 |
moderate
corroborated open-source intelligence |
non custodial | ETH, BASE | 2 |
| Uniswap V2 Router
uniswap |
Decentralised finance protocol
severity 2/10 |
high
law enforcement record or operator confirmation |
non custodial | ETH | 2 |
| Alpine Digital Exchange
alpine-digital |
Regulated exchange or VASP
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BTC | 2 |
| Baltic Exchange OU
baltic-ex |
Regulated exchange or VASP
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH | 1 |
| Binance Hot Wallet 14
binance |
Regulated exchange or VASP
severity 1/10 |
high
law enforcement record or operator confirmation |
custodial | ETH, BTC | 3 |
| Bitfinex Hot Wallet
bitfinex |
Regulated exchange or VASP
severity 1/10 |
high
law enforcement record or operator confirmation |
custodial | ETH, BTC | 2 |
| CloudHost Billing
cloudhost |
Merchant or payment processor
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH | 1 |
| Ethereum Foundation
ethereum-foundation |
Regulated custodian
severity 1/10 |
high
law enforcement record or operator confirmation |
custodial | ETH | 1 |
| Freight Settlement Co
freight-settle |
Merchant or payment processor
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BTC | 2 |
| Gulf Assets DMCC
gulf-assets |
Regulated exchange or VASP
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BTC | 2 |
| Helvetia Vault AG
helvetia-vault |
Regulated custodian
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BTC | 2 |
| Iron Peak Mining Pool
iron-peak |
Mining pool
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | BTC | 1 |
| Kraken Hot Wallet
kraken |
Regulated exchange or VASP
severity 1/10 |
high
law enforcement record or operator confirmation |
custodial | ETH | 1 |
| Liberty Custody Trust
liberty-custody |
Regulated custodian
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BTC | 2 |
| Luxembourg Digital SA
lux-digital |
Regulated exchange or VASP
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH | 1 |
| Marina Bay Digital
marina-bay |
Regulated exchange or VASP
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BASE | 2 |
| Meridien Bourse
meridien |
Regulated exchange or VASP
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH | 1 |
| Nordic Hydro Mining
nordic-hydro |
Mining pool
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | BTC, ETH | 2 |
| Northern Star Exchange
northern-star |
Regulated exchange or VASP
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BTC | 2 |
| PayStream Processor
paystream |
Merchant or payment processor
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BTC | 2 |
| Rheinland Kustodie
rheinland |
Regulated custodian
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH | 1 |
| Sakura Coin KK
sakura-coin |
Regulated exchange or VASP
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BTC | 2 |
| ShopChain Gateway
shopchain |
Merchant or payment processor
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BASE | 2 |
| Thames Crypto Ltd
thames-crypto |
Regulated exchange or VASP
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BTC | 2 |
| TravelPay Crypto
travelpay |
Merchant or payment processor
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH | 1 |
| USDC Token Contract
circle |
Merchant or payment processor
severity 1/10 |
high
law enforcement record or operator confirmation |
custodial | ETH | 1 |
| Vilnius Digital UAB
vilnius-digital |
Regulated exchange or VASP
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | ETH, BTC | 2 |
| Yangtze Hash Pool
yangtze-hash |
Mining pool
severity 1/10 |
moderate
corroborated open-source intelligence |
custodial | BTC | 1 |
Public labels are documented addresses. Synthetic seed rows exist for unit tests. Unlabelled counterparties stay unknown.