惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Microsoft Security Blog
Microsoft Security Blog
WordPress大学
WordPress大学
Stack Overflow Blog
Stack Overflow Blog
D
DataBreaches.Net
罗磊的独立博客
博客园 - 司徒正美
Last Week in AI
Last Week in AI
The Cloudflare Blog
大猫的无限游戏
大猫的无限游戏
Microsoft Azure Blog
Microsoft Azure Blog
B
Blog RSS Feed
The GitHub Blog
The GitHub Blog
宝玉的分享
宝玉的分享
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
小众软件
小众软件
Jina AI
Jina AI
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
Hugging Face - Blog
Hugging Face - Blog
B
Blog
博客园 - 【当耐特】
V
V2EX
Apple Machine Learning Research
Apple Machine Learning Research
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
酷 壳 – CoolShell
酷 壳 – CoolShell

Chainalysis

US Sanctions Xinbi, Asia’s Multibillion-Dollar Cybercriminal Marketplace How The $320M Exploit of Liquid Network Went Down - Chainalysis Tracing Crypto in a Narcotics Investigation: FBI Charges Alleged Opioid Distributors - Chainalysis Chainalysis Supports HyperEVM with Automatic Token Support - Chainalysis FBI Seizes $560K in Crypto From Hamas Fundraising Network - Chainalysis On-Chain Taxable Activity - Chainalysis Operation Lighthouse: How Chainalysis Works to Disrupt CSAM Networks OFAC Targets Crypto-for-Oil Payments in Latest Iran Sanctions ML Has a Specific Role in Blockchain Intelligence - Chainalysis Understanding the FATF’s DeFi Report - Chainalysis Penlink Plugs Into Trusted Blockchain Data With Chainalysis - Chainalysis Violent Wrench Attacks Targeting Crypto Holders - Chainalysis Chainalysis Supports Cronos with Automatic Token Support - Chainalysis The 2026 World Cup On-Chain: $20 Billion in Crypto Flows Privacy Blockchains Explained for Compliance - Chainalysis OFAC Sanctions Hamas Facilitators - Chainalysis EU’s 21st Russia Sanctions Package Targets Crypto Platforms FATF 7th Targeted Update: What It Means for Crypto Compliance OFAC Sanctions Iran Central Bank Crypto Wallets, Freezing $131M in Stablecoins - Chainalysis “Stern” Ransomware Operator Sanctioned by EU Chainalysis Supports Stable with Automatic Token Support - Chainalysis Daubert Standard: How Chainalysis Reactor Met the Bar OFAC Sanctions 100+ ISIS-K Crypto Addresses Chainalysis Supports Robinhood Chain with Automatic Token Support An Ontology for Accountability: Defining What Data Quality Means in Blockchain Analytics - Chainalysis 10 Questions to Ask Your Blockchain Analytics Provider Sandwich Attack: How JaredfromSubway Lost $7.5M - Chainalysis OFAC Sanctions ISIS Financial Facilitators Brazil's Crypto Crime Challenge: How Global Money Laundering Networks Target Latin America's Largest Market Brazil's Crypto Crime Challenge: How Global Money Laundering Networks Target Latin America's Largest Market
Breadth, Depth, And Quality: Comparing Blockchain Analyti...
Chainalysis Team · 2026-07-07 · via Chainalysis

When compliance teams, regulators, or investigators evaluate blockchain analytics providers, the conversation almost always starts the same: How many services have you identified?

On the surface, it seems like the right question. More attributed entities, or clusters, should translate to broader coverage, and broader coverage should lead to more comprehensive intelligence. But that conclusion depends on a critical assumption: that the clusters themselves are accurate. In practice, some analytics firms do not uphold rigorous standards for their data, leading to inaccuracies.

As the first mover in blockchain intelligence, Chainalysis has spent more than a decade building a comprehensive map that connects pseudonymous blockchain addresses to real-world services and entities. This work involves three distinct steps:

  1. Structural — determining that separate addresses share the same key control
  2. Attribution — linking a group of addresses to a named entity
  3. Operator vs Beneficiary — demonstrating that the entity actually runs the wallet, and doesn’t just use it

These three analytical outcomes are often collapsed into the single term “cluster,” making it difficult to compare the quality of different providers’ data. This matters because if the data is wrong, a compliance professional or law enforcement investigator will waste time and resources chasing a false lead. The downstream effects can be even worse: a single incorrect attribution can discredit hundreds of related insights. Understanding those distinctions is critical, and we’ll explore them in more detail below.

The term “cluster” is too broad

The term “cluster” entered the blockchain analytics vocabulary over a decade ago, when Bitcoin was the only blockchain around. Researchers surmised that when multiple addresses appear as inputs in a single transaction, whoever signed that transaction must have controlled all of them. They called groups of addresses “clusters.” The term helped them define – and track – ownership onchain.

Today, that once-narrow word is broadly applied to any group of addresses believed to be jointly owned. It’s become a standard term of the analytics industry. The problem is that it conflates the three distinct claims above.

Consider an exchange. Structural analysis may identify thousands of addresses under common control. Attribution links those addresses to the specific exchange. Operator-beneficiary analysis determines those wallets are operated by the exchange itself and not a nested service or a customer. All three make up the “clustering” process, but they each represent a fundamentally different analytical claim requiring processes and standards.

Cluster count alone is meaningless

Because these claims are frequently combined into a single metric, cluster counts alone reveal very little about data quality. Organizing our thinking around these three distinct, standardized parts helps us ensure the accuracy of the clusters we create. A provider may excel at structural grouping but have weaker attribution standards. Another may accurately identify services but struggle to distinguish operators from users. Without understanding the standards supporting each claim, it is impossible to meaningfully compare two cluster datasets.

Separating these claims allows them to be evaluated independently, making it easier to assess the breadth, depth, and quality of any blockchain intelligence dataset.

A cluster built through rigorous, evidence-based analysis may look identical  — in the count — to one stitched together by a machine learning model. Both add “1” to the total number of clusters.

As a result, cluster count comparisons alone can reward the wrong behavior. Providers that apply looser grouping methods or accept weaker attribution evidence will naturally produce more clusters. Providers that maintain stricter standards and refuse to label a cluster until the evidence meets a high bar may produce fewer. By only asking for the cluster-count metric, the less rigorous provider might win.

This is why cluster count, while useful, should not be viewed in isolation. A high-quality blockchain analytics provider should demonstrate broad and deep coverage while also maintaining high standards for structural, attribution, and operator claims.

Questions every provider should be able to answer

Evaluating the claims behind a cluster count is critical to ensuring the success of any investigation or compliance program built on them. Here are questions any provider should be able to answer about any cluster it produces:

  • How were these addresses grouped? Is the method deterministic and reproducible, or probabilistic? Can it be audited?
  • What kind of evidence links this group to a named entity? Can the provider characterize the source, its independence, and its reliability?
  • Is the structural grouping independent of the attribution? If the label changes, does the grouping still hold?
  • Has the operator-beneficiary distinction been assessed? Is the named entity actually running this wallet, or is it a user of someone else’s infrastructure?

None of these questions require a provider to reveal proprietary methods. They require describing what kind of claim is being made and what evidence supports it. They break through the problem of non-standardized language. For example, a provider should be able to explain whether a cluster was created through deterministic ownership heuristics, with standalone attribution evidence, or operator analysis, and what evidence supports each conclusion.

The next time you’re evaluating blockchain analytics, don’t just ask “how many do you have?” Ask “how do you know?”

To learn more about Chainalysis’s data standards, read Defining The Cluster, our formal ontology for address analysis and intelligence claims. For more questions to ask your blockchain analytics provider about data quality, see our blog.

This website contains links to third-party sites that are not under the control of Chainalysis, Inc. or its affiliates (collectively “Chainalysis”). Access to such information does not imply association with, endorsement of, approval of, or recommendation by Chainalysis of the site or its operators, and Chainalysis is not responsible for the products, services, or other content hosted therein. 

This material is for informational purposes only, and is not intended to provide legal, tax, financial, or investment advice. Recipients should consult their own advisors before making these types of decisions. Chainalysis has no responsibility or liability for any decision made or any other acts or omissions in connection with Recipient’s use of this material.

Chainalysis does not guarantee or warrant the accuracy, completeness, timeliness, suitability or validity of the information in this report and will not be responsible for any claim attributable to errors, omissions, or other inaccuracies of any part of such material.