What is blockchain address attribution and why does it matter?

Blockchain address attribution is the process of assigning a verified identity to on-chain addresses, linking them to the entity that controls them. It is essential for compliance, transaction monitoring, and investigations in digital assets. Chainlabs provides attribution supported by verifiable source evidence, enabling organizations to assess counterparty risk with confidence.

How many blockchains does Chainlabs support?

Chainlabs currently covers 30+ blockchain networks, including Bitcoin, Ethereum, and other major chains. Coverage expands continuously as new blockchains gain adoption and client requirements evolve.

What makes Chainlabs' methodology defensible?

Our methodology combines human intelligence, advanced algorithms, and blockchain forensics. Every label includes supporting evidence: provenance documentation, screenshots, URLs, and wallet addresses. This is specifically designed to support compliance and investigative workflows that require evidence trails. Attributions are verified before publication and represent best-available intelligence based on observable evidence at a given point in time. This includes documented provenance and evidence trails, making them audit-ready and suitable for regulatory compliance. We maintain rigorous validation processes to ensure the highest standards of accuracy and defensibility.

How often is the wallet label dataset updated?

Chainlabs identifies and labels 300+ new entities monthly. Blockchain ecosystems change continuously as new services launch, addresses rotate, and risk typologies emerge. Continuous updates prevent coverage decay. Historical data is also maintained and reviewed and as new information becomes available, existing labels may be updated or revised.

Who uses Chainlabs' wallet intelligence?

9 in 10 Blockchain Compliance Firms rely on Chainlabs. End users include: Compliance platforms and transaction monitoring providers, Blockchain analytics companies, Cryptocurrency exchange compliance teams, Government investigative and regulatory agencies, and Financial institutions operating in digital assets.

How can I integrate Chainlabs data into my platform?

Chainlabs delivers flexible and fast intelligence via: Real-time: REST APIs and data feeds. Batch: Google BigQuery, Cloud Tables, and structured datasets.

What type of categories do you cover?

Chainlabs covers more than 70 risk and entity categories across the digital asset ecosystem, including regional and centralized exchanges, ATMs, OTC brokers, and VASPs; DeFi protocols, yield farms, and decentralized exchanges; darknet markets, mixers, and privacy services; scams, exploits, ransomware, and malware; sanctioned entities and terrorism financing; gambling services, merchants, and payment processors; as well as key infrastructure such as bridges, custodians, and stablecoin issuers. Coverage continuously expands based on client requirements and emerging risk typologies, with new categories added as the ecosystem evolves.

The Grey Corridor — Chainlabs

March 3 2026

Recent financial restrictions in the Middle East follow a pattern established by earlier measures against sanctioned jurisdictions. The 2012 removal of Iranian banks from SWIFT set a template for coordinated exclusion from global financial infrastructure. Since that point, the Financial Action Task Force has extended its guidance to virtual asset service providers, focusing on risks associated with sanctions evasion and related illicit finance typologies.

Across the dataset, as formal financial channels narrow, higher-risk activity shifts into informal and opaque networks. Iranian entities, excluded from correspondent banking, SWIFT, and formal remittance systems, now rely on alternative mechanisms that operate outside established compliance controls.

Chainlabs' address-attribution and entity-clustering data indicate that hundreds of Iranian over-the-counter entities are operating across the Middle East, Europe, and Asia. These entities maintain links to global cryptocurrency exchanges. Some access centralised exchanges such as KuCoin and CoinEx directly; others transact through intermediaries. In both cases, OTC actors form part of a broader exchange-connected ecosystem that standard datasets do not capture.

Direct and indirect relationships between OTC entities and exchanges create persistent compliance blind spots. The gap often emerges at onboarding. Exchange KYC procedures typically identify the immediate counterparty but do not detect beneficial owners or affiliated entities behind OTC structures. Intermediary operators use lightly verified corporate accounts, generic documentation, or jurisdictional fragmentation to obscure both the origin of funds and the nature of account relationships.

Exchange-level controls are circumvented through incomplete identity verification, limited source-of-funds assessment, and insufficient monitoring of related accounts. Identifying these vulnerabilities enables compliance and risk teams to strengthen onboarding, apply enhanced due diligence to high-risk intermediaries, and implement more adaptive transaction monitoring. These dynamics shift as regional conflicts intensify and sanctions are imposed and lifted. Actors using these channels adapt their methods and redirect financial flows in response.

Implications for Compliance Teams

Exchange-level transaction monitoring does not capture the full scope of activity within the OTC layer. Actors seeking to evade controls use this less visible segment to access global liquidity outside established compliance frameworks. Effective compliance requires attribution methods that extend beyond wallet labelling.

Systematic mapping of relationships among entities, intermediaries, and exchange infrastructure, supported by verifiable source evidence, enables compliance teams to assess anonymous crypto activity before formal sanctions designations are issued. The dataset covers hundreds of cash-desk operations worldwide, each linked to exchange infrastructure and supported by provenance data. We deliver this intelligence via API, data feeds, and cloud platforms, integrating it directly into compliance, analytics, and risk systems. This helps organisations strengthen risk assessment and investigative workflows with reliable, continuously refreshed data.

Chainlabs Know who is behind crypto flows