Skip to content

Wallet check

Check who a wallet has dealt with.

Paste an address. We read its latest transactions on up to 12 networks, check every direct counterparty against public lists and rate the risk out of 100.

  • Sanctions, attributed hacks, mixers and privacy protocols, counterparty by counterparty
  • A score you can read: what drives it, in which direction and for what share
  • Free with an account, and the address is never stored

Free account, no credit card. Your address waits in this browser tab: once you're in, open the wallet check from the app menu and it runs straight away.

Already have an account? Sign in

The address never appears in a page address: it waits in this browser tab, then public block explorers are queried to read its history. It is never stored.

What the analysis checks

Every direct counterparty of the address, on every network where it is active.

Sanctions

Up to Critical

The OFAC SDN list of the U.S. Treasury, issue of 28 Oct 2026: 1,011 addresses checked, with their sanctions programs and the date of the OFAC entry they belong to. Entities are named, private persons never.

Stolen funds (Bybit)

Up to Critical

51 addresses the FBI ties to the Bybit hack, from its public notice I-022625-PSA.

Mixers

Up to High

90 Tornado Cash pool and contract addresses, in both directions. OFAC lifted its sanctions on 21 Mar 2025: they count as a mixer, not as sanctions.

Privacy protocols

Up to Medium

16 Railgun contracts, built to hide where funds come from. They weigh less than a mixer.

Exposure by category

The share of value received and sent for each category of counterparty, at current prices, turned into a score out of 100.

Known counterparties

275 DeFi and bridge contracts and 230 Binance reserve addresses are recognised, so the unknown counterparties stand out.

12 networks

  • Ethereum
  • Arbitrum
  • Base
  • Polygon
  • Optimism
  • Unichain
  • Avalanche
  • Scroll
  • World Chain
  • Soneium
  • Bitcoin
  • Solana

An address is read on every network of its family: EVM, Bitcoin or Solana. Tron addresses are checked against the lists only.

A sample report

A fictitious wallet, analysed by the same engine as yours. Its flagged counterparties are real addresses from the lists, the others and the transactions are invented, and prices are frozen.

Wallet risk report

Address analysed
0x6f65d9d651a08ae0a1f8975dd534bddce9be1139

EVM

Fictitious example

Invented wallet and transactions, flagged counterparties from the real lists, frozen prices.

Risk score

64 out of 100
High risk

5.7% of the value received comes from counterparties in the Mixer category (Tornado Cash).

Alerts
2
Counterparties
10
Active networks
3

Alerts

2

  • Mixer

    Funds received · Tornado Cash

    High risk
    Share
    5.7% of the value received
    Value
    $900
    Movements
    3
    Counterparties
    1
    Last seen
    15 Oct 2026

    OFAC lifted its sanctions on Tornado Cash on 21 Mar 2025: its contracts count as a mixer, not as sanctions.

  • Sanctions

    Dust received · Lazarus Group

    Low risk
    Share
    under 0.1% of the value received
    Value
    $0.36
    Movements
    1
    Counterparties
    1
    Last seen
    20 Oct 2026
    Sanctions programs
    DPRK3
    OFAC entry created on
    13 Sep 2019

    Less than $25 received and nothing sent back: dusting, a weak signal that is never critical.

Exposure by category

Where the value received comes from and where the value sent goes, by category of direct counterparty, at current prices.

Received

Total $15,680

  • Sanctions under 0.1%$0.36

    Movements: 1 · counterparties: 1

  • Mixer 5.7%$900

    Movements: 3 · counterparties: 1

  • DeFi 23%$3,580

    Movements: 1 · counterparties: 1

  • Exchange 48%$7,500

    Movements: 1 · counterparties: 1

  • Unidentified 24%$3,700

    Movements: 2 · counterparties: 2

Sent

Total $8,310

  • Bridge 12%$1,000

    Movements: 1 · counterparties: 1

  • DeFi 67%$5,600

    Movements: 2 · counterparties: 2

  • Unidentified 21%$1,710

    Movements: 2 · counterparties: 2

Identification

This address

On none of the lists.

Identified counterparties

77%

77% of the volume involves a counterparty the lists identify.

Main counterparties

Counterparties in total: 10

Direct counterparties, flagged categories first, then by value.

Counterparty Category Received Sent
Lazarus Group 0x098b…2f96 Sanctions 1$0.36 0
Tornado Cash 0x12d6…b8fc Mixer 3$900 0
Stargate 0x53bf…1614 Bridge 0 1$1,000
Uniswap v4 0x66a9…a8af DeFi 1$3,580 1$3,600
Aave v3 0x8787…a4e2 DeFi 0 1$2,000
Binance 0x28c6…1d60 Exchange 1$7,500 0
Unidentified 0xbff0…2e24 Unidentified 1$2,500 0
Unidentified 0x0e85…3eaa Unidentified 0 1$1,350

Number of movements, with their value at current prices.

Activity by network

First known activity
14 Mar 2025
Latest activity
29 Oct 2026
Balance at current prices
$6,030
Active networks
3
Network Transactions Latest activity Balance
Ethereum 64 22 Oct 2026 1.84 ETH$5,520
Arbitrum 12 23 Oct 2026 0.05 ETH$150
Base 9 29 Oct 2026 0.12 ETH$360

No activity on Polygon, Optimism, Unichain, Avalanche, Scroll, World Chain and Soneium.

Latest transactions

The most recent movements, free with the report.

Date Network Direction Amount Value Counterparty Transaction
29 Oct 202609:30 Base Sent 0.12 ETH $360 0x2647…15fb
27 Oct 202617:45 Base Received 2,500 USDC $2,500 0xbff0…2e24
23 Oct 202614:05 Arbitrum Received 0.4 ETH $1,200 0xc505…f310
20 Oct 202605:15 Ethereum Received 0.00012 ETH $0.36 Lazarus GroupSanctions
18 Oct 202612:20 Ethereum Sent 0.45 ETH $1,350 0x0e85…3eaa

8 more movements read are hidden. 85 transactions in total on the networks analysed.

Run it on your own wallets

Create your free account to analyse any address, then import a wallet to get its whole history categorised and ready for your books.

Create my account Sign in

About this analysis

  • Recent history only This wallet has more history than what was read: its older transactions are not in the score.
  • Unsolicited tokens 3 spam or bait tokens received, left out of the score.

Method and limits
  • Direct exposure only: the counterparties that sent funds to this address or received funds from it, one hop away. Funds that went through intermediaries are not traced.
  • Shares are measured in US dollars at current prices, separately for what was received and what was sent; without prices, in number of movements.
  • Each category of counterparty has a band. A flagged category counts from its first movement and reaches the top of its band at 25% of the volume or more; bridges and DeFi count from 1%. The score is the strongest contribution.
  • An address that is itself on a list takes the score of its category.
  • Dusting: less than $25 received from a flagged address, with nothing sent back, is a weak signal and never critical.
  • Only the latest transactions are read: up to 100 rows per list and per network.
Score bands
  • Critical80 to 100
  • High60 to 79
  • Medium40 to 59
  • Low10 to 39
  • None0 to 9
Highest level by category
  • SanctionsCritical
  • HackCritical
  • MixerHigh
  • Privacy protocolMedium
  • BridgeLow
  • DeFiLow
  • ExchangeNone
Lists used
Not covered

Other sanctions lists (EU, UK, UN), darknet markets, ransomware, scams, hacks and exchanges outside the lists above, indirect exposure beyond one hop, and the networks not listed in this report.

Indicative analysis, computed automatically from public data. It is not a regulated KYT or anti-money-laundering control, and not legal advice. A flag concerns an address, never a person. False positives are possible, and no alert does not mean no risk.

The address is sent to public block explorers to read its history; it is not stored or written to our logs. The report stays in server memory for 10 minutes so it can be displayed again, then it is erased.

The report is free, the full history comes with the subscription

Free with an account

  • The full risk report: score, alerts, exposure, counterparties, networks
  • A preview of the latest 5 transactions
  • Up to 30 analyses a day per workspace
Create my account

With the subscription

  • The whole history of the wallet imported into your workspace
  • Every transaction categorised in the French chart of accounts
  • Exports for your accounting software and a FEC built from complete data
See pricing

Questions

Is this a regulated KYT check?

No. It's an indicative analysis built from public lists and on-chain data. It doesn't replace the anti-money-laundering checks a regulated provider must run, and it isn't legal advice. A flag concerns an address, never a person.

Where do the lists come from, and how fresh are they?

From public sources: the OFAC SDN list, the OFAC notice that lifted the Tornado Cash sanctions, the FBI notice on the Bybit hack, the contracts Railgun publishes and the Binance proof of reserves, plus the protocol contracts Defi Flow recognises. Every report lists them with their issue date.

Is my address stored?

No. On this page the address stays in your browser tab until you're signed in. The analysis then sends it to public block explorers to read its history; it is not saved or written to our logs, and the report stays in server memory for 10 minutes so you can display it again, then it is erased.

Which networks are covered?

Ethereum, Arbitrum, Base, Polygon, Optimism, Unichain, Avalanche, Scroll, World Chain, Soneium, Bitcoin and Solana. Tron addresses are checked against the lists only; other networks are not analysed.

Is it really free?

Yes, with a free account: the risk report and a preview of the latest 5 transactions. Importing the whole history of the wallet into your books comes with the subscription.