Chainalysis

A decade of proprietary attribution, mapping addresses to identified real world entities, carries the value, with machine learning in clustering and risk scoring and Rapid and AI Agents as the newer AI layer. Reactor tracing and screening would still work without the models. Chainalysis's own investigators use in house AI as well: tracing the $387 million North Korea stole from Bitget in September 2026, they compressed more than 20 hours of manual bridge reconciliation to under 10 minutes.

Blocking runs with no published threshold, override or review path, while analysts stay central in Reactor and Rapid. Address Screening and Know Your Transaction block risky wallets instantly through application programming interfaces, and Hexagate adds real time threat prevention.

Validation in academic research and testing under the Daubert standard in federal court are claimed, and opposing experts have challenged the method in criminal cases. Admissibility scrutiny is not an error profile, and accuracy, false positive rates and clustering precision are unpublished.

BitMEX's on chain risk exposure fell from 1.7 percent in 2019 to 0.2 percent in 2024, an 88 percent drop on Chainalysis's own exposure metric. More than 1,500 customers are claimed, and the BitMEX figure shows exposure screened out rather than an independent outcome.

More than 2,000 investigators in a shared intelligence community feed the platform, so an exchange's onboarding knowledge can improve attribution used by competitors, and government work can inform commercial screening. Contribution terms and separation between customers' inquiries are not set out.

How an attribution is established, how long it persists and what happens to a wrong one go undescribed. Attribution, the core asset linking pseudonymous addresses to identified people, falls outside a privacy notice updated March 10, 2026 that covers web properties and web based services.

Homepage links point to a trust center, but no certification or attestation is named in readable homepage or privacy notice text. Federal law enforcement and tax agencies are customers with their own supplier assurance demands.

Sanctions screening, transaction monitoring and VASP Risking map onto named obligations, and more than 50 regulators plus agencies such as IRS Criminal Investigation use the products. That is standing through use, not a register entry or supervised filing channel.

With nine of the ten top crypto exchanges using the same attributions by its own account, one error can travel across venues at once. Risk inherited through proximity several hops from a flagged source lands on people who could not avoid it, and no error rate or attribution confidence measure is published.

Someone whose address is attributed to an illicit entity is not told, cannot see the evidence and has no described route to challenge it, since the privacy correction right covers personal data rather than attributions. Court tested is the description offered, with no audit trail, per alert evidence or statement of who bears a wrong attribution's cost.

Public ledgers anyone can verify are the substrate, and Hexagate and Alterya were acquired and run in house. Sources establishing that an address belongs to a named entity, the layer deciding outcomes, are undisclosed, as are model providers.

Connector lists for core systems are not published, but Unit21 lists Chainalysis on chain data inside its case management engine and Fireblocks announced a screening integration in 2020. Address Screening and Know Your Transaction are delivered through low latency application programming interfaces.

Inquiry and case material from institutions and agencies in many countries gets no residency commitment. On location, the privacy notice mentions unnamed hosting partners and transfers between the European Economic Area, the UK, Switzerland and the United States.

Reactor, KYT and Address Screening carry no published price, and the free sanctions screening page now redirects to the paid product. A demo request is the only route to cost.

Banks such as BBVA, exchanges such as Coinbase and custody platforms such as Fireblocks are named customers, alongside stablecoin issuers and enterprises. Investigation, transaction monitoring, screening and threat prevention products match that spread.