Ethereum
Behavioral watermarkMOONSHOT · v1

0x098b716b8aaf21512996dc57eb0615e2383e2f96

Known entity: Lazarus Group (Ronin Bridge Hack)

The wallet’s 20-dimensional behavioral fingerprint, and the wallets in CredScore’s corpus with the most similar operational shape. High similarity across wallets with different addresses, chains, or attribution suggests the same actor, service, or laundering ring — even when no labels overlap.

Fingerprint for this wallet · 100% coverage
Wallet age
92
Transfer volume
73
Activity rate
2
Counterparty breadth
68
Counterparty concentration
30
Counterparty entropy
98
Inbound share
65
Rapid-inflow burstiness
33
Rapid-outflow burstiness
23
Mixer exposure
0
Bridge exposure
0
Exchange exposure
0
DEX exposure
0
Aggregator exposure
0
Protocol exposure
7
Attribution coverage
100
Zero-value transfer ratio
26
Recency (dormancy)
3
Self-transfer ratio
0
Top inbound source share
98
Closest matches in the CredScore corpus (10)
99%
similarity
Ethereumhighscore 0
0x858942…1fda16
Most alike: Transfer volume, Exchange exposure, Aggregator exposure
Diverges on: Recency (dormancy), Zero-value transfer ratio, Inbound share
99%
similarity
ethereumlowscore 87
0x267be1…4ffdc0
Most alike: Transfer volume, Mixer exposure, Aggregator exposure
Diverges on: Rapid-inflow burstiness, Zero-value transfer ratio, Wallet age
98%
similarity
ethereumhighscore 0
0xdcbeff…643193
Most alike: Transfer volume, Attribution coverage, Aggregator exposure
Diverges on: Rapid-inflow burstiness, Inbound share, Protocol exposure
98%
similarity
ethereummediumscore 54
0xa0d52f…9a250e
Most alike: Transfer volume, Mixer exposure, Exchange exposure
Diverges on: Rapid-inflow burstiness, Inbound share, Protocol exposure
97%
similarity
Ethereumhighscore 4
0xdd4c48…1d3384
Most alike: Transfer volume, Exchange exposure, Aggregator exposure
Diverges on: Inbound share, Zero-value transfer ratio, Rapid-outflow burstiness
97%
similarity
Ethereummediumscore 47Bitfinex 19 (cold wallet)
0x115131…9fe30f
Most alike: Transfer volume, Mixer exposure, Aggregator exposure
Diverges on: Inbound share, Counterparty concentration, Rapid-inflow burstiness
96%
similarity
ethereumlowscore 75
0x3f5ce5…36f0be
Most alike: Transfer volume, Mixer exposure, Bridge exposure
Diverges on: Inbound share, Rapid-inflow burstiness, Counterparty concentration
96%
similarity
ethereumhighscore 12
0x9be599…a15573
Most alike: Mixer exposure, Attribution coverage, Bridge exposure
Diverges on: Protocol exposure, Rapid-inflow burstiness, Counterparty concentration
96%
similarity
ethereumhighscore 0
0x6a1544…0e41ed
Most alike: Transfer volume, Mixer exposure, Aggregator exposure
Diverges on: Protocol exposure, Rapid-inflow burstiness, Inbound share
96%
similarity
ethereumhighscore 12
0xd5ed34…1ed510
Most alike: Mixer exposure, Aggregator exposure, Attribution coverage
Diverges on: Inbound share, Rapid-inflow burstiness, Protocol exposure
How the fingerprint works. Twenty behavioral dimensions (wallet age, transfer volume, activity rate, counterparty breadth, timing patterns, protocol mix, dormancy, self-ratio, etc.) are normalized to 0-1 and stored as a vector per wallet. Similarity is cosine distance in that space. Dimensions are pattern metrics only — score, tier, and sanctions counts are excluded to keep the fingerprint from becoming circular. Read the technical primitive at /whitepaper.