Ethereum
Behavioral watermarkMOONSHOT · v1

0x098b716b8aaf21512996dc57eb0615e2383e2f96

Known entity: Lazarus Group (Ronin Bridge Hack)

The wallet’s 20-dimensional behavioral fingerprint, and the wallets in CredScore’s corpus with the most similar operational shape. High similarity across wallets with different addresses, chains, or attribution suggests the same actor, service, or laundering ring — even when no labels overlap.

Fingerprint for this wallet · 100% coverage
Wallet age
92
Transfer volume
73
Activity rate
2
Counterparty breadth
68
Counterparty concentration
30
Counterparty entropy
99
Inbound share
65
Rapid-inflow burstiness
32
Rapid-outflow burstiness
23
Mixer exposure
0
Bridge exposure
0
Exchange exposure
0
DEX exposure
0
Aggregator exposure
0
Protocol exposure
7
Attribution coverage
100
Zero-value transfer ratio
26
Recency (dormancy)
4
Self-transfer ratio
0
Top inbound source share
98
Closest matches in the CredScore corpus (10)
99%
similarity
Ethereumlowscore 98
0x267be1…4ffdc0
Most alike: Transfer volume, Mixer exposure, Aggregator exposure
Diverges on: Zero-value transfer ratio, Rapid-inflow burstiness, Wallet age
99%
similarity
ethereumlowscore 75
0x876eab…950cfa
Most alike: Transfer volume, Mixer exposure, Aggregator exposure
Diverges on: Rapid-inflow burstiness, Rapid-outflow burstiness, Counterparty concentration
98%
similarity
ethereumlowscore 75
0x446b2a…c02cd0
Most alike: Transfer volume, Mixer exposure, Aggregator exposure
Diverges on: Inbound share, Rapid-inflow burstiness, Protocol exposure
98%
similarity
Ethereumhighscore 0
0x858942…1fda16
Most alike: Transfer volume, Exchange exposure, Aggregator exposure
Diverges on: Recency (dormancy), Zero-value transfer ratio, Inbound share
98%
similarity
ethereumhighscore 12
0xe05f52…b54a2a
Most alike: Transfer volume, Mixer exposure, Exchange exposure
Diverges on: Protocol exposure, Wallet age, Rapid-outflow burstiness
98%
similarity
ethereumlowscore 80
0xe81d6f…af92c7
Most alike: Transfer volume, Mixer exposure, Exchange exposure
Diverges on: Counterparty concentration, Inbound share, Rapid-outflow burstiness
98%
similarity
Ethereumhighscore 0
0xdcbeff…643193
Most alike: Transfer volume, Attribution coverage, Aggregator exposure
Diverges on: Rapid-inflow burstiness, Inbound share, Zero-value transfer ratio
98%
similarity
ethereumlowscore 69
0x48c04e…38a7ff
Most alike: Transfer volume, Mixer exposure, Aggregator exposure
Diverges on: Rapid-inflow burstiness, Zero-value transfer ratio, Rapid-outflow burstiness
98%
similarity
ethereummediumscore 54
0xa0d52f…9a250e
Most alike: Transfer volume, Mixer exposure, Exchange exposure
Diverges on: Rapid-inflow burstiness, Inbound share, Protocol exposure
98%
similarity
Ethereumhighscore 4
0xdd4c48…1d3384
Most alike: Transfer volume, Exchange exposure, Aggregator exposure
Diverges on: Inbound share, Zero-value transfer ratio, Rapid-outflow burstiness
How the fingerprint works. Twenty behavioral dimensions (wallet age, transfer volume, activity rate, counterparty breadth, timing patterns, protocol mix, dormancy, self-ratio, etc.) are normalized to 0-1 and stored as a vector per wallet. Similarity is cosine distance in that space. Dimensions are pattern metrics only — score, tier, and sanctions counts are excluded to keep the fingerprint from becoming circular. Read the technical primitive at /whitepaper.