Behavioral Watermark · v1
Read behavior,
not labels.
Every wallet has a 20-dimensional behavioral fingerprint — wallet age, counterparty breadth, timing burstiness, protocol mix, dormancy. Bad actors rotate addresses in seconds. They cannot as easily rotate the shape of how they operate. The Watermark surfaces wallets that move like known illicit actors even when zero labels overlap.
Paste any EVM or Tron address. First lookup is free — no signup.
Watermark applied · three real wallets
Euler Finance attacker
Illicit$197M exploit — March 2023
0xb66cd96667…bfb995db
12
score
high · escalate
100
100
100
91
89
73
Behavioral shape of a fresh-funded, single-target attack wallet.
See full fingerprint + closest matches →
ZachXBT-named pig-butchering wallet
Risky~$19M laundered · DEX-routed pass-through
0xea9fccb3ea…066010c7
55
score
medium · review
100
100
94
75
61
60
Rapid-inflow/outflow ratios and DEX-heavy mix — the pass-through laundering shape.
See full fingerprint + closest matches →
Vitalik Buterin (public wallet)
CleanEthereum co-founder — legibility anchor
0xd8da6bf269…7aa96045
73
score
low · proceed
100
100
99
88
79
67
Broad counterparty entropy, attribution-heavy exposure, low burstiness — the shape of a legibly-public wallet.
See full fingerprint + closest matches →
The twenty dimensions
Every dimension is a pattern metric — never an outcome. Wallet score, tier, and sanctions counts are deliberately excluded so the fingerprint captures operational shape independent of the risk verdict.
Wallet age
Transfer volume
Activity rate
Counterparty breadth
Counterparty concentration
Counterparty entropy
Inbound share
Rapid-inflow burstiness
Rapid-outflow burstiness
Mixer exposure
Bridge exposure
Exchange exposure
DEX exposure
Aggregator exposure
Protocol exposure
Attribution coverage
Zero-value transfer ratio
Recency (dormancy)
Self-transfer ratio
Top inbound source share
Why it compounds
Today
Corpus: 280
Watermark cross-references any new wallet against the current corpus. Matches surface with per-dimension divergence notes so the reason is legible, not black-box.
10× the corpus
Corpus: Growing daily
Autonomous scanner extends the corpus every hour. Every OFAC designation adds sanctioned reference shapes. Every hack adds fresh attack-wallet shapes.
Category-defining
Corpus: At full corpus scale
'Wallet X has 92% behavioral similarity to a known Lazarus laundering pattern' becomes a routine sentence in a SAR narrative. Nobody else can produce that sentence — the primitive is unique to CredScore.
Score any wallet — first analysis free.
Every CredScore verdict now ships with its behavioral fingerprint. Use it to double-check a suspect wallet you're already looking at, or to search the corpus for anything that moves like it.