On this page
What this means for your organization
- Assume observability: design workflows as if every transaction is public and permanent — because it is.
- Screen counterparty addresses before paying or receiving; use a chain-analysis provider or custodian screening.
- Maintain records: for audit and dispute defense, keep address↔counterparty mappings and screening evidence.
- Avoid address reuse where practical — it reduces unintended linkage (most modern wallets do this by default).
- Watch the policy line: mixer use and privacy coins carry legal and onboarding risk that varies by jurisdiction.
- Educate staff: most "privacy" breaches come from off-chain linkage (KYC, support tickets, IP), not from breaking crypto.
Go deeper — the limits of tracing
For technical depth, the academic literature on deanonymization (e.g. the original Bitcoin transaction-graph work by Reid & Harrigan, and the ZK rollup vs. privacy-coin design trade-offs) is a good next step. For operational depth, read the public reports chain-analysis firms publish — they describe real cases of tracing ransomware and exchange hacks. The Regulation unit covers the legal backdrop (KYC/AML, Travel Rule, sanctions).
The Trace the Funds lab lets you apply these heuristics hands-on: follow tainted coins through a peeling chain, a CoinJoin, and a multi-input cluster, and find the off-ramp. All simulated, all educational. For documented real-world cases, browse the Major Hacks & Bad Actors reference.
Key takeaways
A one-page summary of Exposure, Tracing & Chain Analysis. Print it for quick reference.
- Crypto is pseudonymous, not anonymous: every transaction is on a public ledger forever.
- UTXO chains (Bitcoin) trace via transaction graph + common-input heuristic; account chains (Ethereum) trace via account activity graphs.
- De-anonymization comes from off-chain linkage: exchange KYC, IP/timing metadata, reused addresses, dusting, and known-wallet attribution.
- Privacy tools (CoinJoin, mixers, Zcash/Monero) raise the cost of tracing but are not perfect and increasingly attract legal attention (Tornado Cash was sanctioned in 2022 and delisted in March 2025 after a November 2024 court ruling; Blender.io remains sanctioned).
- Chain-analysis firms (Chainalysis, TRM Labs, Elliptic, Ciphertrace) build attribution datasets that exchanges, banks, and law enforcement use for AML/sanctions screening.
- For professionals: assume on-chain activity is observable, maintain clear records, and screen counterparty addresses — sanctioned-address interaction can be illegal.
Unit check
80% to complete this unitPass the unit check (4 of 5) to complete this unit.