Crypto Wallet Entity Classifier
Blockchains are pseudonymous: an address string alone does not reveal its owner. Analyze transaction velocity, multi-input sweep batching, gas funding, and balance dwell time to scientifically distinguish centralized exchange infrastructure from self-custodial wallets.
Extreme transaction throughput, heavy withdrawal batching (48 outputs/tx), and high turnover rate match regulated exchange operational hot wallets.
How Blockchain Forensics Identify Exchange Wallets
Cryptocurrency addresses are alphanumeric hashes without built-in identity cards. However, exchanges behave in structurally unmistakable ways compared to human owners:
1. Deposit Addresses vs. Hot Wallets: When you deposit on an exchange like Coinbase, Kraken, or Binance, they assign your account an individual public deposit address. Funds deposited there are shortly "swept" via consolidation transactions into large omnibus hot wallets.
2. Withdrawal Batching: To optimize blockchain transaction fees and gas overhead, centralized exchanges batch multiple user withdrawals together, creating single transactions with 20 to 100+ recipient outputs.
3. Co-Spending & Common Input Heuristic: In UTXO blockchains (like Bitcoin), if an address signs an input alongside other inputs in a shared transaction, those addresses are statistically controlled by the same wallet software cluster.
Frequently Asked Questions
Can you know with 100% certainty if an address belongs to an exchange?
Not purely from the raw address string itself. Proof requires analyzing transaction graph topology, clustering heuristics, public attribution proofs (proof-of-reserves, blog disclosures), or labeled clustering datasets curated by forensics teams.
Why do exchange hot wallets look different from cold storage?
Hot wallets have constant daily transaction flow, automated API signing, and modest reserve balances. Cold storage vaults hold tens of thousands of BTC/ETH in air-gapped multi-sig contracts with very low transaction velocity (often moving funds only once every few weeks or months in massive tranches).
What is gas pre-funding in EVM deposit sweeps?
Because ERC-20 tokens cannot pay their own gas directly from token balance, exchange sweep bots automatically send a fraction of native ETH (e.g., 0.0015 ETH) to a user's deposit address seconds before executing the sweep transaction to empty the tokens into the exchange vault.
Does a personal wallet ever batch transactions?
Rarely. Most consumer wallets (MetaMask, Ledger, Phantom) initiate 1-to-1 payments or smart contract interactions. Heavy fan-out (>15 recipients per transaction) almost universally signifies institutional payroll, merchant processors, airdrop distributors, or exchange withdrawals.