Tag: forensics

2 datasets

GraphSense public TagPacks

Attribution tags for cryptoasset addresses as YAML TagPacks: a record gives an address a label, category, actor and link to its public source, in a pack with creator, confidence and last-modified date. Curated by the GraphSense team and contributors, who may submit only tags from public, dereferenceable sources, with a separate ActorPack listing real-world entities. Useful as ground truth for address clustering; some packs are derived snapshots of third-party services.

Ransomware payments in the Bitcoin ecosystem

Addresses and payments tied to ransomware families, as CSV tables of per-family seed addresses, collector addresses with their multi-input cluster id, and the transactions paying them with hash, timestamp and value. Produced by the authors on the GraphSense platform, which expands the seed addresses into clusters and follows their payments. Useful for estimating ransom revenue per family; the figures are a lower bound and the clustering can merge unrelated users.