Blockchain Analyst Glossary
for StonePath Investigations, LLC
1. Address
A blockchain address is a public identifier used to send or receive cryptocurrency. In an investigation, an address is often the starting point for tracing wallet activity.
2. Airdrop
An airdrop is the distribution of tokens to wallet holders, often as a promotion or project launch tactic. In fraud matters, scam tokens may be airdropped to create false legitimacy or lure victims into interacting with malicious contracts.
3. Altcoin
An altcoin is any cryptocurrency other than Bitcoin. Investigators often review altcoin activity to determine whether funds were swapped, parked, or routed into less familiar assets.
4. AML
AML stands for Anti-Money Laundering. In crypto investigations, AML concepts matter when tracing suspicious fund movement, identifying typologies, and evaluating whether assets touched regulated services.
Cryptocurrency Investigations in New York →5. Approval
An approval is a permission granted by a wallet holder to a smart contract, allowing that contract to spend certain tokens. Malicious approvals are common in wallet drain schemes and token theft cases.
6. Asset Flow Analysis
Asset flow analysis is the process of reviewing how cryptocurrency moved from one wallet, service, or contract to another. It helps investigators understand movement patterns, consolidation points, and possible endpoints.
7. Atomic Swap
An atomic swap is a direct exchange of one digital asset for another without a centralized intermediary. In investigations, it may complicate tracing if assets move quickly between chains or ecosystems.
8. Base Asset
A base asset is the main cryptocurrency being used or analyzed in a transaction path, such as BTC, ETH, or USDT. Identifying the base asset helps frame the tracing strategy.
9. Block
A block is a group of transactions added to a blockchain ledger. Each block contains transaction data that investigators can use to confirm timing and sequencing.
10. Block Explorer
A block explorer is a tool that allows users to search blockchain transactions, wallet addresses, token transfers, and smart contract activity. It is one of the most basic tools used in crypto investigations.
11. Blockchain
A blockchain is a distributed digital ledger that records transactions across a network of computers. For investigators, it provides the public transaction history used in wallet tracing.
12. Blockchain Forensics
Blockchain forensics is the structured analysis of on-chain activity to identify wallet relationships, transaction flow, possible service touchpoints, and suspicious movement patterns.
Blockchain Forensics Services in New York →13. Blockchain Intelligence
Blockchain intelligence is the conversion of raw transaction data into useful investigative findings. It often includes tracing, clustering, timeline development, and pattern analysis.
14. Bridge
A bridge is a protocol that allows assets to move from one blockchain to another. In investigations, bridging can make tracing more complex because the asset path may continue on a different network.
Cross-Chain Tracing Challenges →15. Burn Address
A burn address is a wallet address used to permanently remove tokens from circulation. Burn activity can be legitimate, but investigators may also review it where token issuers or scam projects try to manipulate supply optics.
16. Cash-Out Point
A cash-out point is the place where digital assets appear to be converted into fiat currency or moved into a service where liquidation is possible. Finding likely cash-out points can be important in asset recovery reviews.
17. CEX
CEX stands for centralized exchange. These platforms often serve as entry or exit points in tracing work because they may hold customer records, onboarding data, and account histories.
Understanding Blockchain Forensics →18. Chain Analysis
Chain analysis is the review of blockchain data to understand transaction flow, wallet interactions, and linked activity. It is a core function in digital asset investigations.
19. Chain Hopping
Chain hopping refers to moving assets across multiple blockchains, often to complicate tracing. Fraudsters may use this technique to make the transaction trail harder to follow.
Cross-Chain Tracing Challenges →20. Clustering
Clustering is the process of identifying wallets that appear related through repeated interaction, shared behavior, or common control indicators. It helps investigators move from isolated addresses to broader wallet groups.
21. Cold Wallet
A cold wallet is a wallet stored offline, often on hardware or paper. It is generally more secure than an internet-connected wallet, but can still become relevant in ownership or custody disputes.
22. Commingling
Commingling occurs when funds from multiple sources are mixed within the same wallet or transaction flow. This can make attribution more complicated and often requires a defined tracing methodology.
23. Confirmation
A confirmation occurs when a transaction is included in a block and further validated by additional blocks. Investigators use confirmations to assess whether a transfer is finalized or still pending.
24. Consolidation
Consolidation is the movement of funds from multiple wallets into a single wallet or smaller group of wallets. In fraud matters, this can indicate an endpoint, staging wallet, or collection address.
25. Contract Address
A contract address is the on-chain address of a deployed smart contract. Reviewing contract addresses is essential in DeFi fraud, token scam, and malicious approval cases.
26. Counterparty
A counterparty is the wallet, contract, or service on the other side of a transaction. Identifying the counterparty helps determine whether funds interacted with a private wallet, exchange, protocol, or scam infrastructure.
27. Cross-Chain Transfer
A cross-chain transfer is the movement of value from one blockchain to another. These transfers may happen through bridges, wrapped assets, or service intermediaries.
Cross-Chain Tracing Challenges →28. Crypto Asset
A crypto asset is a digital asset recorded on a blockchain, including cryptocurrencies, stablecoins, and tokens. The term is often used broadly in investigative reporting.
29. Crypto Fraud
Crypto fraud refers to deceptive or dishonest conduct involving digital assets, including fake investment platforms, deceptive transfers, impersonation scams, and false recovery claims.
Crypto Fraud Investigation →30. Crypto Recovery Review
A crypto recovery review is an investigation focused on where the assets moved, whether they touched reachable services, and whether the facts support any realistic next steps. It is not the same as a guaranteed recovery.
Crypto Recovery Services in New York →31. Crypto Scam
A crypto scam is a scheme that uses cryptocurrency as the payment method, lure, or concealment mechanism. Common examples include pig butchering scams, fake exchanges, wallet-drain scams, and romance scams.
Crypto Scams in New York →32. Crypto Theft
Crypto theft refers to the unauthorized taking of digital assets, whether by hacked credentials, malicious approvals, seed phrase compromise, or other unlawful access.
33. Custodial Wallet
A custodial wallet is controlled by a third party, such as an exchange or service provider, rather than directly by the user. Investigatively, custodial environments may create opportunities for records preservation or legal process.
34. Decentralized Exchange
A decentralized exchange, or DEX, allows users to trade assets directly through smart contracts. DEX activity can complicate tracing because there may be no centralized account holder records.
35. DeFi
DeFi stands for decentralized finance. It refers to blockchain-based financial applications such as swaps, lending, staking, and liquidity pools that operate without traditional intermediaries.
36. Deposit Address
A deposit address is the receiving wallet address used by an exchange or service to accept customer funds. Identifying one can help show that value reached a platform-controlled environment.
37. Digital Footprint
A digital footprint is the broader trail of online evidence connected to a crypto event, including wallet data, messages, site captures, exchange notices, and timestamps.
38. Dusting
Dusting is the sending of tiny amounts of crypto to many wallets. Sometimes it is harmless spam; other times it is part of behavioral analysis or a scam token campaign.
39. Endpoint Wallet
An endpoint wallet is a wallet where funds appear to stop moving temporarily or consolidate in a meaningful way. Investigators often focus on endpoints to evaluate possible control or service interaction.
40. ERC-20
ERC-20 is a common token standard on Ethereum. Many scam tokens, stablecoins, and legitimate assets use this standard.
41. Ethereum
Ethereum is a blockchain that supports smart contracts and tokenized assets. It is one of the most common networks seen in crypto fraud and tracing matters.
42. Exchange Interaction
Exchange interaction refers to a transaction involving a centralized trading platform or similar service. These interactions can be significant because they may connect on-chain activity to off-chain records.
43. Exit Liquidity
Exit liquidity is a phrase often used when later buyers or victims are used to create value for earlier insiders or fraudsters. It is common in pump-and-dump and rug pull discussions.
44. Exit Scam
An exit scam occurs when a project, platform, or operator takes customer funds and disappears or blocks access. In crypto matters, this may involve fake exchanges, fraudulent investment sites, or rug pulls.
45. Faucet
A faucet is a service that distributes small amounts of cryptocurrency, often for promotional or educational reasons. It is generally low-risk but may appear in wallet histories.
46. Fiat On-Ramp
A fiat on-ramp is the point where a user converts traditional currency into cryptocurrency. Exchanges are common on-ramps in many cases.
47. Fiat Off-Ramp
A fiat off-ramp is the point where cryptocurrency is converted back into traditional currency. Off-ramp analysis can be important in tracing possible liquidation points.
48. FIFO
FIFO stands for First In, First Out. It is one tracing method used to attribute which funds in a commingled wallet are treated as the source of later outgoing transfers.
49. Freeze Request
A freeze request is an effort to alert a service or issuer that certain assets may be tied to fraud or theft. Whether such a request is viable depends on timing, asset type, platform, and jurisdiction.
50. Gas Fee
A gas fee is the network fee paid to process a transaction on certain blockchains, especially Ethereum-compatible chains. Investigators may use gas patterns to help confirm transaction timing and wallet behavior.
51. Governance Token
A governance token is a token that may allow holders to vote on protocol decisions. In scam matters, governance language is sometimes used to create a false appearance of legitimacy.
52. Hash
A hash is a unique alphanumeric identifier used to represent a transaction or block. Transaction hashes are essential for locating transfers on chain.
53. Heuristic
A heuristic is an investigative rule-of-thumb used to interpret blockchain behavior, such as clustering likely related wallets. Heuristics can be useful, but they are not the same as direct proof.
54. Honeypot Token
A honeypot token is a scam token that can be bought but not easily sold, trapping users after purchase. It is a common fraud typology in token scams.
55. Hot Wallet
A hot wallet is a wallet connected to the internet and actively used for transactions. Because it is online, it may carry greater security risk than cold storage.
56. Impersonation Scam
An impersonation scam occurs when a fraudster pretends to be a legitimate company, advisor, exchange, investigator, or government official to induce a payment or disclosure.
Crypto Fraud Investigator in New York →57. KYC
KYC stands for Know Your Customer. In crypto cases, KYC can matter when traced funds appear to interact with a regulated service that may have customer records.
58. Layering
Layering is the movement of assets through multiple transactions, wallets, or services to make tracing more difficult. It is a common money-laundering and fraud-concealment pattern.
59. Liquidity Pool
A liquidity pool is a smart-contract-based pool of assets used to facilitate decentralized trading. Investigators may encounter liquidity pools in token scam and DeFi tracing matters.
60. LIFO
LIFO stands for Last In, First Out. It is another tracing method sometimes applied to commingled wallets to interpret the source of outgoing transactions.
61. Malicious Approval
A malicious approval is a token permission granted to a scam contract that allows unauthorized spending from a wallet. It is a common feature in wallet drain scams.
62. Meme Coin
A meme coin is a cryptocurrency built around internet culture, jokes, or social momentum rather than a clear utility case. These assets may appear in pump-and-dump and hype-driven fraud matters.
63. Mixer
A mixer is a service designed to obscure the origin and destination of cryptocurrency by blending funds from multiple users. Mixer use can complicate tracing and may be a significant red flag.
64. Multi-Hop Transfer
A multi-hop transfer is a movement path where funds pass through several addresses or services in sequence. These routes often appear in layering and concealment patterns.
65. Multisig Wallet
A multisig wallet requires more than one approval to authorize transactions. These wallets may appear in treasury, business, DAO, or custody reviews.
66. NFT
NFT stands for non-fungible token. NFTs are unique blockchain-based assets, and can appear in fraud, theft, wash trading, or deceptive project cases.
67. Node
A node is a computer that participates in validating, relaying, or storing blockchain data. Investigators do not usually trace through nodes directly, but nodes support the blockchain infrastructure being analyzed.
68. Non-Custodial Wallet
A non-custodial wallet is controlled directly by the user rather than a third party. In these cases, access to the wallet depends on private keys or seed phrases.
69. On-Chain
On-chain refers to activity that occurs directly on a blockchain and is visible in the public ledger. On-chain evidence is central to digital asset tracing.
70. Off-Chain
Off-chain refers to information or activity that exists outside the blockchain, such as emails, chats, platform dashboards, exchange account records, and identity documents. Good investigations usually combine on-chain and off-chain evidence.
71. Pass-Through Wallet
A pass-through wallet is a wallet that appears to receive funds and then forward them quickly onward. It may function as an intermediate hop rather than a true endpoint.
72. Permissionless Protocol
A permissionless protocol is a blockchain application that does not require approval from a central operator to participate. This can create useful transparency, but also fewer centralized records.
73. Phishing
Phishing is a fraud technique that tricks a user into revealing credentials, clicking a malicious link, or approving a harmful action. In crypto matters, phishing often leads to wallet compromise or token drain.
74. Pig Butchering Scam
A pig butchering scam is a long-form fraud in which a victim is groomed over time, encouraged to invest, shown fake profits, and then prevented from withdrawing funds. DFPI's tracker highlights this as one of the common scam structures consumers encounter.
Crypto Romance Scams →75. Private Key
A private key is the secret cryptographic credential used to control a wallet. Anyone with the private key can usually control the associated assets.
76. Provenance
Provenance is the historical record of where an asset came from and how it moved. In investigations, provenance review helps track source and path.
77. QR Code Scam
A QR code scam involves tricking a user into scanning a code that routes payment to a fraudster-controlled wallet or malicious application. These scams can appear in payment and customer-support frauds.
78. Recipient Wallet
A recipient wallet is the address that receives the transferred funds. It may be a direct endpoint, a pass-through address, or part of a larger cluster.
79. Recovery Scam
A recovery scam targets someone who has already lost money and promises to retrieve the assets for a fee or advance payment. These scams often victimize people twice.
The Rise of Crypto Recovery Scams →80. Reconvergence
Reconvergence occurs when funds that were split across multiple routes appear to come back together at the same wallet or wallet group. This can be an important indicator in tracing analyses.
81. Rug Pull
A rug pull is a fraud in which project insiders or controllers remove liquidity, abandon the project, or dump holdings in a way that leaves others with worthless assets.
82. Seed Phrase
A seed phrase is a set of words used to recover or control a wallet. If exposed, it can allow another person to take control of the assets.
83. Service Touchpoint
A service touchpoint is an interaction between on-chain funds and a platform, exchange, bridge, mixer, or protocol. These touchpoints are often key focal points in investigations.
84. Slippage
Slippage is the difference between the expected and actual execution price in a trade. While often normal, unusual slippage settings can be associated with certain scam token interactions.
85. Smart Contract
A smart contract is code deployed on a blockchain that automatically performs certain actions when conditions are met. Smart contracts are central to DeFi, token transfers, and many scam mechanisms.
86. Smart Contract Exploit
A smart contract exploit is the abuse of a coding flaw or logic weakness in a contract to move or steal funds. Not every loss involving a contract is an exploit; some are user-induced fraud events.
87. Stablecoin
A stablecoin is a token designed to maintain a relatively stable value, often pegged to the U.S. dollar. Stablecoins are common in fraud and tracing matters because they are easy to value and move.
88. Staging Wallet
A staging wallet is a wallet used temporarily to receive, hold, or sort funds before they move again. It may sit between the original receipt and the endpoint.
89. Swap
A swap is the exchange of one digital asset for another, often through a decentralized exchange or protocol. Swaps can complicate tracing when assets change form quickly.
90. Token
A token is a digital asset issued on an existing blockchain, often through a smart contract. Tokens can represent utility, governance, value, or scam bait depending on the project.
91. Token Contract
A token contract is the smart contract that defines a token's supply, transfer rules, and other characteristics. Reviewing token contracts can reveal whether an asset is standard, restricted, or malicious.
92. Token Migration
A token migration is the movement from one token or contract version to another. In legitimate projects this may be routine, but in scams it can be used to confuse holders.
93. Transaction Hash
A transaction hash is the unique identifier for a blockchain transaction. It allows investigators to locate and verify the specific transfer.
94. Transaction Pattern
A transaction pattern is the recognizable way funds move across a wallet trail, such as rapid splitting, repeated reconvergence, or consistent use of fresh addresses. Patterns are central to intelligence analysis.
95. Tracing Methodology
A tracing methodology is the defined approach used to follow and attribute funds through wallets and transactions, especially in commingled environments. Examples include FIFO and LIFO.
96. Unhosted Wallet
An unhosted wallet is a wallet not controlled by an exchange or third-party service. These wallets are common in fraud cases because they can be created quickly and do not inherently expose identity.
97. Wallet
A wallet is a tool or interface used to store, send, receive, and manage digital assets. A wallet may hold one or many addresses depending on the platform.
98. Wallet Drain
A wallet drain is the rapid unauthorized movement of assets out of a wallet, often caused by malicious approvals, phishing, compromised seed phrases, or fake support interactions.
Crypto Investigators in NYC →99. Wallet Screening
Wallet screening is the review of wallet activity for suspicious behavior, service interactions, sanctions concerns, or fraud indicators. It is often part of risk review and investigative triage.
100. Wrapped Token
A wrapped token is a tokenized version of an asset from another blockchain, created so it can be used in a different ecosystem. Wrapped assets are important in tracing because they may signal cross-chain movement.
Cross-Chain Tracing Challenges →