Coinmonks
Published in

Coinmonks

Free Bitcoin Forensics - Part 2

  • Transaction graph
  • Blockchain techniques for evasion/detection
  • Wallet Clustering
  • Wallet Fingerprinting
  • Scripts and address formats
  • CoinJoins and PayJoins
  • Other misc identification patterns
  • The future of privacy

Transaction graph

https://oxt.me/graph/transaction/tiid/3124363752
https://oxt.me/transaction/7a3fb18c76b3f54606b065209521f6a678692a592c8bcd7460d7dcf8d06faf19
https://oxt.me/entity/tiid/2556015810

Some interesting transaction patterns

https://oxt.me/graph/transaction/tiid/2923573673
https://oxt.me/transaction/c61e8ee41d8317dc0059a4fa2cbbd5b55c75c9aac521c8b3d47b763f2d897b37
https://blockchair.com/bitcoin/transaction/d681640cfcbcec4b0b6ede9ce9aaaa6106158956e89cf3b5ed4f7e09b40b2630
https://blockchair.com/bitcoin/transaction/8d6097bc1f743b8c280da44ca8d604c4fccd2c65532f521262fd6eff20ddce79

Scripts and address formats

PkScript: OP_DUP OP_HASH160 <public key hash> OP_EQUALVERIFY OP_CHECKSIG
SigScript: <signature> <public key>
Witness: N/A
PkScript: OP_HASH160 <redeem script hash> OP_EQUAL
SigScript: OP_0 <condition solution> OP_PUSHDATA1 <redeem script>
Witness: N/A
Redeem script: OP_PUSHNUM_2 <public key A> <public key B> <public key C> OP_PUSHNUM_3 OP_CHECKMULTISIG
PkScript: OP_HASH160 <redeem script hash> OP_EQUAL
SigScript: OP_0 <signature A> <signature B> OP_PUSHDATA1 OP_PUSHNUM_2 <public key A> <public key B> <public key C> OP_PUSHNUM_3 OP_CHECKMULTISIG
Witness: N/A

P2WPKH:

PkScript: OP_0 <public key hash>
SigScript: N/A
Witness: <signature> <public key>

P2WSH:

PkScript: OP_0 <redeem script hash>
SigScript: N/A
Witness: <condition solution> <redeem script>

P2WPKH nested in P2SH:

PkScript: OP_HASH160 <redeem script hash> OP_EQUAL
SigScript: OP_0 <public key hash>
Witness: <signature> <public key>

P2WSH nested in P2SH:

PkScript: OP_HASH160 <P2SH redeem script hash> OP_EQUAL
SigScript: OP_0 < P2WSH redeem script hash>
Witness: <condition solution> <P2WSH redeem script>

Locktime:

https://blockchair.com/search?q=4a5e1e4baab89f3a32518a88c31bc87f618f76673e2cc77ab2127b7afdeda33b
https://blockchair.com/bitcoin/transaction/2a058e289f96000016d48ceae16bc798ceec3fad2594c4c07fbe935e38e32688
https://blockchair.com/bitcoin/transaction/323df21f0b0756f98336437aa3d2fb87e02b59f1946b714a7b09df04d429dec2
https://blockchair.com/bitcoin/transaction/14ff5e5c9206f7722b0ed421d26f1cb003c523070c4882150073817683bd2dda

Also, Read

Get Best Software Deals Directly In Your Inbox

--

--

Coinmonks (http://coinmonks.io/) is a non-profit Crypto Educational Publication. Follow us on Twitter @coinmonks and Our other project —  https://coincodecap.com, Email  — gaurav@coincodecap.com

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store