On-chain funding tracing: following the money
Every coin on a public ledger has a path — from first mint or first exchange withdrawal, through swaps and bridges, to its current holder. Funding tracing follows that path.
The tracing toolkit
- First-money analysis — the earliest meaningful inflow and its counterparty.
- Counterparty chaining — following the next-hop wallet's own funding source.
- Exchange deposit/withdrawal markers — money touching a known exchange hot wallet is instantly classified.
- Cluster hints — shared funding sources, shared control patterns, coordinated timing.
- Privacy tools as a signal — hops through mixers or privacy protocols are a behavior, not a red flag by themselves, but they are a meaningful data point.
How it is presented
Reports show the structure of funding:
- Direct exchange funding → straightforward retail/professional wallet.
- Multi-hop through fresh addresses → obfuscation pattern, higher scrutiny.
- Circular self-funding → sybil or bot-network signature.
Each hop is labeled when identifiable, and unknown is honestly reported as unknown.
The limits (and why they matter)
Tracing is limited to the observable window and to labels that can be confirmed. SIGBOT never invents a label it cannot verify — an honest "unlabeled counterparty" is the correct output when that is what the data says.
Stay on the right side
Follow the public ledger and report behavior. Tracing is analysis of public information; it is not doxing, and it is not an accusation. The output is a behavioral description with confidence levels.