Blockchain transaction analysis: a comprehensive review of applications, tasks and methods
DOI:
https://doi.org/10.20535/SRIT.2308-8893.2023.4.03Keywords:
blockchain transactions, transaction analysis, transaction tracing, flow analysis, blockchain forensicsAbstract
Blockchain transaction analysis is a powerful tool to gain insights into the actions and conduct of participants within blockchain networks. This article aims to extensively examine the applications, tasks, and methods associated with blockchain transaction analysis. We look at various uses of transaction analysis, ranging from its instrumental role in blockchain development to its pivotal significance in the field of criminal investigations. By leveraging common techniques and technologies employed in conducting such an analysis, we unlock hidden insights and uncover information that is not visible at first look. This article offers a wide-ranging perspective on the profound significance of blockchain transaction analysis while shedding light on its key role within the cryptocurrency industry and its wide-ranging applications beyond.
References
V. Buterin, “Ethereum: A next-generation smart contract and decentralized application platform,” Ethereum.org. Accessed on: April 24, 2023. [Online]. Available: https://ethereum.org/669c9e2e2027310b6b3cdce6e1c52962/Ethereum_Whitepaper_-_Buterin_2014.pdf
S. Sharma and M. Naggar, “A New Era for Bitcoin?,” Binance Research. Accessed on: April 24, 2023. [Online]. Available: https://research.binance.com/static/pdf/a-new-era-for-bitcoin.pdf
“The 2023 Crypto Crime Report,” Chainalysis.com, 2023. Accessed on: April 24, 2023. [Online]. Available: https://go.chainalysis.com/rs/503-FAP-074/images/Crypto_Crime_Report_2023.pdf
“Blockchain Security and AML Analysis Report - 2022 Annual,” Slowmist.com. Accessed on: April 24, 2023. [Online]. Available: https://www.slowmist.com/report/2022-Blockchain-Security-and-AML-Analysis-Annual-Report(EN).pdf
L. Prinsloo and R. Henderson, “Trail of Brothers Linked to Missing Bitcoin Stash Is Still Murky,” Bloomberg.com. Accessed on: April 24, 2023. [Online]. Available: https://www.bloomberg.com/news/articles/2021-06-27/trail-of-brothers-linked-to-missing-bitcoin-stash-is-still-murky
L. Prinsloo, “Crypto Losses Probed by South African Cops After Brothers Vanish,” Bloomberg.com. Accessed on: April 24, 2023. [Online]. Available: https://www.bloomberg.com/news/articles/2022-01-11/crypto-losses-probed-by-south-african-cops-after-brothers-vanish
“Top five most wanted crypto criminals,” CNBCTV18. Accessed on: April 24, 2023. [Online]. Available: https://www.cnbctv18.com/cryptocurrency/top-five-most-wanted-crypto-criminals-15897891.htm
“The 10 biggest crypto scams on record and the lessons we can learn from them,” Irishtechnews.ie. Accessed on: April 24, 2023. [Online]. Available: https://irishtechnews.ie/10biggestcryptoscams/
“Protect your privacy,” Bitcoin.org. Accessed on: April 24, 2023. [Online]. Available: https://bitcoin.org/en/protect-your-privacy
“Ukrainian Cyber Police Department in Collaboration with Crystal,” Crystalblockchain.com. Accessed on: April 24, 2023. [Online]. Available: https://crystalblockchain.com/articles/ukrainian-cyber-police-department-now-in-collaboration-with-crystal-blockchain/
K. Baker, “What is Ransomware as a Service (RaaS)?,” crowdstrike.com. Accessed on: April 24, 2023. [Online]. Available: https://www.crowdstrike.com/cybersecurity-101/ransomware/ransomware-as-a-service-raas/
“Chainalysis in action: U.S. authorities disrupt NetWalker ransomware,” Chainalysis. Accessed on: April 24, 2023. [Online]. Available: https://blog.chainalysis.com/reports/netwalker-ransomware-disruption-arrest/
“Rekt - leaderboard,” rekt. Accessed on: April 24, 2023. [Online]. Available: https://rekt.news/leaderboard/
“SlowMist Hacked - SlowMist Zone,” Slowmist.io. Accessed on: April 24, 2023. [Online]. Available: https://hacked.slowmist.io/
“The 10 biggest crypto exchange hacks in history,” Crystalblockchain.com. Accessed on: April 24, 2023. [Online]. Available: https://crystalblockchain.com/articles/the-10-biggest-crypto-exchange-hacks-in-history/
@officer_cia, “How cross-chain bridges are hacked? A detailed review,” Mirror.xyz. Accessed on: April 24, 2023. [Online]. Available: https://officercia.mirror.xyz/AFkEUuxid1egNm4XdqYEzWEwosPNbz2CNghlNrq7LZQ
@officer_cia, “Retrospective: hacks in web3,” Telegraph. Accessed on: April 24, 2023. [Online]. Available: https://telegra.ph/Retrospective-hacks-in-web3-10-24
SlowMist, “SlowMist AML: Tracking funds laundered by Tornado Cash,” Medium, Accessed on: April 24, 2023. [Online]. Available: https://slowmist.medium.com/slowmist-aml-tracking-funds-laundered-by-tornado-cash-3a0e1f637054
“New York husband and wife arrested for laundering bitcoin,” Elliptic.co. Accessed on: April 24, 2023. [Online]. Available: https://www.elliptic.co/blog/elliptic-analysis-new-york-husband-and-wife-arrested-for-laundering-5-billion-in-bitcoin-stolen-from-bitfinex-in-2016
“Crystal Blockchain Analytics: Investigation of the Zaif Exchange Hack,” Bitfury.com. Accessed on: April 24, 2023. [Online]. Available: https://bitfury.com/content/downloads/bitfury_crystal_zaif_report_23_10_18.pdf
“DeviantArt protect: Helping safeguard your art,” Deviantart.com. Accessed on: April 24, 2023. [Online]. Available: https://www.deviantart.com/team/journal/DeviantArt-Protect-Helping-Safeguard-Your-Art-884278903
“Cryptocurrency regulations around the world,” ComplyAdvantage. Accessed on: April 24, 2023. [Online]. Available: https://complyadvantage.com/insights/cryptocurrency-regulations-around-world/
T. Akhtar and S. Shukla, “China Makes a Comeback in Bitcoin Mining Despite Government Ban,” Bloomberg.com. Accessed on: April 24, 2023. [Online]. Available: https://www.bloomberg.com/news/articles/2022-05-17/china-makes-a-comeback-in-bitcoin-mining-despite-government-ban
“Cryptocurrency transaction monitoring: What you need to know,” ComplyAdvantage. Accessed on: April 24, 2023. [Online]. Available: https://complyadvantage.com/insights/transaction-monitoring-cryptocurrencies/
“How continuous cryptocurrency transaction monitoring gives compliance teams peace of mind,” Chainalysis. Accessed on: April 24, 2023. [Online]. Available: https://blog.chainalysis.com/reports/kyt-continuous-monitoring/
“Cryptocurrency regulation: How governments around the world regulate crypto,” Chainalysis. Accessed on: April 24, 2023. [Online]. Available: https://blog.chainalysis.com/reports/cryptocurrency-regulation-explained/
N. Asokan, “Financial Intermediaries: their role on real examples,” Agicap.com. Accessed on: April 24, 2023. [Online]. Available: https://agicap.com/en/article/financial-intermediaries/
M. Morel, “Technical analysis is dead, long live transaction analysis,” CoinDesk. Accessed on: April 24, 2023. [Online]. Available: https://www.coindesk.com/layer2/2022/10/26/technical-analysis-is-dead-long-live-transaction-analysis/
I.G.A. Pernice, G. Gentzen, and H. Elendner, “Cryptocurrencies and the Velocity of Money,” Cryptoeconomic Systems, vol. 1, iss. 1, 2021. doi: 10.21428/ 58320208.f212c00e.
U.S. Department of the Treasury, “Illicit Finance Risk Assessment of Decentralized Finance,” Treasury.gov. Accessed on: April 24, 2023. [Online]. Available: https://home.treasury.gov/system/files/136/DeFi-Risk-Full-Review.pdf
“Cryptocurrency: Risk management overview,” Wtwco.com. Accessed on: April 24, 2023. [Online]. Available: https://www.wtwco.com/-/media/WTW/Insights/2019/01/cryptocurrency-risk-management-overview.pdf
“Blockchain risk management,” Deloitte.com. Accessed on: April 24, 2023. [Online]. Available: https://www2.deloitte.com/content/dam/Deloitte/us/Documents/financial-services/us-fsi-blockchain-risk-management.pdf
M. White, “Web3 is Going Just Great,” Web3isgoinggreat.com. Accessed on: April 24, 2023. [Online]. Available: https://web3isgoinggreat.com/
S. Kessler and D. Nelson, “Polygon blockchain nodes briefly went out of sync, affecting explorer, sowing confusion,” CoinDesk. Accessed on: April 24, 2023. [Online]. Available: https://www.coindesk.com/tech/2023/02/22/polygon-blockchain-suffers-apparent-outage/
T. Chang, J. Ho, Z. Tirrell, G. Weng, and J. You, “A risk classification framework for decentralized finance protocols,” Soa.org. Accessed on: April 24, 2023. [Online]. Available: https://www.soa.org/4aa5bb/globalassets/assets/files/resources/research-report/2022/decentralized-finance-protocols.pdf
V. Gaur and A. Gaiha, “Building a Transparent Supply Chain,” Harvard business review, 2020.
P. Dutta, T.-M. Choi, S. Somani, and R. Butala, “Blockchain technology in supply chain operations: Applications, challenges and research opportunities,” Transportation Research Part E: Logistics and Transportation Review, vol. 142, Elsevier BV, p. 102067, Oct. 2020. doi: 10.1016/j.tre.2020.102067.
R. Pratik, “How AI and Blockchain transforming supply chain management?,” Intuz.com. Accessed on: April 24, 2023. [Online]. Available: https://www.intuz.com/blog/ai-and-blockchain-in-supply-chain-management
L. Compagnucci, D. Lepore, F. Spigarelli, E. Frontoni, M. Baldi, and L. Di Berardino, “Uncovering the potential of blockchain in the agri-food supply chain: An interdisciplinary case study,” Journal of Engineering and Technology Management, vol. 65, Elsevier BV, p. 101700, Jul. 2022. doi: 10.1016/j.jengtecman.2022.101700.
“Incident report: Rootstock peg-out service outage (Fixed),” Rsk.com. Accessed on: April 24, 2023. [Online]. Available: https://blog.rsk.co/noticia/incident-report-rsk-peg-out-service-outage/
“Data and analytics,” ethereum.org. Accessed on: April 24, 2023. [Online]. Available: https://ethereum.org/en/developers/docs/data-and-analytics/
“Network congestion,” Bybit Learn. Accessed on: April 24, 2023. [Online]. Available: https://learn.bybit.com/glossary/definition-network-congestion/
“Scaling,” ethereum.org. Accessed on: April 24, 2023. [Online]. Available: https://ethereum.org/en/developers/docs/scaling/
S.D. Lerner, “RSK scalability,” Innovation Stories. Accessed on: April 24, 2023. [Online]. Available: https://medium.com/iovlabs-innovation-stories/rsk-scalability-c44252f05a4b
“State of research: increasing censorship resistance of transactions under proposer/builder separation (PBS),” HackMD. Accessed on: April 24, 2023. [Online]. Available: https://notes.ethereum.org/@vbuterin/pbs_censorship_resistance
R. Behnke, “How blockchain DDoS attacks work,” Halborn. Accessed on: April 24, 2023. [Online]. Available: https://www.halborn.com/blog/post/how-blockchain-ddos-attacks-work.
“Forta: a decentralized runtime security solution for automated threat detection and prevention on smart contracts,” Forta.network. Accessed on: April 24, 2023. [Online]. Available: https://docs.forta.network/en/latest/2022-7-11%20Forta%20Litepaper.pdf
Forta, “How to use Forta’s Threat Intel Data,” Notion. Accessed on: April 24, 2023. [Online]. Available: https://forta.notion.site/How-Forta-alerted-on-past-hacks-71e63d933ef5426d92642a8019708d48
D. Nelson and M. Hochstein, “Leaked slides show how Chainalysis flags crypto suspects for cops,” CoinDesk. Accessed on: April 24, 2023. [Online]. Available: https://www.coindesk.com/business/2021/09/21/leaked-slides-show-how-chainalysis-flags-crypto-suspects-for-cops/
“Bitcoin abuse database,” Bitcoinabuse.com. Accessed on: April 24, 2023. [Online]. Available: https://www.bitcoinabuse.com/
Etherscan.io. Accessed on: April 24, 2023. [Online]. Available: https://etherscan.io/
N. Tovanich, N. Heulot, J.-D. Fekete, and P. Isenberg, “Visualization of Blockchain Data: A Systematic Review,” IEEE Transactions on Visualization and Computer Graphics, vol. 27, no. 7, pp. 3135–3152, Jul. 01, 2021. doi: 10.1109/tvcg.2019.2963018.
J.S. Tharani, E.Y.A. Charles, Z. Hou, M. Palaniswami, and V. Muthukkumarasamy, “Graph Based Visualisation Techniques for Analysis of Blockchain Transactions,” 2021 IEEE 46th Conference on Local Computer Networks (LCN), Oct. 04, 2021. doi: 10.1109/lcn52139.2021.9524878.
“The ultimate guide to graph visualization,” Cambridge-intelligence.com. Accessed on: April 24, 2023. [Online]. Available: https://info.cambridge-intelligence.com/graph-visualization-white-paper
“Crystal,” Crystalblockchain.com. Accessed on: April 24, 2023. [Online]. Available: https://explorer.crystalblockchain.com/
“Introducing cross-Chain Investigations to Reactor,” Chainalysis. Accessed on: April 24, 2023. [Online]. Available: https://blog.chainalysis.com/reports/cross-chain-investigations/
“How cryptomixers allow cybercriminals to clean their ransoms,” Intel471. Accessed on: April 24, 2023. [Online]. Available: https://intel471.com/blog/cryptomixers-ransomware
“Blockchain bridges: An industry overview,” Rsk.com. Accessed on: April 24, 2023. [Online]. Available: https://blog.rsk.co/noticia/blockchain-bridges-an-industry-overview/
T. Tironsakkul, M. Maarek, A. Eross, and M. Just, “Tracking Mixed Bitcoins,” arXiv, 2020. doi: 10.48550/ARXIV.2009.14007.
M. J. Shayegan and H. R. Sabor, “A Collective Anomaly Detection Method Over Bitcoin Network.” arXiv, 2021. doi: 10.48550/ARXIV.2107.00925.
Z. Wu, J. Liu, J. Wu, Z. Zheng, and T. Chen, “TRacer: Scalable Graph-based Transaction Tracing for Account-based Blockchain Trading Systems,” IEEE Transactions on Information Forensics and Security. Institute of Electrical and Electronics Engineers (IEEE), pp. 1–1, 2023. doi: 10.1109/tifs.2023.3266162.
J. Siegenthaler, Blockchain Clustering with Machine Learning. Switzerland: University of Basel, 2020.
“Top 32 blockchain analysis tools,” Startup Stash. Accessed on: April 24, 2023. [Online]. Available: https://startupstash.com/blockchain-analysis-tools/
“Verifying smart contracts,” ethereum.org. Accessed on: April 24, 2023. [Online]. Available: https://ethereum.org/en/developers/docs/smart-contracts/verifying/
“Bytecode Decompilation,” Contract Library. Accessed on: April 24, 2023. [Online]. Available: https://library.dedaub.com/decompile
“Online Solidity Decompiler,” Online Solidity Decompiler. Accessed on: April 24, 2023. [Online]. Available: https://ethervm.io/decompile/
OpenChain Monorepo. Accessed on: April 24, 2023. [Online]. Available: https://github.com/openchainxyz/openchain-monorepo
@w1nt3r_eth, “A list of power tools (and their hidden features) that security researchers use to investigate hacks,” Twitter. Accessed on: April 24, 2023. [Online]. Available: https://twitter.com/w1nt3r_eth/status/1597998923226177543
“EVM tracing,” go-ethereum. Accessed on: April 24, 2023. [Online]. Available: https://geth.ethereum.org/docs/developers/evm-tracing
“Announcing our fully featured, portable solidity debugger,” Trufflesuite.com. Accessed on: April 24, 2023. [Online]. Available: https://trufflesuite.com/blog/announcing-full-portable-solidity-debugger/
ConsenSys Diligence, “Static and dynamic analysis - ethereum smart contract best practices,” Github.io. Accessed on: April 24, 2023. [Online]. Available: https://consensys.github.io/smart-contract-best-practices/security-tools/static-and-dynamic-analysis/
J. Feist, G. Grieco, and A. Groce, “Slither: A Static Analysis Framework for Smart Contracts,” 2019 IEEE/ACM 2nd International Workshop on Emerging Trends in Software Engineering for Blockchain (WETSEB). IEEE, May 2019. doi: 10.1109/wetseb.2019.00008.
“Fuzzing,” ConsenSys Diligence. Accessed on: April 24, 2023. [Online]. Available: https://consensys.net/diligence/fuzzing/
G. Grieco, W. Song, A. Cygan, J. Feist, and A. Groce, “Echidna: effective, usable, and fast fuzzing for smart contracts,” Proceedings of the 29th ACM SIGSOFT International Symposium on Software Testing and Analysis. ACM, Jul. 18, 2020. doi: 10.1145/3395363.3404366.
M. Mossberg et al., “Manticore: A User-Friendly Symbolic Execution Framework for Binaries and Smart Contracts,” 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE). IEEE, Nov. 2019. doi: 10.1109/ase.2019.00133.
“MythX: Preparing for a smart contract audit,” Mythx.io. Accessed on: April 24, 2023. [Online]. Available: https://mythx.io/about/
“GPT-4,” Openai.com. Accessed on: April 24, 2023. [Online]. Available: https://openai.com/product/gpt-4
S. Bubeck et al., “Sparks of Artificial General Intelligence: Early experiments with GPT-4,” arXiv, 2023. doi: 10.48550/ARXIV.2303.12712.
D. Guido, “Codex (and GPT-4) can’t beat humans on smart contract audits,” Trail of Bits Blog. Accessed on: April 24, 2023. [Online]. Available: https://blog.trailofbits.com/2023/03/22/codex-and-gpt4-cant-beat-humans-on-smart-contract-audits/
