Blockchain analytics firm Chainalysis released a standardization proposal on Monday, June 29, 2026, aimed at providing a unified framework for investigators tracing transactions and clustering addresses. Jacob Illum, the company's chief scientist, stated that the goal is to ensure data availability guarantees for law enforcement and prosecutors, making on-chain evidence more admissible in court.
Core Framework: Two-Layer Attribution Around the Cluster Concept
The proposal centers on the concept of clusters. Chainalysis decomposes a cluster into finer constituent units called 'wallet fragments' and introduces a two-layer attribution structure: the first layer defines the structural graph—building a network of address relationships based on transaction behavior and on-chain interaction patterns; the second layer assesses the confidence of that graph, assigning a likelihood score that the addresses belong to the same entity. This layered design preserves the objectivity of on-chain data while providing law enforcement with a confidence metric to inform legal decisions.
Illum emphasized that investigators typically cannot access private keys, so they must rely on public ledger data to determine whether multiple addresses are controlled by the same entity. Chainalysis's approach uses graph theory and statistical methods on transaction records and address interaction patterns to construct entity clusters, offering a viable path for on-chain investigations lacking direct evidence.
Judicial Endorsement: Lessons from the Bitcoin Fog Trial
Chainalysis's proposal was informed by the experience of the U.S. Department of Justice's case against Roman Sterlingov, co-founder of Bitcoin Fog. In that trial, the prosecution relied primarily on Chainalysis's Reactor tool for forensic analysis. The defense challenged the tool's rigor, leading to a dedicated hearing. The judge ultimately ruled that Chainalysis's methods were supported by sufficient evidence, allowing the Reactor's on-chain analysis as valid evidence. This precedent provided a legal foundation for Chainalysis to systematize and standardize its approach, ensuring reproducibility in future cases.
Technical Limitations and Regulatory Collaboration
Despite the progress in entity linking, Illum acknowledged inherent limitations: Chainalysis can only trace fund flows to custodial entities such as exchanges or custodial wallets, not to the specific natural persons behind addresses. Law enforcement must still rely on subpoenas or court orders to obtain user information from custodians to complete the chain of evidence. Thus, the proposal is an intermediate tool for improving on-chain transparency, not an end point.
The industry generally views Chainalysis's move as a step toward standardizing blockchain forensics, providing global regulators with a more reliable data foundation while encouraging self-compliance among crypto businesses. However, the proposal does not yet detail its handling of privacy coins, mixers, or other complex scenarios, leaving room for future technical iteration.