Sybil Wallet Cluster Explainer

WHAT IT DOES

Sybil Wallet Cluster Explainer reads live on-chain data from multiple EVM wallets and uses AI to detect Sybil clusters—groups of wallets likely controlled by the same entity. It analyzes wallet transaction histories and frequencies to identify behavioral patterns. It examines transaction patterns including transfers, swaps, approvals, and deposits. It identifies shared funding sources where the same address has funded multiple wallets, a strong indicator of common control. It detects clustered transaction timing where wallets transact at similar block timestamps, suggesting coordinated activity. It builds an interaction graph showing how wallets have transacted with each other and with contracts. It identifies cross-wallet transaction sequences (A→B→C) that may indicate fund routing. The AI generates a plain-language verdict—LOW, CLUSTER, or HIGH—along with specific explanations of the Sybil risk before you trust or interact with these wallets.

HOW TO USE

Enter two or more wallet addresses separated by commas. The tool reads transaction histories for each wallet, including transaction counts, balances, and interaction patterns. It scans for shared contracts that multiple wallets have interacted with—this is a key indicator of coordinated behavior. It analyzes address similarities such as shared prefixes or sequential addresses that may suggest batch creation. It identifies shared funding sources and timing correlations. The AI receives all this data and returns a verdict: LOW (no significant Sybil indicators), CLUSTER (moderate evidence of common control), or HIGH (strong evidence of Sybil cluster). The AI also provides a detailed plain-language explanation of the specific cluster indicators and what risks they represent.

CHUNKED LOG SCANNING WITH AUTOMATIC BACKOFF AND INTERACTION GRAPH ANALYSIS

The tool fetches event logs for each wallet address to identify contract interactions and transaction partners. Public RPC endpoints enforce varying block range limits per request—some allow 10,000 blocks, others only 2,000, and some reject requests that span more than a few hundred blocks. This tool automatically detects the per-request range limit by probing and adjusts batch sizes accordingly. It walks backwards from the current block in chunks and, if a request fails due to a range limit, it halves the chunk size and retries. If a request fails due to rate limiting, it backs off exponentially and resumes from the last successfully scanned block. The scan covers the most recent 300,000 blocks to capture recent activity. For each wallet, the tool extracts all contract addresses interacted with, building a shared contract map that identifies which contracts are used by multiple wallets. It also calculates transaction counts and balances. It detects address similarity by comparing prefixes between addresses, flagging sequential or vanity addresses. The tool analyzes timing correlations by comparing block timestamps of transactions across wallets.

WHAT IT CANNOT SEE

This tool cannot detect off-chain Sybil coordination or identity verification—wallets could be controlled by a single person or by separate people with similar behaviors. It cannot verify if wallets are controlled by the same person vs different people; behavioral patterns alone cannot conclusively prove identity. It cannot analyze wallets that have no transaction history; a wallet with zero activity provides no behavioral data. It cannot detect Sybil clusters that use privacy tools (mixers, privacy chains) to obscure links. It cannot detect wallets that are coordinated through off-chain channels without on-chain pattern evidence. It cannot verify intent behind wallet clustering—the wallets could be legitimate multi-wallet use by a single individual, airdrop farming, or coordinated scam networks. It cannot detect wallet clusters that are active on different chains not connected to the chosen network.

PLEASE NOTE

EVM chains only. This tool reads on-chain data and generates AI explanations—it does NOT sign transactions or execute any on-chain actions. The wallet's own signature prompt remains the final gate for every real action. Always review the exact transaction details in your wallet before approving any interaction. The AI assessment is informational only and does not constitute financial or security advice. Correlation does not imply control; always verify wallet relationships independently before making trust decisions.