BEHAVIORAL AND LIST-BASED SIGNALS

Review Sybil and Blacklist Signals for an EVM Address

WalletGenome compares returned wallet behavior with configured public-list snapshots and a local MEDIA-style heuristic. These outputs prioritize review; they do not establish common ownership or wrongdoing.

A positive match reflects a configured source record, while a clear or unavailable result does not prove the absence of Sybil activity.

What the analysis covers

Behavioral heuristic

Summarize activity duration, cadence, diversity, cross-chain breadth, and available value signals as a heuristic rather than a definitive identity judgment.

Source-specific matches

Report positive matches from configured public Sybil, sanctions, and blacklist sources with each source’s status kept visible.

Separate evidence states

Keep list matches, behavioral scores, and unavailable checks separate so one signal does not masquerade as another kind of evidence.

Useful for

  • Screening addresses for public-list matches
  • Comparing behavioral indicators across supported chains
  • Prioritizing addresses for deeper graph and funding-path investigation

Important limits

  • Behavioral similarity does not prove common ownership or coordinated control.
  • Public lists may be incomplete, delayed, or unavailable at scan time.
  • A clear result is not proof that an address has never participated in Sybil activity.

Frequently asked questions

What is Sybil wallet analysis?

It reviews public address behavior and available list-based evidence for patterns sometimes associated with coordinated or duplicate identities.

Can behavioral analysis prove common wallet ownership?

No. Similar timing, funding, or protocol activity can support further investigation but does not prove that addresses share an owner.

Are blacklist matches and behavioral scores the same thing?

No. WalletGenome reports direct public-list matches separately from its behavioral probability model.