20+ chains. Entity classification. Crosschain fund tracing.
Screen counterparties, trace fund flows across bridge hops, monitor DeFi protocol risk, and meet NYDFS-grade compliance requirements. Standard SQL. Every chain.
In September 2025, the New York Department of Financial Services expanded its blockchain analytics guidance beyond virtual currency businesses to all New York Banking Organizations. Banks now must use onchain analytics for customer screening, source of funds verification, sanctions monitoring, and counterparty risk assessment. Simultaneously, 2026 IRS reporting mandates require all major digital asset platforms to report customer transaction details, and MiCA is creating cross-jurisdictional compliance demands across the EU.
If you can't independently verify onchain counterparties, the regulators will notice.
All NY Banking Organizations must use blockchain analytics for wallet screening, source of funds verification, sanctions monitoring, and counterparty risk assessment.
All major digital asset platforms must report gross sales and cost basis details to the IRS. Accurate onchain transaction history is mandatory.
EU's MiCA regulation, UK FCA framework, and Asia-Pacific regulatory developments require crosschain, multi-jurisdictional data infrastructure.
01 / The risk lifecycle
Whether you're screening counterparties before onboarding, monitoring ongoing transaction flows, or investigating crosschain fund movement after an alert fires.
Know who you're dealing with before you transact
Every AML program starts with counterparty identification. Flipside maintains curated entity labels across 20+ blockchains with a hierarchical classification system covering exchanges, DeFi protocols, token contracts, and more. On Bitcoin, address clustering groups related addresses into entities based on UTXO spending patterns.
Organizations can build multi-factor wallet risk scores that update continuously rather than only at periodic KYC reviews.
Continuous monitoring with multi-hop provenance tracing
Continuous transaction monitoring sits at the core of AML compliance. Organizations need to trace where funds came from, detect suspicious patterns, and reconstruct multi-hop transfer chains across both native assets and tokens.
Flipside's unified transfer tables include pre-calculated USD values for threshold-based alerting. EVM execution trace data exposes internal contract-to-contract calls and hidden value transfers invisible in standard transaction views — the kind of detail forensic investigations depend on.
End-to-end bridge tracing with entity classification at every hop
Crosschain bridge activity is a growing compliance blind spot. Billions in illicit activity have been identified flowing through bridges and chain-hopping patterns designed to obscure fund origins.
Flipside's crosschain unified views and dedicated bridge activity tables trace funds from source chain through bridge to destination, with counterparty classification at each hop. Axelar General Message Passing data adds visibility into transfers across 50+ connected chains.
Early warning signals for exploits, bank runs, and rug pulls
Organizations evaluating DeFi exposure need to assess smart contract risk, monitor protocol health, and detect warning signals before losses materialize.
Flipside's decoded event logs surface admin actions like ownership transfers, contract pauses, and upgrade events in near-real-time. Protocol TVL tracking, liquidation cascade detection, and flash loan monitoring add additional warning signals before losses materialize.
Continuous counterparty surveillance, not one-time checks
OFAC compliance requires screening all onchain counterparties against sanctions lists, including indirect exposure through intermediary wallets. One-time checks aren't enough — organizations need continuous monitoring with automated alerts when counterparties are flagged.
Flipside's crosschain entity labels combined with transfer data enable counterparty screening across all chains, indirect exposure monitoring, and continuous wallet surveillance. Daily balance snapshots support point-in-time proof of holdings and counterparty solvency verification.
02 / The data advantage
USD pricing, decimal adjustments, and entity labels are already joined in every table. The path from raw signal to regulatory report is shorter than you'd expect.
Consistent label taxonomy across 20+ blockchains with hierarchical type/subtype classification. Screen counterparties across every chain in a single query.
Address clustering and entity-to-entity transfer views for UTXO chain analytics. Queryable via SQL — a capability most competitor platforms lack.
Unified crosschain views, bridge activity data, and Axelar GMP coverage. Trace funds from source through bridge to destination without switching tools.
Internal contract-to-contract calls and hidden value transfers exposed across all EVM chains. Standard transaction views don't show this — forensic investigators need it.
ez_ tables with USD pricing, decimal adjustments, and entity labels already joined. Go from raw signal to regulatory reporting without data engineering.
Pre-aggregated hourly network metrics enable anomaly detection without scanning full transaction tables. Continuous monitoring at enterprise scale.
03 / The data layer
Counterparty screening, multi-hop fund tracing, and network anomaly detection. Standard SQL against pre-built compliance tables.
Explore the full schemaClassify every address a wallet has interacted with
Join transfer data with entity labels to identify every counterparty a wallet has transacted with. Each row includes the entity classification (exchange, DeFi protocol, unknown) and USD value — the building blocks of a wallet risk profile.
-- Counterparty analysis with entity labels
SELECT
t.to_address,
l.label_type, l.label_subtype, l.label,
COUNT(*) AS tx_count,
SUM(t.amount_usd) AS total_usd
FROM ethereum.core.ez_native_transfers t
LEFT JOIN ethereum.core.dim_labels l
ON t.to_address = l.address
WHERE t.from_address = LOWER('0xTargetWallet')
AND t.block_timestamp >= '2025-01-01'
GROUP BY 1, 2, 3, 4
ORDER BY total_usd DESCFollow funds through intermediary wallets
Trace where funds went after leaving a target wallet. This recursive pattern follows the first hop, then can be extended to trace second and third hops. Combined with entity labels, you can identify when funds reach a known entity (exchange deposit, mixer, sanctioned address).
-- First-hop fund destinations with entity labels
SELECT
t.to_address,
l.label_type, l.label,
t.amount_usd,
t.block_timestamp
FROM ethereum.core.ez_native_transfers t
LEFT JOIN ethereum.core.dim_labels l
ON t.to_address = l.address
WHERE t.from_address = LOWER('0xSuspiciousWallet')
AND t.amount_usd > 1000
ORDER BY t.block_timestampHourly metrics for detecting unusual activity patterns
Pre-aggregated hourly network metrics let you detect anomalies without scanning full transaction tables. Spikes in transaction volume, failure rates, new address creation, or gas prices can signal exploits, wash trading, or coordinated activity.
-- Detect hourly transaction volume anomalies
SELECT
block_timestamp_hour,
transaction_count,
transaction_count_success,
transaction_count_failed,
unique_from_count AS active_senders
FROM ethereum.stats.ez_core_metrics_hourly
WHERE block_timestamp_hour >= DATEADD('day', -7, CURRENT_TIMESTAMP())
AND transaction_count > (
SELECT AVG(transaction_count) * 2
FROM ethereum.stats.ez_core_metrics_hourly
WHERE block_timestamp_hour >= DATEADD('day', -30, CURRENT_TIMESTAMP())
)
ORDER BY block_timestamp_hour DESC04 / Compliance mapping
Here's how Flipside's data maps to each of the five core NYDFS compliance requirements.
| Requirement | How Flipside Delivers |
|---|---|
| Customer Screening | Entity classification and Bitcoin address clustering for wallet identification across all chains |
| Source of Funds | Multi-hop fund provenance tracing through native transfers, token transfers, and execution traces |
| Sanctions Monitoring | Crosschain entity labels for counterparty screening, combined with transfer data for ongoing monitoring |
| Counterparty Risk | Daily balance snapshots for solvency verification, network health metrics, and protocol TVL monitoring |
| Ongoing Monitoring | Hourly granularity across all data tables enables continuous rather than periodic compliance |
05 / Chain coverage
| Category | Chains |
|---|---|
| EVM L1s | Ethereum, BSC, Avalanche, Gnosis |
| EVM L2s / Rollups | Polygon, Arbitrum, Optimism, Base, Ink, Monad, Somnia |
| Non-EVM | Solana, Bitcoin, NEAR, SUI, Flow, Cosmos, Axelar, Canton, Aptos |
| Crosschain | Unified crosschain.* views spanning all EVM chains |
20+
Blockchains with entity labels
700M+
Labeled addresses for screening
Hourly
Monitoring granularity
50+
Chains via Axelar GMP bridge data
Flipside provides entity-classified addresses across 20+ blockchains with hierarchical label taxonomies (CEX, DEX, DeFi protocol, token contract, hot wallet, treasury, deposit address, and more). Combined with native and token transfer tables that include pre-computed USD values, organizations can screen counterparties, trace fund provenance through multi-hop transfers, and reconstruct transaction histories for suspicious activity reports. Bitcoin-specific address clustering groups related addresses into entities based on spending patterns.
The September 2025 NYDFS guidance requires all New York Banking Organizations to use blockchain analytics for customer screening, source of funds verification, sanctions monitoring, and counterparty risk assessment. Flipside's crosschain entity labels enable wallet screening across every supported chain in a single query. Transfer tables with execution traces support multi-hop fund provenance tracing. Daily balance snapshots provide counterparty solvency monitoring. Hourly network metrics enable continuous activity monitoring rather than periodic reviews.
Yes. Flipside provides dedicated bridge activity tables covering major bridge protocols with sender addresses, destination chains, and USD values. Axelar-specific bridge and General Message Passing data spans 50+ connected chains. Crosschain entity labels enable counterparty identification at every hop, so you can trace funds from source chain through bridge to destination without switching tools or query environments.
Flipside provides contract metadata (creator address, deployment timestamp, verification status), decoded event logs for monitoring admin actions like ownership transfers and contract pauses, protocol TVL tracking for detecting cliff drops, lending liquidation data for cascade detection, flash loan volume monitoring, and DEX swap anomaly data. These signals create an early warning system for protocol-level risk events like exploits or rug pulls.
Flipside classifies wallet addresses across 20+ blockchains using a hierarchical type/subtype system. Label categories include exchanges (CEX, DEX), DeFi protocols, token contracts, contract deployers, hot wallets, deposit addresses, and treasury wallets. Bitcoin uses address clustering based on UTXO spending patterns to group related addresses into entities. Entity-to-entity transfer views aggregate individual address transfers to the entity level, simplifying high-level monitoring without losing the underlying detail.
Flipside covers 20+ chains including Ethereum, Solana, Bitcoin, Polygon, Arbitrum, Optimism, Base, BSC, Avalanche, Aptos, NEAR, SUI, Gnosis, Ink, Monad, Somnia, Flow, Cosmos, Axelar, and Canton. Unified crosschain.* views enable screening and monitoring across all EVM chains in a single query. Axelar GMP data extends bridge tracing to 50+ connected chains.
Get Started
Entity classification, fund flow tracing, and compliance-ready tables across 20+ chains. Tell us what you're building and we'll show you the data.