Get evidence you can defend, not just a score.
A risk number without a reason is hard to act on and harder to justify. VikingIntel attaches the underlying evidence families to every classification, so a decision can be reviewed and explained after the fact.
Entity attribution
Wallets are linked to exchanges, bridges, mixers, and services only where verified registry evidence exists — attribution is never guessed to fill a gap.
Risk signals with reasons
Risk scores ship with per-component detail and confidence: what was measured, which signals fired, and what remains unknown.
Known-destination screening
Screen addresses against the verified registry of exchanges, bridges, and mixers — with exposure labeled at the exact hop it occurs.
Export a report suitable for review.
Investigation ID, methodology, typed findings, entity exclusions, and a versioned report — structured for a compliance file, not just a dashboard screenshot.
- Investigation ID
- inv_8f3a2c
- Cluster ID
- sybil-cluster-0192
- Wallet count
- 41
- Classification
- Coordinated
- Confidence
- High
- Evidence families
- 3 / 4
- Entity exclusions
- 1 (Binance Hot Wallet)
- Methodology
- engine v1.1.0 · signal-family model
- Generated
- 2026-08-04T14:36:11Z
- Report hash
- sha256:9a41…e02c
Illustrative example — mock cluster, report hash, and Verified badge.
Know which model version produced a conclusion.
Every report is stamped with the methodology version that generated it, so past conclusions stay reviewable even as the underlying model improves.
Each revision keeps its hash and methodology — superseded reports are never overwritten.
A changed mind is a new row, never a rewrite.
Decisions and observations are recorded as new rows, each stamped with the method that produced it. Past conclusions stay intact — the trail is the audit.
One-off reviews and ongoing exposure.
Screen a wallet or a list when it crosses your desk; put addresses under watch when the relationship continues. New activity raises alerts with the evidence attached — so periodic review becomes continuous coverage.