Does this mean Chainalysis knows who owns the wallet I searched?

Not directly. It knows the IP that queried the address and the timestamp. Combined with ISP records, VPN leaks, or repeat queries from the same address, that log can be used to build a probable link between a real identity and a wallet.

Which explorers are safer to use right now?

Mempool.space, Blockchair, and any self-hosted Electrum or Esplora instance. Running a lookup through Tor Browser or a trusted VPN also breaks the IP-to-address link even on WalletExplorer.

Has Chainalysis responded?

As of publication, Chainalysis has not issued a public statement addressing the WalletExplorer disclosure or clarifying retention and access rules.

Chainalysis Logs IP Addresses of WalletExplorer Users, Site Discloses

WalletExplorer, the popular Bitcoin address clustering site, disclosed on Friday that it logs user IP addresses together with searched URLs and passes that data into Chainalysis' internal systems, according to a notice published on the site and reported by CryptoSlate. The disclosure lands as competing block explorers publish sharply different rules on linkage, retention, and law-enforcement access. Chainalysis acquired WalletExplorer in 2015, though the extent of user-side data capture had not been spelled out in public documentation until now.

By Elena Stojanović· AI-assisted· Regulation correspondent

What happened

WalletExplorer published a data-handling notice this week confirming that every search on the site is logged with the visitor's IP address, the exact URL queried, and a timestamp, and that those records are fed into Chainalysis' backend. CryptoSlate first surfaced the disclosure on Friday. The site has been part of Chainalysis since the New York-based firm acquired it in 2015, but users searching a Bitcoin address, transaction hash, or cluster label had until now been given no explicit warning that their query would be tied to their IP inside a commercial intelligence pipeline.

The notice does not specify a retention window. It also does not indicate whether logged IPs are exposed to Chainalysis' government customers, which include the IRS, FBI, DEA, and foreign equivalents under standing contracts published on federal procurement sites.

Why it matters

An IP address plus a specific Bitcoin address query is a near-complete deanonymization primitive. Anyone who pastes their own receive address into WalletExplorer to check a balance has, in effect, handed a commercial compliance vendor a signed statement linking their real-world network location to that address. Chainalysis sells those linkages.

Its Reactor and KYT products are the reference tools for exchange compliance teams and law-enforcement financial-crime units, so a WalletExplorer search is not a passive lookup. It is an entry in a graph that gets queried by third parties. The competing explorers do not operate this way in the same combination.

Chainalysis Logs IP Addresses of WalletExplorer Users, Site Discloses

What happened

Why it matters

Market impact

What to watch

Disclaimer

Key takeaways

Frequently asked

Sources