Blockchain address intelligence
Look up any blockchain address to get labels, sanctions status, risk scoring, and address classification across 18 supported chains.
1. What is Crypto Address Lookup?
The Crypto Lookup module lets you query any blockchain address and receive threat intelligence data: known labels, OFAC sanctions status, risk scoring, and address type classification (EOA, contract, etc.).
It combines static intelligence databases, community labels, live enrichment from on-chain data, and sanctions lists to provide a comprehensive risk profile.
- Labels — known identities from community, Arkham, and internal databases
- Sanctions — OFAC SDN list with authority and listing date
- Risk Score — 0–100 composite score with level (low, medium, high, critical)
- Address Type — EOA, contract, or unknown
- Categories — exchange, DeFi, bridge, mixer, scam, sanctioned, etc.
2. How to look up an address
From the search bar
Paste any blockchain address directly into the mlab search bar. EVM (0x...), Bitcoin (1.../3.../bc1...), and Tron (T...) addresses are automatically detected and routed to the crypto lookup page.
From the API
Use GET /api/v1/scan/crypto?address=...&chain=... with your API key.
See the API documentation for full details.
From the MCP integration
Use the scan_crypto tool from any connected AI assistant.
See the MCP documentation.
Chain auto-detection
mlab automatically detects the chain for most address formats:
- 0x... (42 chars) → defaults to Ethereum (EVM)
- 1.../3.../bc1... → Bitcoin
- T... (34 chars) → Tron
For EVM addresses on other chains (BSC, Polygon, Arbitrum, etc.),
specify the chain manually via the chain parameter in the API.
Solana and TON addresses cannot be auto-detected from the search bar
because their base58/base64 format overlaps with other data types.
Use the API or MCP tool with chain=SOL or chain=TON.
3. Supported chains
| Chain | ID | Layer | Token | Auto-detect | |
|---|---|---|---|---|---|
 |
Ethereum | ETH |
Layer 1 | ETH | Yes |
 |
BNB Chain | BSC |
Layer 1 | BNB | chain=BSC |
 |
Polygon | POLYGON |
Layer 2 | POL | chain=POLYGON |
 |
Arbitrum | ARBITRUM |
Layer 2 | ETH | chain=ARBITRUM |
|
Optimism | OPTIMISM |
Layer 2 | ETH | chain=OPTIMISM |
|
Base | BASE |
Layer 2 | ETH | chain=BASE |
 |
Avalanche | AVAX |
Layer 1 | AVAX | chain=AVAX |
|
Blast | BLAST |
Layer 2 | ETH | chain=BLAST |
 |
Mantle | MANTLE |
Layer 2 | MNT | chain=MANTLE |
 |
Bitcoin | BTC |
Layer 1 | BTC | Yes |
 |
Solana | SOL |
Layer 1 | SOL | chain=SOL |
 |
Tron | TRX |
Layer 1 | TRX | Yes |
 |
TON | TON |
Layer 1 | TON | chain=TON |
 |
Dogecoin | DOGE |
Layer 1 | DOGE | chain=DOGE |
An address starting with 0x could belong to Ethereum, BSC, Polygon,
Arbitrum, or any other EVM chain. mlab defaults to Ethereum when auto-detecting.
To query a different EVM chain, pass chain=BSC, chain=POLYGON, etc.
4. Risk scoring
Each address receives a risk score from 0 to 100 based on its categories, labels, and sanctions status. The score is broken down into four levels to help triage decisions.
| Level | Score | Meaning |
|---|---|---|
| low | 0–29 | No known risk indicators |
| medium | 30–59 | Minor risk signals (e.g. bridge usage) |
| high | 60–79 | Significant risk indicators |
| critical | 80–100 | Mixer, scam, or sanctioned address |
Category risk weights
Categories directly influence the risk score:
| Category | Weight |
|---|---|
| eoa, contract, exchange, defi, nft_marketplace, multisig | 0 |
| bridge | 10 |
| mixer | 80 |
| scam | 90 |
| sanctioned | 100 |
5. Data sources
Intelligence layers
- Static data — curated labels for major exchanges, DeFi protocols, mixers, and bridges
- Community labels — ~83k labeled Ethereum addresses from the community
- Darklist — known phishing and scam addresses
- OFAC SDN — 651 sanctioned crypto addresses, updated daily
- Arkham Intel — live enrichment with on-demand lookups, cached locally
Address type detection
- EVM chains — uses
eth_getCodeto distinguish EOA from contract - Bitcoin / Dogecoin — prefix-based detection
- Solana — RPC account lookup
- Tron — API-based detection
- TON — API-based detection
6. Daily quotas
Crypto lookups share your organization's daily quota, which resets every 24 hours.
| Plan | Lookups / day |
|---|---|
| Anonymous | 3 |
| Free | 10 |
| Pro | 30 |
| Team | 100 |
| Enterprise | Unlimited |