Core concepts

The verdict

Identity

What the wallet is: an exchange hot wallet, an MEV bot, a drainer, a personal wallet. One per wallet, with a confidence. UNKNOWN when nothing is sure enough to say. See Identities.

Behavior

A pattern found in the wallet's activity: tips Jito, runs multiple wallets, uses a privacy pool. A wallet can show several; the strongest that describes what the wallet is becomes its identity. See Behaviors.

Risk

How dangerous it is to deal with the wallet: a score from 0 to 100 and a level, low, medium or high. See Risk score.

Confidence

How sure Iris is, from 0 to 100%. Given for the identity, for each behavior and for the risk. Low confidence on a low risk means “nothing found, but little to go on”.

Evidence

Why Iris says what it says: labels with their source, behaviors with example transactions, transfers with flagged wallets. Everything in a verdict can be checked.

Wallets and who they deal with

Counterparty

A wallet the analyzed wallet sent money to or received money from.

Label

A known fact about an address, from the knowledge base: sanctioned, exchange, drainer, protocol. Each names who said so. See Labels.

Flagged

A counterparty with a threat label or a risky verdict: sanctioned, frozen, drainer, scam, exploit, mixer.

Program

Code on Solana: a DEX, a lending protocol, a token program. Wallets call programs; Iris names the ones it knows.

Program-controlled account

An address no private key can sign for, owned by a program: a vault, a market, a pool. It moves money only when its program says so.

Hot wallet

An exchange's wallet that pays out withdrawals to its users. Deposit addresses, by contrast, are one per user and forward to the exchange.

Money

Flow

All the transfers from one wallet to another, added up: SOL and tokens, with their value in dollars.

Round trip

Two wallets that send money both ways. Drawn as one link with both amounts, not two separate arrows.

Swap

One transaction where the wallet sold one asset and bought another. Counted as a trade through a venue, not as a transfer to someone.

Venue

Where a swap happened: Jupiter, Raydium, Orca, a market maker. Shown with what was traded there.

Dust

Transfers worth next to nothing (under $1). Often spam or bait for copy-paste mistakes. Left out of rankings and hidden on the board on request.

Net transfers

What came in minus what went out, between wallets. Staking, swaps and fees are explained separately, so the number reflects money that really changed hands.

Depth

Depth is how many of the wallet's most recent transactions an analysis reads: 1,000 by default, up to 10,000. More depth sees further back and finds rarer patterns; less answers faster. Labels and the balance history cover the wallet's whole life whatever the depth.