{
  "_schema": {
    "version": 1,
    "description": "Static, auditable mapping of Bitcoin addresses to known entities. Used client-side only for labeling in Briefs and future tools. All entries must include a public source link or reference.",
    "fields": {
      "address": "Base58 or bech32 Bitcoin address (exact match)",
      "entity": "Human readable name (e.g. 'Binance Hot Wallet')",
      "category": "exchange | custody | miner | service | unknown",
      "confidence": "high | medium | low  —  how certain the attribution is from public sources",
      "source": "URL or description of where this attribution was documented (required)",
      "note": "Optional short clarification"
    },
    "usage": "Lookup is exact address match. Future versions may support scriptPubKey patterns or clusters but remain static JSON.",
    "maintenance": "Manually curated. Add entries only when multiple independent public observations or official disclosure exist. Prefer primary sources."
  },
  "addresses": [
    {
      "address": "bc1qgdjqv0av3q56jvd82tkdj3rq7lq6y0v9n9y3y0",
      "entity": "Binance",
      "category": "exchange",
      "confidence": "high",
      "source": "mempool.space + repeated public exchange flow reports and on-chain analyses",
      "note": "Frequently referenced Binance hot wallet."
    },
    {
      "address": "1NDyJtNTjmwk5xPNhjgAMu4HDHigtobu1s",
      "entity": "Binance",
      "category": "exchange",
      "confidence": "high",
      "source": "Multiple public on-chain analyses and exchange flow reports",
      "note": "Legacy Binance hot wallet."
    },
    {
      "address": "bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh",
      "entity": "2020 Twitter hack (scam address)",
      "category": "service",
      "confidence": "high",
      "source": "Widely documented as the BTC address used in the July 2020 Twitter account hijack scam (FBI indictment / Chainalysis / major press coverage)",
      "note": "Previously mislabeled Coinbase; corrected to its true, well-documented identity as the 2020 Twitter hack scam address."
    },
    {
      "address": "3Cbq7aT1tY8kMxWLbitaG7yT6bPbKChq64",
      "entity": "Huobi",
      "category": "exchange",
      "confidence": "high",
      "source": "Exchange flow attribution datasets and public explorer labels",
      "note": ""
    },
    {
      "address": "1LQoWist8KkaUXSPKZHNvEyfrEkPHzSsCd",
      "entity": "Bitfinex",
      "category": "exchange",
      "confidence": "high",
      "source": "Bitfinex transparency reports + historic public labeling after incidents",
      "note": ""
    },
    {
      "address": "bc1qm34lsc65zpw79lxes69zkqmk6ee3ewf0j77s3h",
      "entity": "Bitfinex",
      "category": "exchange",
      "confidence": "high",
      "source": "Common public explorer label for Bitfinex addresses",
      "note": ""
    },
    {
      "address": "1P5ZEDWTKTFGxQjZphgWPQUpe554WKDfHQ",
      "entity": "Bitstamp",
      "category": "exchange",
      "confidence": "high",
      "source": "Bitstamp public wallet references and explorer labels",
      "note": ""
    },
    {
      "address": "3Kzh9qAqVWQhEsfQz7zEQL1EuSx5tyNLNS",
      "entity": "Kraken or OKX (sources disagree)",
      "category": "exchange",
      "confidence": "low",
      "source": "Conflicting public attributions: Kraken clustering lists vs. OKEx/OKX identification in 2020 OKEx withdrawal-freeze coverage (Brave New Coin / BitcoinTalk)",
      "note": "Attribution disputed across public sources; confidence lowered to low. Treat as uncertain."
    },
    {
      "address": "1F1tAaz5x1HUXrCNLbtMDqcw6o5GNn4df",
      "entity": "Early miner / Satoshi-era wallet",
      "category": "miner",
      "confidence": "medium",
      "source": "Public blockchain history (early coinbase outputs and genesis era addresses)",
      "note": "Reference address for historic analyses."
    },
    {
      "address": "34xp4vRoCGJym3xR7yCVPFHoCNxv4Twseo",
      "entity": "Binance",
      "category": "exchange",
      "confidence": "high",
      "source": "Public github gist exchange wallet lists + blockchain.com / spark.money attributions (widely referenced Binance cold wallet)",
      "note": "One of the largest and most referenced Binance cold wallets in public data."
    },
    {
      "address": "3D2oetdNuZUqQHPJmcMDDHYoqkyNVsFk9r",
      "entity": "Bitfinex",
      "category": "exchange",
      "confidence": "high",
      "source": "Public lists on Bitcoin StackExchange + github gists + block explorers (historical Bitfinex cold wallet, still referenced)",
      "note": ""
    },
    {
      "address": "14eQD1QQb8QFVG8YFwGz7skyzsvBLWLwJS",
      "entity": "Kraken",
      "category": "exchange",
      "confidence": "high",
      "source": "Public github gist lists + block explorer attributions for Kraken.com wallets",
      "note": ""
    },
    {
      "address": "1A7znRYE24Z6K8MCAKXLmEvuS5ixzvUrjH",
      "entity": "Kraken",
      "category": "exchange",
      "confidence": "high",
      "source": "Public github gist + explorer lists for Kraken wallets",
      "note": ""
    },
    {
      "address": "3J98t1WpEZ73CNmQviecrnyiWrnqRhWNLy",
      "entity": "Unknown large holder / possible OTC or custody",
      "category": "custody",
      "confidence": "low",
      "source": "Observed repeatedly in large historic transfers; no authoritative public attribution at inclusion time",
      "note": "High-value historic example. High uncertainty."
    },
    {
      "address": "12KKDt4Mj7N5UAkQMN7LtPZMayenXHa8KL",
      "entity": "Foundry USA Pool",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (Foundry USA payout_addresses) + https://mempool.space/api/address/12KKDt4Mj7N5UAkQMN7LtPZMayenXHa8KL",
      "note": "Canonical pool payout address; verified ~2,491 funded coinbase outputs on-chain."
    },
    {
      "address": "1FFxkVijzvUPUeHgkFjBk2Qw8j3wQY2cDw",
      "entity": "Foundry USA Pool",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (Foundry USA payout_addresses)",
      "note": "Secondary Foundry USA pool payout address."
    },
    {
      "address": "bc1qxhmdufsvnuaaaer4ynz88fspdsxq2h9e9cetdj",
      "entity": "Foundry USA Pool",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (Foundry USA payout_addresses)",
      "note": "Bech32 Foundry USA pool payout address (current, Taproot-era)."
    },
    {
      "address": "1KFHE7w8BhaENAswwryaoccDb6qcT6DbYY",
      "entity": "F2Pool",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (F2Pool payout_addresses) + https://mempool.space/api/address/1KFHE7w8BhaENAswwryaoccDb6qcT6DbYY",
      "note": "F2Pool legacy payout; verified ~93,521 funded coinbase outputs on-chain."
    },
    {
      "address": "bc1qf274x7penhcd8hsv3jcmwa5xxzjl2a6pa9pxwm",
      "entity": "F2Pool",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (F2Pool payout_addresses)",
      "note": "F2Pool bech32 payout address (current era); verified 338 funded txs."
    },
    {
      "address": "12dRugNcdxK39288NjcDV4GX7rMsKCGn6B",
      "entity": "AntPool",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (AntPool payout_addresses)",
      "note": "AntPool payout address. AntPool rotates ~40 addresses; this is one representative from the canonical dataset."
    },
    {
      "address": "3FaYVQF6wCMUB9NCeRe4tUp1zZx8qqM7H1",
      "entity": "AntPool",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (AntPool payout_addresses)",
      "note": "AntPool P2SH payout address."
    },
    {
      "address": "1CK6KHY6MHgYvmRQ4PAafKYDrg1ejbH1cE",
      "entity": "Braiins Pool (formerly Slush Pool)",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (Braiins Pool payout_addresses) + https://mempool.space/api/address/1CK6KHY6MHgYvmRQ4PAafKYDrg1ejbH1cE",
      "note": "Oldest Bitcoin pool (est. 2010), rebranded Braiins. Verified ~28,810 funded coinbase outputs on-chain."
    },
    {
      "address": "1AqTMY7kmHZxBuLUR5wJjPFUvqGs23sesr",
      "entity": "Braiins Pool (formerly Slush Pool)",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (Braiins Pool payout_addresses)",
      "note": "Secondary Braiins/Slush Pool payout address; verified 5,197 funded txs."
    },
    {
      "address": "1Bf9sZvBHPFGVPX71WX2njhd1NXKv5y7v5",
      "entity": "BTC.com Pool",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (BTC.com payout_addresses)",
      "note": "BTC.com pool legacy payout address (coinbase tag /BTC.COM/)."
    },
    {
      "address": "bc1qjl8uwezzlech723lpnyuza0h2cdkvxvh54v3dn",
      "entity": "BTC.com Pool",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (BTC.com payout_addresses)",
      "note": "BTC.com pool bech32 payout address (current era)."
    },
    {
      "address": "122pN8zvqTxJaA8fRY1PDBu4QYodqE5m2X",
      "entity": "Binance Pool",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (Binance Pool payout_addresses)",
      "note": "Binance Pool payout address."
    },
    {
      "address": "3L8Ck6bm3sve1vJGKo6Ht2k167YKSKi8TZ",
      "entity": "Binance Pool",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (Binance Pool payout_addresses)",
      "note": "Binance Pool P2SH payout address."
    },
    {
      "address": "1MkCDCzHpBsYQivp8MxjY5AkTGG1f2baoe",
      "entity": "Luxor Pool",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (Luxor payout_addresses)",
      "note": "Luxor pool payout address (coinbase tag /LUXOR/)."
    },
    {
      "address": "15MdAHnkxt9TMC2Rj595hsg8Hnv693pPBB",
      "entity": "MARA Pool (Marathon Digital)",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (MARA Pool payout_addresses) + https://marapool.com",
      "note": "Marathon Digital proprietary pool (marapool.com); verified 7,067 funded txs on-chain."
    },
    {
      "address": "1A32KFEX7JNPmU1PVjrtiXRrTQcesT3Nf1",
      "entity": "MARA Pool (Marathon Digital)",
      "category": "miner",
      "confidence": "high",
      "source": "https://github.com/mempool/mining-pools/blob/master/pools-v2.json (MARA Pool payout_addresses)",
      "note": "Secondary MARA Pool payout address."
    },
    {
      "address": "bc1q9w4g79ndel72lygvwtqzem67z6uqv4yncvqjz3yn8my9swnwflxsutg4cx",
      "entity": "Bybit",
      "category": "exchange",
      "confidence": "high",
      "source": "https://www.bybit.com/en/help-center/article/Bybit-Wallet-Addresses-Ownership-Explained (official disclosure with verification tx) + https://blockchair.com/bitcoin/transaction/8f853399722e55739b5e47c3cdfc2f01a24d1648f06c257650992dde227bf1f0",
      "note": "Officially disclosed Bybit BTC wallet; verified 16 funded txs on-chain."
    },
    {
      "address": "bc1qjysjfd9t9aspttpjqzv68k0ydpe7pvyd5vlyn37868473lell5tqkz456m",
      "entity": "Bybit",
      "category": "exchange",
      "confidence": "high",
      "source": "https://www.bybit.com/en/help-center/article/Bybit-Wallet-Addresses-Ownership-Explained (official disclosure with verification tx)",
      "note": "Officially disclosed Bybit BTC wallet; verified 119 funded txs on-chain."
    },
    {
      "address": "bc1q2qqqt87kh33s0er58akh7v9cwjgd83z5smh9rp",
      "entity": "Bybit",
      "category": "exchange",
      "confidence": "high",
      "source": "https://www.bybit.com/en/help-center/article/Bybit-Wallet-Addresses-Ownership-Explained (official disclosure with verification tx)",
      "note": "Officially disclosed Bybit BTC wallet; verified 270 funded txs on-chain."
    },
    {
      "address": "1GrwDkr33gT6LuumniYjKEGjTLhsL5kmqC",
      "entity": "Bybit",
      "category": "exchange",
      "confidence": "high",
      "source": "https://www.bybit.com/en/help-center/article/Bybit-Wallet-Addresses-Ownership-Explained (official disclosure with verification tx)",
      "note": "Officially disclosed Bybit BTC hot wallet; high-volume exchange wallet."
    },
    {
      "address": "bc1qs5vdqkusz4v7qac8ynx0vt9jrekwuupx2fl5udp9jql3sr03z3gsr2mf0f",
      "entity": "Bybit",
      "category": "exchange",
      "confidence": "high",
      "source": "https://www.bybit.com/en/help-center/article/Bybit-Wallet-Addresses-Ownership-Explained (official disclosure with verification tx)",
      "note": "Officially disclosed Bybit BTC wallet; verified 187 funded txs on-chain."
    },
    {
      "address": "16rF2zwSJ9goQ9fZfYoti5LsUqqegb5RnA",
      "entity": "OKX (legacy cold wallet)",
      "category": "exchange",
      "confidence": "medium",
      "source": "https://bitinfocharts.com/bitcoin/wallet/OKX",
      "note": "BitInfoCharts OKX-labeled cold wallet; verified 36 funded txs. Single explorer label, hence medium confidence."
    },
    {
      "address": "bc1q080rkmk3kj86pxvf5nkxecdrw6nrx3zzy9xl7q",
      "entity": "KuCoin (cold wallet)",
      "category": "exchange",
      "confidence": "high",
      "source": "https://www.kucoin.com/blog/transparency-and-trust-a-detailed-list-of-kucoin-s-wallets (official disclosure)",
      "note": "Officially disclosed KuCoin cold wallet; verified 300 funded txs on-chain."
    },
    {
      "address": "bc1qchctnvmdva5z9vrpxkkxck64v7nmzdtyxsrq64",
      "entity": "BitMEX (cold wallet)",
      "category": "exchange",
      "confidence": "high",
      "source": "https://www.coindesk.com/markets/2023/11/30/mysterious-address-that-added-10k-bitcoin-is-just-a-new-bitmex-wallet",
      "note": "Identified by CryptoQuant/CoinDesk as new BitMEX cold wallet during 3BMEX to bc1 migration; verified 958 funded txs on-chain."
    },
    {
      "address": "bc1qr4dl5wa7kl8yu792dceg9z5knl2gkn220lk7a9",
      "entity": "Crypto.com Exchange (cold wallet)",
      "category": "exchange",
      "confidence": "high",
      "source": "https://www.coincarp.com/currencies/bitcoin/richlist/ (Crypto.com label, corroborated by BitInfoCharts + Spark)",
      "note": "Labeled Crypto.com by CoinCarp, BitInfoCharts, and Spark; verified ~95,273 funded txs on-chain."
    },
    {
      "address": "162bzZT2hJfv5Gm3ZmWfWfHJjCtMD6rHhw",
      "entity": "Gate.io (cold wallet)",
      "category": "exchange",
      "confidence": "high",
      "source": "https://bitinfocharts.com/bitcoin/wallet/gate.io-coldwallet (corroborated by CoinCarp rich list + Spark)",
      "note": "Triple-sourced (BitInfoCharts, CoinCarp 'Gate', Spark 'Gate Cold Wallet'); verified 1,273 funded txs on-chain."
    },
    {
      "address": "1HpED69tpKSaEaWpY3Udt1DtcVcuCUoh2Y",
      "entity": "Gate.io (cold wallet, secondary)",
      "category": "exchange",
      "confidence": "medium",
      "source": "https://bitinfocharts.com/bitcoin/wallet/gate.io-coldwallet",
      "note": "Smaller/older Gate.io cluster member; single explorer label, hence medium confidence."
    },
    {
      "address": "3H5JTt42K7RmZtromfTSefcMEFMMe18pMD",
      "entity": "Poloniex (historic cold wallet)",
      "category": "exchange",
      "confidence": "high",
      "source": "https://bitinfocharts.com/bitcoin/wallet/Poloniex-coldwallet",
      "note": "Legacy P2SH multisig from Poloniex peak era (~2019); verified 83 funded txs on-chain."
    },
    {
      "address": "bc1qy3uw2kk45uj9vsy52rjfhydm2tnd6hreu8vha3",
      "entity": "Kraken (cold wallet)",
      "category": "exchange",
      "confidence": "medium",
      "source": "https://www.spark.money/address/bc1qy3uw2kk45uj9vsy52rjfhydm2tnd6hreu8vha3",
      "note": "Spark labels it Kraken cold wallet; consolidation-style (fewer txs), single source, hence medium confidence."
    },
    {
      "address": "bc1qa5wkgaew2dkv56kfvj49j0av5nml45x9ek9hz6",
      "entity": "US Government - Silk Road 'Individual X' seizure wallet (DOJ, Nov 2020)",
      "category": "custody",
      "confidence": "high",
      "source": "https://www.chainalysis.com/blog/silk-road-doj-seizure-november-2020/ (DOJ seized 69,370.22491543 BTC) + https://mempool.space/api/address/bc1qa5wkgaew2dkv56kfvj49j0av5nml45x9ek9hz6",
      "note": "DOJ seized funds from Silk Road hacker 'Individual X'. On-chain received 69,370.18 BTC (matches seizure)."
    },
    {
      "address": "bc1qmxjefnuy06v345v6vhwpwt05dztztmx4g3y7wp",
      "entity": "US Government - James Zhong Silk Road seizure address (DOJ, Nov 2022)",
      "category": "custody",
      "confidence": "high",
      "source": "https://www.justice.gov/usao-sdny/pr/us-attorney-announces-historic-336-billion-cryptocurrency-seizure-and-conviction (DOJ $3.36B Zhong seizure) + https://tokeninsight.com/en/tokenwiki/all/bitcoin-addresses-related-to-the-u.s.-government",
      "note": "Source address for the Zhong seizure; on-chain received 49,825.72 BTC (matches DOJ amount)."
    },
    {
      "address": "1CGA4srJbPWhtJb7ezgY6GQf4PKhFuzD9w",
      "entity": "Bitfinex 2016 hack - Lichtenstein consolidation wallet (DOJ-seized Feb 2022)",
      "category": "custody",
      "confidence": "high",
      "source": "https://www.trmlabs.com/resources/blog/bitfinex-money-launderers-plead-guilty-in-the-razzlekhan-case (IRS-CI Statement of Facts) + https://www.justice.gov/archives/opa/pr/bitfinex-hacker-sentenced-money-laundering-conspiracy-involving-billions-stolen",
      "note": "Received 119,754 stolen Bitfinex BTC in Aug 2016; ~94,636 BTC seized Feb 2022. Stolen-funds address."
    },
    {
      "address": "1FeexV6bAHb8ybZjqQMjJrcCrHGW9sb6uF",
      "entity": "Mt. Gox hack - stolen funds address (WizSec-traced; DOJ-attributed)",
      "category": "custody",
      "confidence": "high",
      "source": "https://www.justice.gov/archives/opa/pr/russian-nationals-charged-hacking-one-cryptocurrency-exchange-and-illicitly-operating-another (DOJ indictment of Bilyuchenko/Verner for Mt. Gox hack) + WizSec investigation",
      "note": "Received 79,957 BTC in a single tx on 2011-03-01; funds unmoved. NOTE: stolen funds (hack), not legitimate custody. Publicly claimed by Craig Wright as personal self-custody; the WizSec/DOJ attribution above disputes that claim."
    },
    {
      "address": "3LYJfcfHPXYJreMsASk2jkn69LWEYKzexb",
      "entity": "Binance (cold wallet / BTCB reserve)",
      "category": "custody",
      "confidence": "high",
      "source": "https://www.binance.com/en/blog/community/2895840147147652626 (Binance 'Our Commitment To Transparency', 2022-11-10)",
      "note": "Officially disclosed by Binance holding 117,351 BTC at snapshot."
    },
    {
      "address": "3M219KR5vEneNb47ewrPfWyb5jQ2DjxRP6",
      "entity": "Binance (cold wallet)",
      "category": "custody",
      "confidence": "high",
      "source": "https://www.binance.com/en/blog/community/2895840147147652626 (Binance 'Our Commitment To Transparency', 2022-11-10)",
      "note": "Officially disclosed by Binance holding 53,880 BTC at snapshot."
    },
    {
      "address": "bc1qgdjqv0av3q56jvd82tkdjpy7gdp9ut8tlqmgrpmv24sq90ecnvqqjwvw97",
      "entity": "Bitfinex (cold wallet 'bc1qg')",
      "category": "exchange",
      "confidence": "high",
      "source": "https://bitinfocharts.com/bitcoin/wallet/Bitfinex-coldwallet (corroborated by Spark)",
      "note": "The famous 'bc1qg' Bitfinex cold wallet (created Feb 2020); on-chain holding ~130,010 BTC. Distinct from the Binance hot-wallet entry."
    }
  ]
}