立刻保护您的项目
借助最大的web3安全提供商来增强您的项目。
CertiK 安全专家将审核您的请求,并尽快与您联系。
CertiK SkyInsights 简介 CertiK SkyInsights API 是一种实时区块链智能解决方案,专为监管合规、反洗钱/打击资助恐怖主义行为筛查和风险监控而设计。
Overview
SkyInsights是什么?

SkyInsights is CertiK's on-chain intelligence and risk analytics platform designed to enhance security, compliance, and transparency across the blockchain ecosystem. It leverages a real-time API framework to deliver actionable insights by aggregating, classifying, and analyzing data from wallets, smart contracts, and transactions. SkyInsights provides entity attribution, behavioral classification, and risk scoring for addresses and transactions, enabling seamless integration with AML/CFT systems, transaction monitoring engines, and security infrastructures.

To get started with SkyInsights and access your API keys, please log in to the SkyInsights Dashboard. The dashboard provides a centralized interface to manage your API access, monitor usage, and explore additional features designed to enhance your security and compliance workflows.

这有什么关系?

As blockchain adoption accelerates, so do the sophistication and scale of on-chain threats, including scams, exploits, money laundering, and sanctioned activities. Traditional monitoring systems lack the granularity and real-time context required for effective detection and mitigation. SkyInsights addresses this gap by providing structured entity-behavior labeling and risk analytics backed by dynamic on-chain telemetry and CertiK's threat intelligence models. This empowers developers, compliance teams, and security platforms to make faster, data-driven decisions in identifying high-risk entities, preventing fraudulent activity, and enforcing regulatory and protocol-level security standards.

应用程序接口端点摘要
CertiK SkyInsights API 是一款实时 REST API 解决方案,可提供地址筛选、调查分析和交易监控服务,为您的反洗钱、反恐融资、安全和信任流程提供风险洞察。
以下 SkyInsights API 端点返回的信息基于从区块链生态系统和 web3 社区收集的数据。以下是这些端点的简要介绍:
  • kya/label - Identify your address's associated entity and behavior labels to better understand its role and activity on-chain.

  • kya/risk - Assess the risk level of an address based on its historical activity, patterns, and threat intelligence.

  • kya/screening - Retrieve all transactions involving risky counterparties for a given chain and address, including both token transfers and native-coin transfers.

  • kyt/risk - Assess the risk of a blockchain transaction by analyzing its characteristics and all participating addresses for suspicious or high-risk behavior.

有关每个端点的详细说明,请参阅 API 端点部分。
Label API Classification Design
1.设计理念
标签 API 将标签分为两个互补的类别:
  • Entity Labels(who it is)

  • Behavior Labels (what it does)

This “entity + behavior” split creates an efficient, clear, and systematic tagging framework—ideal for risk engines, graph-analysis, AML, profiling, and other real-world scenarios.
2.标签属性
系统中的每个标签都具有以下属性:
  • Category - The top-level classification (e.g. “Infra”, “Exchange”, “Dapp”).

  • Subcategory - A more granular division under the primary category (e.g. under “Exchange” you might have “CEX” or “Instant Swap”).

  • Label - A detailed human-readable description of the label (e.g. "Binance Deposit Wallet”).

  • Confidence - A numerical score indicating how certain the system is about this label (e.g. “100”, “90”).

  • Entity ID - A unique identifier linking this label back to the specific on-chain or off-chain entity(e.g. "lockbit”).

3.标签
实体标签
类别子类别说明
CeFiCEX中心化交易所(Binance、OKX、Coinbase)
Instant Swap无需 KYC 的交易所(FixedFloat、ChangeNow)
ATM加密 ATM 服务(CoinChimp)
Payment加密支付服务(BitPay)
P2P点对点交易
Custodian Wallet托管钱包服务(BitGo)
InfraMiner在 PoW 中记录和打包区块的实体
ValidatorPoS 中的封包器/制动器
BuilderMEV 生态系统中的程序块构造器
ProposerPBS 模式下的角色提议块(与验证者不同)
Staker区块链支架
Sequencer滚动链中的定序器
Account Abstraction账户抽象服务(Biconomy)
WalletWeb3 钱包 (MetaMask)
DappDEX去中心化交易所
ENSENS 名称
Lending借贷协议
Bridge跨链桥
NFT Market铸造、购买和销售 NFT 的市场
Staking投注平台
Derivatives衍生产品
Oracle为智能合约提供链外数据的服务
Payment支持基于加密货币的转账和结算的支付平台
Game基于区块链的游戏应用
Stablecoin链上法币资产
TokenERC20标准可替代代币
SPL索拉纳岛上的可互换令牌标准
ERC1155支持可替代和不可替代资产的多令牌标准
ERC721不可擦除代币的标准
行为标签
类别子类别说明
HackMalware恶意软件攻击
Ransomware勒索软件攻击
Private Key Compromise私人密钥泄漏导致资金被盗
Unauthorized Access未经授权访问服务器/钱包
Contract Exploit漏洞(重入性、甲骨文操纵、权限旁路等)
Social Engineering社会工程攻击(例如,假冒支持,诱骗用户透露种子短语)
Supply Chain Attack依赖关系或第三方组件受损
DNS HijackDNS 劫持重定向到钓鱼网站
Wallet Clipper剪贴板恶意软件攻击(篡改传输地址)
SanctionOFACOFAC SDN 名单
EU欧盟制裁名单
UN联合国制裁
UK英国 OFSI 制裁名单
CN中国外交部制裁名单
NBCTF与国家打击资助恐怖主义局有关的制裁
UK:HMT英国财政部(HM Treasury)——负责经济政策和制裁执行的英国政府部门
IL:Sanctioned以色列制裁名单——根据以色列制裁法指定的个人和实体的登记册(财政部)
JP:MOF日本财务省——负责财政政策和实施经济制裁的国家机构
FR:TrésorDirection générale du Trésor (French Treasury) - the branch of France's Ministry of Economy that implements financial sanctions
US:FBI Lazarus美国联邦调查局认定拉撒路集团为与朝鲜有关联的网络犯罪组织,该组织是美国执法部门的重点打击对象
US:OFAC外国资产控制办公室——负责管理和执行经济和贸易制裁的美国财政部办公室
GLOBAL:Ransomware全球勒索软件监视列表 - 一个跟踪参与勒索软件操作的加密地址和参与者的国际注册机构
ScamRugpull项目团队潜逃或突然撤走流动资金
Ponzi计划依赖新资金来支付早期投资者的费用
Fake Token发行伪造代币以吸引投资,然后甩卖价格或潜逃
Phishing利用假空投或钓鱼网站进行诈骗
Impersonation冒充官员或知名人士进行诈骗
Investment Fraud欺诈性投资平台或项目(承诺高回报)
Giveaway Scam伪造官方赠品,骗取转账或授权
Social Media Scam通过 Telegram、Twitter 等社交渠道进行诈骗
Honeypot假漏洞承诺盗窃巨额资产,却只损失汽油费
Illegal ActivityTerrorism资助恐怖主义
Child Abuse Content儿童性虐待材料 (CSAM) 资助
Darknet暗网市场交易
Blackmail加密勒索
Money Laundering洗钱
CyberCrime网络犯罪
Gambling赌博
BotTrading Bot频繁交易机器人,自动执行做市或套利操作
Sniping Bot狙击新代币列表或 NFT 造币厂的机器人
MEV Bot事务排序优化(MEV)机器人
Arbitrage Bot跨 DEX 套利机器人
Airdrop Hunter Bot批量空投索赔机器人
Front-running Bot前台运行机器人监控内存池中的待处理事务
Liquidation Bot借贷平台清算机器人(如 Aave 清算器)
Spam Bot垃圾邮件批量交易机器人(如 NFT 垃圾邮件空投)
MixerContract Mixer非托管、基于智能合约的混合器(如 Tornado Cash)
Custodial Mixer

Centralized or custodial mixing service (e.g., Blender.io, ChipMixer)

Privacy Pool使用零知识或新模型(如 Railgun、zk.money)的混合器
4.风险评估系统
CertiK SkyInsights 根据多种因素对地址和交易进行全面风险评估,包括
  • Label categories and Entity Ids (e.g., scams, mixers, sanctioned entities)

  • 历史上的链上行为
  • 内部战略算法
每个地址或交易的分配如下:
  • Risk Level - a qualitative classification (None, Low, Medium, High)

  • Risk Score - a quantitative value from 0 to 5

  • Risk Reasons - contextual reasons explaining why a risk is present (e.g.,a malicious label)

风险评分和等级映射
风险评分风险等级说明
0None无已知风险。地址或交易没有恶意行为或可疑关联的历史记录。
1Low地址或交易涉及非法活动的可能性较低。未发现异常行为。
2-3Medium由于间接接触或行为不确定,存在中度风险。可能存在一些可疑活动。
4-5High有强烈迹象表明参与了潜在的恶意或高风险活动,但尚未完全证实。
风险原因

The risk_reasons field provides the justification behind the assigned risk score and level. Each reason is prefixed to indicate its type.

如果地址或交易与风险标签相关联,则原因前缀为 label:,后跟完整的标签路径。例如
  • 标签:骗局/拉皮条
  • 标签:制裁/OFAC
  • 标签混音师/合同混音师
如果风险与已知实体有关联,但没有直接标注,则使用实体:前缀及其唯一标识符。例如
  • 实体:huione
  • 实体:blender_io
这些结构化的理由有助于提供清晰的、机器可读的解释,说明为何一个实体或交易被归类为潜在有害或高风险。