Skip to content

Glossary

The public identifier of a wallet or contract on an EVM chain: 0x followed by 40 hexadecimal characters. One key gives the same address on every EVM chain.

The word for a score range: exposed, traceable, moderate or private. See Privacy Score.

A service that moves funds from one chain to another. It takes funds on one side and pays out on the other, usually minus a fee.

The most points one detector can take off the score, however much it finds.

The number that identifies an EVM chain, for example 1 for Ethereum, 8453 for Base and 4663 for Robinhood Chain.

How sure the engine is that a pattern is real, from 0 to 100%. A link between wallets always has one, never reaches 100%, and is printed with a word: Likely, Possible or Weak, for example “Likely 82%”.

An address that holds code instead of being controlled by a key alone. Routers, tokens and bridges are contracts.

An address this wallet sent funds to or received funds from.

What a scan could and could not read, chain by chain: scanned, partial, no activity, error or skipped, plus whether a history was cut off and the known limits of the chain.

A finding the holder gate can hide: linked wallets and wallets that share your funder. In V1 the gate is off and every finding is visible. See $NYMRA token.

An address an exchange gives one customer account for paying in. It forwards what it receives to the exchange’s own wallets.

The part of the engine that looks for one kind of leak. A scan runs seven of them.

An Ethereum upgrade that lets a normal wallet delegate to smart-account code. The code it delegates to can name the wallet app.

Ethereum Name Service: human-readable names such as name.eth. A primary name is the name an address shows as its own. Text records on a name can hold an X handle, a website or an email.

The transactions, addresses, labels or statistics behind a finding, with explorer links where they exist.

A wallet run by a centralized exchange, often labelled in public lists. Also called a hot wallet.

A website and API that shows a chain’s public data, such as Blockscout or Routescan.

One concrete way the public data ties a wallet to something else. It has a rule id, a severity, a confidence, a cost and evidence.

The wallet whose coins paid for the first transaction an address signed on a chain: it sent the earliest single transfer that could pay for that transaction on its own, counting only transfers of at least 10% of what came in before it. Also called the funder. A chain where the address never signed a transaction has no funder.

A switch that hides deep findings below a set amount of $NYMRA. Its threshold is 0 in V1, so it is off.

Native coins moved by a contract rather than by a plain transaction, for example a swap paid out in ETH. Only visible on chains with traces.

An address that probably belongs together with the scanned one, shown with Likely, Possible or Weak, its confidence and the reasons. Never a statement of who owns it.

An address made to start and end like yours, or like a wallet you deal with, so that a shortened address reads the same. Scammers use them for address poisoning. A scan lists them as warnings, in full, and never as a linked wallet.

A wallet with a public name, a primary ENS name or a public label, never scores above the top of the exposed band, whatever else the scan finds. See Privacy Score.

In these rules: an address that signed a transaction to the wallet, or that the wallet sent plain coins to, and that is not a contract, an exchange or a service.

A number from 0 to 100 for how hard a wallet is to follow or link. 100 is most private.

The Nymra server a scan uses when a public explorer refuses your browser, and for the few chains whose free API needs a key. It forwards the request, keeps no log, and only talks to the explorers and nodes in the chain register. See Privacy and data.

The interface of a chain’s node. A scan uses public RPC nodes for the quick check per chain and for ENS records.

The name of the rule behind a finding, for example cex_exposure.deposit_address. Every rule is listed on its finding page.

A wallet run by a service rather than a person: a bot, a bundler, a deployer, a bridge relayer, a market maker or a payout wallet, and any wallet that sent 2,000 or more transactions on a chain. A service is never a link. See Findings.

How much a finding would cost if it were certainly true: info, low, medium, high or critical.

Node data that shows what contracts did inside a transaction. Without traces, internal transfers are invisible.

A history that was cut off at the read limit: older activity was not read. The result says so.

Something a result points out that is not a finding and costs no points. In V1: look-alike addresses (address poisoning).