An institutional-grade Python and SQL compliance engine designed to calculate dynamic risk scores (0–100) and automate alert triage for EVM wallet addresses based on direct and indirect counterparty exposure.
-
Automated API Data Extraction: Programmatically pulls raw ledger transactions via Etherscan API V2.
-
Threat Intelligence Matching: Screens counterparties against a localized database of OFAC SDN-sanctioned addresses, mixing protocol smart contracts (e.g., Tornado Cash), and DEX router contracts.
-
Dynamic Risk Scoring Algorithm:
$$\text{Risk Score} = \min(100, \text{Sanctions Direct Hits (100 pts)} + \text{Mixer Interactions (80 pts)} + \text{DEX Interactions (5 pts)})$$ -
Automated Alert Triage Levels:
-
🚨 CRITICAL (90-100): Immediate account freeze, asset block, and SAR escalation. -
🔶 HIGH (60-89): Manual Enhanced Due Diligence (EDD) required. -
🟡 MEDIUM (30-59): Enhanced Transaction Monitoring. -
🟢 LOW (0-29): Normal operations pass.
-
Crypto-OnChain-Risk-Scorer/
├── data/
│ └── sanctions_and_risk_db.json # Known high-risk entity threat DB
├── scripts/
│ ├── risk_calculator.py # Core Python API & risk engine
│ └── query_exposure.sql # SQL query for Dune Analytics / Snowflake
└── README.md # Engine documentation