Cryptocurrency Transforms

Track cryptocurrency wallet addresses across the dark web. These transforms help you identify payment methods, link vendor accounts across multiple marketplaces, and monitor financial flows.

Overview

The cryptocurrency transforms cover five major cryptocurrencies commonly used on dark web marketplaces:

• Bitcoin (BTC)
• Ethereum (ETH)
• Monero (XMR)
• Litecoin (LTC)
• Dogecoin (DOGE)

For each cryptocurrency, there are two transforms:

• Fetch - Extract wallet addresses from an onion site
• Search - Find all onion sites containing a specific wallet address

FetchBitcoinAddresses

Transform Name: FetchBitcoinAddresses

Description

Extracts all Bitcoin wallet addresses found on a specified onion site.

Input Entity

• hades.v2.onion - An onion site address

Output Entities

• hades.v2.bitcoinaddress - Bitcoin wallet addresses

Properties Returned

• Appearances - Number of times the address appears on the site
• Hades Link - Direct link to view the onion site in Project Hades web interface

Use Cases

• Identify payment addresses used by dark web marketplaces
• Track vendor Bitcoin wallets across multiple listings
• Monitor cryptocurrency payment methods

SearchByBitcoinAddress

Transform Name: SearchByBitcoinAddress

Description

Finds all onion sites that contain a specific Bitcoin wallet address.

Input Entity

• hades.v2.bitcoinaddress - A Bitcoin wallet address

Output Entities

• hades.v2.onion - Onion site addresses

Properties Returned

• Hades Link - Direct link to view each onion site in Project Hades web interface

Use Cases

• Track a vendor’s operations across multiple sites
• Identify all marketplaces accepting a specific Bitcoin wallet
• Link related onion sites through shared payment addresses

FetchEthereumAddresses

Transform Name: FetchEthereumAddresses

Description

Extracts all Ethereum wallet addresses found on a specified onion site.

Input Entity

• hades.v2.onion - An onion site address

Output Entities

• hades.v2.ethereumaddress - Ethereum wallet addresses

Properties Returned

• Appearances - Number of times the address appears on the site
• Hades Link - Direct link to view the onion site in Project Hades web interface

Use Cases

• Identify Ethereum payment methods on dark web services
• Track vendors using ETH for transactions
• Monitor smart contract addresses

SearchByEthereumAddress

Transform Name: SearchByEthereumAddress

Description

Finds all onion sites that contain a specific Ethereum wallet address.

Input Entity

• hades.v2.ethereumaddress - An Ethereum wallet address

Output Entities

• hades.v2.onion - Onion site addresses

Properties Returned

• Hades Link - Direct link to view each onion site in Project Hades web interface

Use Cases

• Track Ethereum-based vendors across multiple platforms
• Link sites accepting the same ETH wallet
• Identify related services through shared payment addresses

FetchMoneroAddresses

Transform Name: FetchMoneroAddresses

Description

Extracts all Monero wallet addresses found on a specified onion site.

Input Entity

• hades.v2.onion - An onion site address

Output Entities

• hades.v2.moneroaddress - Monero wallet addresses

Properties Returned

• Appearances - Number of times the address appears on the site
• Hades Link - Direct link to view the onion site in Project Hades web interface

Use Cases

• Identify privacy-focused cryptocurrency payment methods
• Track vendors preferring anonymous transactions
• Monitor Monero adoption on dark web marketplaces

SearchByMoneroAddress

Transform Name: SearchByMoneroAddress

Description

Finds all onion sites that contain a specific Monero wallet address.

Input Entity

• hades.v2.moneroaddress - A Monero wallet address

Output Entities

• hades.v2.onion - Onion site addresses

Properties Returned

• Hades Link - Direct link to view each onion site in Project Hades web interface

Use Cases

• Track vendors using Monero for anonymous payments
• Link marketplaces accepting the same XMR wallet
• Identify networks of sites with shared payment infrastructure

FetchLitecoinAddresses

Transform Name: FetchLitecoinAddresses

Description

Extracts all Litecoin wallet addresses found on a specified onion site.

Input Entity

• hades.v2.onion - An onion site address

Output Entities

• hades.v2.litecoinaddress - Litecoin wallet addresses

Properties Returned

• Appearances - Number of times the address appears on the site
• Hades Link - Direct link to view the onion site in Project Hades web interface

Use Cases

• Identify Litecoin payment options on dark web services
• Track vendors accepting LTC
• Monitor alternative cryptocurrency adoption

SearchByLitecoinAddress

Transform Name: SearchByLitecoinAddress

Description

Finds all onion sites that contain a specific Litecoin wallet address.

Input Entity

• hades.v2.litecoinaddress - A Litecoin wallet address

Output Entities

• hades.v2.onion - Onion site addresses

Properties Returned

• Hades Link - Direct link to view each onion site in Project Hades web interface

Use Cases

• Link sites accepting the same Litecoin wallet
• Track Litecoin-based vendor operations
• Identify related marketplaces through payment addresses

FetchDogecoinAddresses

Transform Name: FetchDogecoinAddresses

Description

Extracts all Dogecoin wallet addresses found on a specified onion site.

Input Entity

• hades.v2.onion - An onion site address

Output Entities

• hades.v2.dogecoinaddress - Dogecoin wallet addresses

Properties Returned

• Appearances - Number of times the address appears on the site
• Hades Link - Direct link to view the onion site in Project Hades web interface

Use Cases

• Identify Dogecoin payment methods
• Track vendors accepting DOGE
• Monitor alternative cryptocurrency usage

SearchByDogecoinAddress

Transform Name: SearchByDogecoinAddress

Description

Finds all onion sites that contain a specific Dogecoin wallet address.

Input Entity

• hades.v2.dogecoinaddress - A Dogecoin wallet address

Output Entities

• hades.v2.onion - Onion site addresses

Properties Returned

• Hades Link - Direct link to view each onion site in Project Hades web interface

Use Cases

• Track Dogecoin-accepting vendors across platforms
• Link related sites through shared DOGE wallets
• Identify marketplace networks

Investigation Workflow Example

Tracking a Vendor Across Multiple Markets

1. Start with a known marketplace

   • Input: examplemarket123abc.onion
   • Run: FetchBitcoinAddresses
   • Result: Multiple Bitcoin addresses used on the site

2. Track each Bitcoin address

   • Input: Each Bitcoin address from step 1
   • Run: SearchByBitcoinAddress
   • Result: Other onion sites using the same Bitcoin wallet

3. Cross-reference with other cryptocurrencies

   • For each discovered site, run FetchEthereumAddresses, FetchMoneroAddresses, etc.
   • Build a comprehensive map of the vendor’s payment infrastructure

4. Identify vendor patterns

   • Sites sharing multiple wallet addresses likely operated by the same vendor
   • Use this intelligence to track vendor activity, migration between markets, and revenue streams