WalletDNA

For Auditors & Assurance Teams

Audit-ready evidence
for digital assets.

Cryptographic proof of wallet ownership, balances valued as of the measurement date, population screening with tie-out totals, and tamper-evident documentation — for engagement teams, and for entities preparing evidence their auditor will accept.

Evidence tooling — not an audit opinion.

WalletDNA documents what is on the public ledger — independently of the audited entity, with methodology, data sources, and limitations disclosed on every report. Whether its output is sufficient appropriate evidence for a given assertion is the auditor's judgment under their standards; the output is built so that judgment is easy to make. WalletDNA is not affiliated with or endorsed by any audit firm.

Mapped to the assertions

Existence & ownership

Does the entity actually control the address it claims? A signed-message attestation — the wallet holder signs a unique challenge with the wallet's key, verified cryptographically — answers the ownership half of the existence assertion without relying on management representation.

Valuation at the measurement date

Balances and USD value as of the balance-sheet date — not "today" — computed from archive block data (EVM chains) or full history replay (Bitcoin, Litecoin), priced from a stated source. Principal-market determination under ASC 820 / IFRS 13 remains the practitioner's judgment.

Population testing

The entity has 50 wallets, not one. Import the address population from CSV, screen and value all of them in a single run, and export one workbook with tie-out totals — instead of 50 separate lookups.

Risk assessment & AML screening

Every address screened against OFAC, EU, UK, and UN sanctions lists, with counterparty exposure percentages, mixer proximity, and behavioral flags — the fraud-risk and AML context for planning and client acceptance.

Documentation that holds up

Every report carries a Methodology Declaration (analyst, data sources, scoring version, limitations) and a SHA-256 content hash that can be re-verified online — so the evidence trail survives review.

What you get

Cryptographic ownership attestation

Send the wallet holder a signing link; they sign a challenge message in their browser wallet or offline (hardware wallets, Electrum), and WalletDNA verifies the signature against the address. Challenge, signature, method, and timestamp are embedded in the report and independently verifiable. Ethereum and all EVM chains, Bitcoin, Litecoin, Solana, Tron.

As-of-date balance & valuation

Pick the measurement date and get the wallet's balance and USD value on that day, with the block reference or replay evidence and the price source stated per figure. Saved with the report; renders as its own PDF page.

Population screening with tie-outs

CSV import (address,label) of up to 200 wallets, screened and optionally valued as of a date in one run — exported as an Excel workbook whose totals are live SUM and COUNTIF formulas an auditor can trace, not baked numbers.

Excel workpapers per wallet

Any single report also exports as a tabbed workbook: summary & valuations, counterparty exposure with tie-out totals, transactions, off-ramp deposits, bridge exits, screening, methodology.

Graded exchange exposure

Where the wallet's funds reached fiat exchanges, in three evidence tiers: dated direct deposits to labeled exchange addresses; probable deposit addresses inferred from sweep patterns, with the funding and sweep transactions cited and stated as probable (confirmable only by the exchange via legal process); and exchange endpoints reached across the multi-hop trace, undated. Each tier states its basis, so the workpaper reflects the strength of the evidence rather than flattening it.

Cross-chain bridge exits

Where funds left the chain via a known bridge, recorded as its own section — dated direct sends plus bridge contracts reached across the trace. Canonical bridges name the destination chain; multi-destination routers are marked "destination not resolved on-chain" rather than guessed. The exit is documented; following funds onto the destination chain is a separate trace, and the workpaper states that boundary rather than implying continuity it can't support.

Tamper-evident reports

Each report's stored record is hashed (SHA-256) and the hash printed on the PDF; anyone can compare it against the live hash endpoint to confirm the record is unchanged since the report was generated. Every report is reproducible from public on-chain data and states how it was generated and verified — the full methodology, data sources, and the hash-check step are documented at walletdna.com/methodology.

Engagement organization

Group reports, canvases, and monitored wallets under a matter with an engagement reference that prints on every PDF, run conflict checks, and export a complete engagement file in one document.

A citation-validated assistant

Ask about counterparty exposure, sanctions hits, or dated valuations in plain English; the assistant drives the same tools that produce the report, and a server-side validator rejects any answer containing an address, transaction, or amount absent from the cited tool evidence — it cannot assert what the data doesn't show. Refusals state the specific data gap, and each run persists as a replayable record of every tool call: evidence, not narrative.

Analyst-authored Supplementary Findings

Query results enter the report only through explicit selection: the analyst retitles and rewrites each finding, and the edited text is re-validated against the run's evidence — rephrasing is allowed, un-grounding is rejected. The PDF page is attributed to the analyst with per-finding citations to data sources; the Methodology Declaration discloses that findings derive from analyst-directed queries on the platform; and the full query transcript persists as the workpaper record behind the curated deliverable.

Free CPE course

Crypto Forensics Fundamentals for CPAs — a free, five-module continuing-education course covering how to read on-chain evidence, assess direct and upstream sanctions exposure, trace funds to the exchange off-ramps, and value digital assets as of a date, closing on the honest boundary between observable on-chain fact and audit opinion. Written to NASBA self-study structure with review questions and a graded final; being placed with a registered CPE sponsor for accredited credit. Reserve your seat at walletdna.com/academy.

How it works

1.

Start from the population

Import the entity's wallet list from CSV — or analyze a single address. Chains are detected automatically.

2.

Verify, value, screen

Ownership attestations from the wallet holders, balances as of the measurement date, sanctions and risk screening across the population.

3.

File the workpapers

Excel workbooks with live tie-out totals, PDFs with methodology declarations and content hashes, all organized under the engagement.

Do it yourself, or have us do it

Self-serve

Run the checks yourself and download the workpapers. Free to start; population screening is available on the Enterprise plan.

Run a free check →

Done for you

Send us the population and the engagement context; we'll prepare the verification, valuations, and workpapers. Get in touch for scope and pricing.

Talk to us

Crypto audit evidence — FAQ

Is WalletDNA output acceptable audit evidence?

That determination always belongs to the auditor under their standards (e.g. ISA 500 / AU-C 500 on the relevance and reliability of evidence). What WalletDNA provides is what those standards favor: information derived from a source independent of the audited entity (the public ledger), with the methodology, data sources, and limitations disclosed on every report, and a tamper-evident content hash. Many teams use it as corroborating documentation alongside their own procedures — it is not an audit opinion and does not replace one.

How do you verify the entity actually controls a wallet?

With a signed-message attestation: WalletDNA generates a unique challenge, the wallet holder signs it with the wallet's private key (browser wallet, hardware wallet, or offline tooling), and the signature is verified cryptographically against the address — recovery-based on EVM chains, Bitcoin, Litecoin and Tron, Ed25519 on Solana. The proof is embedded in the report. Signing is free and cannot move funds; it demonstrates control at the time of signing.

Can I get balances as of the balance-sheet date?

Yes. On EVM chains the balance is read from archive block data at the block nearest end-of-day UTC on your date; on Bitcoin and Litecoin the address's full confirmed history is replayed (and refused, rather than guessed, past a history cap). Pricing comes from a stated source — Coinbase Exchange daily close, with fallbacks — and the balance is always returned even when no price source resolves for the date.

How do I test a whole population of wallets?

Import the address list from CSV (address,label) — up to 200 per run. Every wallet is screened for sanctions and risk, optionally valued as of your chosen date, and the results export as a single Excel workbook with live tie-out totals plus per-wallet report links. Populations can also be filed under an engagement matter automatically.

How do I know a report hasn't been altered?

Every report prints a SHA-256 content hash computed over its stored analysis record. Comparing it against the report's live hash endpoint confirms the underlying record is unchanged since the report was generated — a mismatch means the record was re-analyzed or edited afterward, which is exactly what you want to detect.

Is WalletDNA independent of the entities it analyzes?

Yes. WalletDNA reads public blockchain data and independent data sources; queries never touch the analyzed entity's systems, and WalletDNA has no commercial relationship with the wallets it analyzes. Reports state their data sources and methodology so the provenance of every figure can be reviewed.

Which blockchains are supported?

Analysis and screening: Bitcoin, Ethereum, Solana, XRP, Tron, BNB Chain, Polygon, Litecoin, Cardano, Polkadot, Avalanche, Cosmos, Stellar, Base, Arbitrum, Optimism, TON, and SUI. As-of-date valuation: EVM chains, Bitcoin, and Litecoin. Ownership attestation: EVM chains, Bitcoin, Litecoin, Solana, and Tron.

For accountants →For lawyers →Screen a population →Methodology →WalletDNA Academy →API & integrations →

Run a free check now

Paste a wallet address. Results in under 60 seconds across 18 chains. No credit card to start.

Run a free check →