Appendix A.

Entity Type	Entity Subtype	Definition
Coinmixer	Decentralized	A coins Bitcoin mixer is a decentralized Bitcoin mixing technology that enables users to use Bitcoin anonymously. Wasabi Wallet, Whirlpool, and JoinMarket are examples of Coin Mixers that conduct mixing without assuming custody of the coin.
Coinmixer	Centralized	Centralized coin mixers are for-profit businesses that receive your coin and return other currencies in exchange for a charge.
Darknet	(None)	Addresses of entities that have been discovered on the dark web
Darknet	Child Sexual Abuse Material Vendor	Entities who run websites that contain children's sexual material.
Darknet	Hitman Services	Entities that provide services in which one party pays a third party (commonly referred to as a hitman) to kill a specific person or group of individuals.
Darknet	Stolen Accounts Vendors	Entities that operate websites selling stolen account information.
Darknet	Human Trafficking	Entities that trade people for forced labor, sexual slavery, or commercial sexual exploitation.
Darknet	Compromised Credit Cards	Websites that sell people's credit cards have been hacked.
Darknet	Narcotics and Controlled Substances Vendor	Websites offer illicit drugs and controlled substances such as marijuana, ecstasy, cocaine, prescription medications, and other restricted substances.
Darknet	Weapons Vendor	Entities that run websites that sell illegal weapons and ammunition illegally.
Darknet	Darknet Vendor Shop	Services seen on the dark web allow users to exchange cryptocurrency for goods or services offered by a single seller.
Darknet	Darknet Marketplace	Websites that allow users to trade cryptocurrency for products or services from numerous vendors on the dark web.
Darknet	Darknet Donation	Entities that have requested donations and are seen on the dark web.
Darknet	Adult Content	Entities which operate websites selling adult videos (pornographic content).
DeFi	Decentralized Exchange - AMM	A decentralized trading protocol that prices assets using a mathematical formula. Assets are valued using a pricing algorithm rather than an order book like a typical exchange. Uniswap, Sushiswap, and other DEXs that follow AMM are examples.
DeFi	Decentralized Exchange - Aggregator	A decentralized exchange gathers trading pairs from several DEXes to offer the best price to users, allowing crypto traders to access a variety of trading pools from a single dashboard. 1inch is a DEX aggregator example.
DeFi	Lending/Borrowing	Users can lend/borrow their assets to others on decentralized platforms in return for interest payments received or paid. Examples are Aave, compound, MakerDao, and others.
DeFi	Insurance	Decentralized platforms that protect their customers against DAO attacks, Parity multi-sig wallet problems, smart contract hacking, and stable coin default, among other things. Nexus Mutual, Opium Insurance, and other companies are examples.
DeFi	Yield Aggregator	A platform that maximizes user revenues by utilizing various DeFi protocols and techniques. Yield aggregators include companies like Harvest Finance.
DeFi	Bridges	Users can transfer funds from one blockchain to another using this protocol. A good example using this protocol is Anyswap.
DeFi	Asset Management	This protocol provides asset management for tokenized assets. Examples of this are Set protocol and the value Defi.
DeFi	Derivatives	Decentralized derivatives of any sort (Tokens whose value is derived from the performance of an underlying asset, such as stock). Augur, synthetix, Uma, and more examples
Donation	Charity (Political)	Donations are paid to a political trust or organization, as well as money donated to political campaigns.
Donation	Charity (Non-political)	Donations are made to a non-political trust or organization's funding.
Donation	Project Donation	Donations are given in support of a project's funding.
Donation	Tip Jar	Money donated to people on social networking sites.
Exchange	Mandatory KYC and AML	Exchanges that do not allow withdrawals without KYC verification of customers
Exchange	Optional KYC and AML	Exchanges only need KYC for a portion of their users, such as those requiring a daily withdrawal amount over a certain threshold.
Exchange	Inactive	Exchanges that are no longer being used for cryptocurrency trade.
Exchange	Decentralized (DEX)	A decentralized exchange (DEX) is a cryptocurrency exchange that operates without a centralized authority. They employ smart contracts to match suppliers and buyers for trading.
Exchange	P2P	A peer-to-peer (P2P) exchange is a platform that allows two people to communicate directly with one another without the use of a third party. The P2P service allows the buyer and seller to trade directly with one another, enabling direct transfers of crypto/fiat between a user's deposit address and their bank account.
Exchange	OTC	The trading of cryptocurrencies/FIAT between two counterparties outside of a marketplace network is known as over-the-counter (OTC). OTC trades are made directly between two parties, as opposed to trading on an exchange.
Extortion	Sextortion	Cryptocurrency addresses are controlled by entities who scam people after stating that the victim's digital device has been compromised and threatening to expose the victim's compromised information/recording unless a ransom is paid in Cryptocurrency.
Extortion	Blackmail	Cryptocurrency addresses are owned by entities involved in threatening people in return for cryptocurrency, mainly bitcoin, as a form of extortion.
Gambling	Fiat and Crypto	Gambling companies that accept both regular fiat cash and cryptocurrency.
Gambling	Crypto only	Gambling establishments that accept only cryptocurrency deposits and Cryptocurrency withdrawals.
High Risk Organization	(None)	Entities engaged in criminal/illegal acts that, if linked to, might jeopardize a company's reputation.
High Risk Organization	Terrorist Organization	Terrorist-affiliated organizations that hold or manage cryptocurrency addresses.
High Risk Organization	Criminal Organization	Cryptocurrency addresses that have been designated as belonging to or controlled by criminal organizations.
High Risk Organization	Frozen Assets	Addresses of assets confiscated due to improper use of Crypto tokens or in response to requests from law enforcement authorities and large financial institutions.
High Risk Organization	Ukraine Entities	Entities or Crypto addresses which belong to the Ukraine region.
Law Enforcement	Seized Coins	The proceeds of a computer intrusion and property used in money laundering are represented by these coins/tokens, taken under criminal and civil forfeiture legislation. Law enforcement agencies, such as the FBI, have confiscated cryptocurrency coins/tokens transferred from the criminal's wallet to the law enforcement's wallet.
Malware	Ransomware	Crypto-ransomware is a form of malicious software that encrypts data and files on a computer or mobile device to extract cryptocurrencies or money.
Malware	Cryptojacking	Cryptojacking is when thieves utilize an illegal computer, tablet, mobile phone, or connected home device to mine cryptocurrencies.
Mining Pool	Mining Pool	Entities whose primary purpose is to pool hashing power to mine cryptocurrencies.
Sanctions	OFAC	Cryptocurrency addresses listed on the Office of Foreign Asset Controls (OFAC) blacklist.
Sanctions	Entity from Sanctioned Country	Cryptocurrency address belongs an entity based in a country which has international economic sanctions imposed against them, which typically is a ban on trade, possibly limited to certain sectors such as armaments, or with certain exceptions.
Sanctions	OFAC Cluster	Cryptocurrency addresses identified through clustering heuristics to be controlled by individuals/entities on the Office of Foreign Asset Controls (OFAC) blacklist.
Scam	Phishing	Cryptocurrency addresses belonging to companies involved in phishing, a form of social engineering attack frequently used to obtain user data such as login credentials and credit card details.
Scam	Spam	Cryptocurrency addresses are used by companies who send unauthorized messages to distribute malware or phishing to steal personal and financial information.
Scam	High Yield Investment Program	Cryptocurrency addresses belonging to entities participating in a fraudulent investment plan that promises very high returns on investment, such as Ponzi scams, bitcoin doubler schemes, and so on.
Scam	Exit Scam	Exit scam addresses are cryptocurrency addresses owned by companies participating in a fraudulent operation conducted by cryptocurrency promoters who abscond with investors' cash during or after an initial coin offering (ICO).
Scam	Fake ICO Scam	Cryptocurrency addresses are controlled by fraudsters who spend a little on a professional-looking website and marketing materials, such as a white paper, to gain investors' trust and steal their money.
Scam	Impersonation Scam	Cryptocurrency addresses are used by entities pretending to be someone else, such as a high-profile celebrity, a corporate employee, or a bitcoin exchange, asking for private information or cryptocurrency payments.
Scam	Fake service	Cryptocurrency addresses owned by entities which operate fake services to steal money from their users illegally.
Service		Entities that provide cryptocurrencies-related goods or services but are not exchanges.
Service	Payment Gateway	Services that aid in the acceptance of cryptocurrency payments.
Service	Financial Service	Services like crypto loans, escrow services, and other crypto financial services are provided by entities. However, a central authority manages and controls these services.
Service	Wallet Provider	Services that allow users to store cryptocurrency in wallets
Service	Marketplace	Services that enable users to trade cryptocurrency for products or services from a variety of suppliers
Service	Shop	Users can trade bitcoin for products or services from a single seller using these services.
Service	Bitcoin Faucet	Services that reward users with cryptocurrency when they accomplish specific activities, like captchas or viewing advertisements.
Service	Custody	Services which are third party providers of storage and security services for cryptocurrencies. These are mainly aimed at institutional investors, such as hedge funds, who hold large amounts of bitcoin or other cryptocurrencies.
Service	Cryptocurrency ATM	Services which allow users to buy Bitcoins and other cryptocurrency using cash or a debit card
Service	Decentralized Finance (DeFi)	Services that enable users to engage with one another using smart contracts give rise to new financial services.
Smart Contract Platform	ICO	Cryptocurrency addresses are controlled by companies that accept cryptocurrency investments as a type of crowdfunding. For example, in an ICO, a certain amount of cryptocurrency is offered to prospective purchasers in the form of "tokens" or "coins" in return for legal cash or other (more established and stable) cryptocurrencies like Bitcoin or Ethereum.
Smart Contract Platform	DAPP	Cryptocurrency addresses decentralized apps that run on a peer-to-peer distributed network rather than on a single computer. Thus, there is no single entity in charge.
Smart Contract Platform	Token	To govern the issue of bitcoins, cryptocurrency addresses were developed. Cryptocurrencies, also known as crypto tokens or crypto assets, are a form of virtual money based on the blockchain that can signify a purchase or service.
Theft	(None)	Entities who take control of cryptocurrencies through dubious or unlawful means.
Theft	Hack	Entities that gained control of cryptocurrencies through social engineering or cyber security assaults.
Theft	Abuse	Entities who gained control of cryptocurrency through poorly drafted smart contracts or exploiting various web platform vulnerabilities.