Wallet clustering groups blockchain addresses likely controlled by the same entity based on co-spending patterns, change address heuristics, and behavioral analysis.
Labeled clusters associated with exchanges, services, or known threat actors help contextualize incident-related transfers. Cluster confidence varies by chain and transaction pattern.
Clustering supports incident documentation and counterparty mapping but does not alone establish legal identity or ownership.
Forensic clustering reports may inform advisory review; EnteleCLOS does not guarantee attribution or asset recovery based on cluster analysis.