Method and system for dynamically monitoring block chain address set

Abstract

The invention discloses a method and system for dynamically monitoring a block chain address set, and belongs to the technical field of block chains, and the key point of the technical scheme comprises a transaction platform summary wallet address collection module, a block chain account book and transaction data analysis module and an address set dynamic monitoring module. The method has the advantages that the wallet address information is summarized through the transaction account book data disclosed by the block chain and the digital currency transaction platforms disclosed on the Internet, and the wallet addresses of the digital currency transaction platforms can be dynamically and continuously monitored and marked.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of blockchain, more particularly, it relates to a method and system for dynamically monitoring a set of blockchain addresses. BACKGROUND

[0002] Blockchain technology can be likened to a secure digital ledger. Traditional ledgers are managed by central authorities such as banks and governments, and record various transactions and account balances. However, blockchain introduces a new way of keeping accounts, characterized by decentralization and decentralization, managed and verified by multiple computers.

[0003] In essence, a blockchain is composed of many "blocks" that are connected into a chain. Each block contains a series of transaction data, similar to a record of a digital currency transfer. When someone wants to add a new transaction to the blockchain, the transaction is first broadcast to multiple computers in the network.

[0004] These computers will start competing to try to solve a complex mathematical puzzle to verify the legitimacy of the transaction. The first computer to solve the puzzle has the right to package the transaction and other legitimate transactions into a new block, and then add it to the end of the blockchain. Once the block is added, the transaction information in it cannot be tampered with. This is because subsequent blocks will be connected to it, and anyone who wants to modify the information in the block must change the entire blockchain, which is very difficult to do.

[0005] Therefore, the core features of blockchain technology are decentralization and security. Data is no longer stored in a single entity, but is distributed across multiple computers, increasing data security and tamper resistance. This feature makes blockchain perform well in digital currency, supply chain traceability, voting systems and other fields that require high security and transparency.

[0006] Digital currency transactions are usually conducted between two or more digital wallets, which have the characteristics of no need to register, unlimited creation, anonymity, etc. In order to provide all users with fund transaction and deposit and withdrawal services, the digital currency transaction platform needs to provide each user with a unique digital wallet address and associate it with the corresponding user

[0007] When a digital currency transaction platform has a large number of users, a large number of digital wallet addresses need to be managed, in order to make the digital assets on the platform more convenient to manage, the digital currency transaction platform will generally aggregate the user's deposit funds into one or more digital wallets for centralized management. With the growth of assets and time, the digital currency transaction platform will change the aggregation wallet of the platform from time to time, and then aggregate the digital assets on the user's deposit address into the new aggregation wallet, but this operation is not publicly disclosed, so that the wallet address set of the digital currency transaction platform is difficult to mark. SUMMARY

[0008] In view of the defects in the prior art, the purpose of the present application is to provide a dynamic monitoring method and system for a set of blockchain addresses, which has the advantage that through the transaction ledger data disclosed by the blockchain and the aggregation wallet address information of the digital currency transaction platform disclosed on the Internet, the wallet addresses of these digital currency transaction platforms can be dynamically and continuously monitored and marked.

[0009] To achieve the above purpose, the present application provides the following technical scheme: a dynamic monitoring system for a set of blockchain addresses, comprising:

[0010] A transaction platform aggregation wallet address collection module, which is built-in with a text crawler program, is used to periodically crawl aggregation wallet address information related to global digital currency transaction platforms from multiple sources on the Internet, extract associated information such as the address of the transaction platform, the address type, and the corresponding blockchain name, construct and maintain a structured transaction platform aggregation wallet address data table, and the multiple sources on the Internet include social platforms, media information platforms, and personal blogs;

[0011] A blockchain ledger and transaction data analysis module acquires block data of a target blockchain through a blockchain node RPC interface and analyzes transaction data in each block;

[0012] An address set dynamic monitoring module is used to periodically perform a dynamic monitoring task, including: retrieving deposit transactions related to transaction platform aggregation wallet addresses in the transaction database, analyzing transaction characteristics to mine transaction platform deposit addresses, updating to a transaction platform deposit address data table, and querying outgoing transactions of the addresses in the deposit address data table.

[0013] The application further preferably comprises: the transaction platform aggregation wallet address collection module comprises a crawler control unit and an address data table maintenance unit:

[0014] The crawler control unit is configured with a multi-threaded crawler strategy, accesses multiple sources on the Internet according to a preset period, crawls text content containing aggregation wallet addresses through keyword matching, and extracts addresses conforming to the format of blockchain addresses using regular expressions;

[0015] The address data table maintenance unit performs deduplication and validity check on the captured addresses, and the validity check includes calling a blockchain node RPC interface to verify whether the address has a transaction record.

[0016] The application further preferably comprises a blockchain ledger and transaction data analysis module including a node connection unit and a data analysis storage unit.

[0017] The node connection unit supports two connection modes, including a self-built blockchain node and a connection to a public blockchain node RPC address, and ensures the stability of node connection through a heartbeat detection mechanism.

[0018] The data analysis storage unit uses a transaction analysis algorithm.

[0019] The application further preferably comprises an address set dynamic monitoring module including a deposit address mining unit and a new summary wallet discovery unit.

[0020] The deposit address mining unit retrieves the transaction database at a preset period, filters the deposit transactions of the recipient address belonging to the transaction platform summary wallet address data table, extracts the sender address as a candidate deposit address, determines it as a valid deposit address through feature verification, and updates it to the transaction platform deposit address data table.

[0021] The new summary wallet discovery unit queries the outgoing transactions of the address in the deposit address data table, extracts the recipient address, and if the address is not in the transaction platform summary wallet address data table, determines it as a new transaction platform summary wallet address and updates it to the transaction platform summary wallet address data table.

[0022] The application further preferably comprises an address marking and early warning module that adds a unique mark to the addresses in the transaction platform summary wallet address data table and the deposit address data table, automatically triggers an early warning when a new summary wallet address is detected, and pushes the new address information to the supervision or operation and maintenance personnel.

[0023] A dynamic monitoring method for a set of blockchain addresses, comprising the following steps:

[0024] S1: Summary wallet address collection, the transaction platform summary wallet address collection module captures transaction platform summary wallet addresses from multiple sources on the Internet through a text crawler, constructs and maintains a transaction platform summary wallet address data table.

[0025] S2: Blockchain transaction data analysis, the blockchain ledger and transaction data analysis module obtains block data through the blockchain node RPC interface, analyzes the transaction and extracts the key field, and stores it to the transaction database;

[0026] S3: Deposit address mining, the address set dynamic monitoring module retrieves the deposit transaction of the wallet address in the transaction database, mines the effective deposit address, and updates it to the deposit address data table;

[0027] S4: New summary wallet discovery, query the outgoing transaction of the deposit address, identify the new summary wallet address and update it to the summary wallet address data table;

[0028] S5: Address marking and early warning, the address is uniquely marked, and the early warning is triggered when a new summary wallet is monitored;

[0029] S6: Cycle monitoring, repeat steps S1-S5, and realize continuous dynamic updating of the address set.

[0030] The application further preferably comprises the following steps:

[0031] S11: Crawler configuration, set multi-thread concurrent access, define keyword library, configure regular expression, the keyword library includes Binance summary wallet, and the regular expression includes Ethereum address and Bitcoin address;

[0032] S12: Multi-source crawling, access Twitter, blockchain security blog and other platforms once a day, and grab the text content containing the keywords;

[0033] S13: Address extraction and verification, extract the address in the text by using the regular expression, call the blockchain node RPC interface to verify whether the address has transaction record, and eliminate invalid address;

[0034] S14: Data table update, store the valid address and associated information to the summary wallet address data table, only update the collection time and source for repeated address, and the associated information includes platform, type and blockchain.

[0035] The application further preferably comprises the following steps:

[0036] S31: Deposit transaction retrieval, screen the transaction in which the recipient address belongs to the summary wallet address data table in the transaction database once every 6 hours, and form a deposit transaction set;

[0037] S32: Candidate address extraction, extract the sender address in the deposit transaction set as the candidate deposit address;

[0038] S33: Feature verification, for each candidate address, count the number of transfer transactions and the distribution of transfer amount of the wallet aggregated to the transaction platform in 30 days, and determine it as a valid deposit address if the conditions are met;

[0039] S34: Data table update, update the valid deposit address to the transaction platform deposit address data table in the format of: platform ID-address-first discovery time-30-day transfer number-total amount, and only update the statistical data for the existing address.

[0040] The application further preferably: the specific process of discovering new aggregated wallet in step S4 includes:

[0041] S41: Transfer transaction query, query all transfer transactions of the recipient address in the last 30 days in the deposit address data table to form a set of addresses to be verified;

[0042] S42: Address screening, exclude the addresses in the aggregated wallet address data table from the set of addresses to be verified to obtain candidate new addresses;

[0043] S43: Validity determination, count the number of transfer transactions received by the candidate new address in 30 days, and determine it as a new aggregated wallet address when the number of transfer transactions from the transaction platform deposit address is greater than or equal to 100 times and the total amount accounts for more than or equal to 80%.

[0044] S44: Data table update, update the new aggregated wallet address and associated information to the aggregated wallet address data, and the associated information includes platform ID, discovery time, and associated deposit address quantity.

[0045] In summary, the application has the following advantages:

[0046] By dynamically monitoring the blockchain address set belonging to the same transaction platform, the deposit address is mined from the aggregated wallet address, and the new aggregated wallet address is mined from the deposit address, realizing the dynamic analysis in both directions, constantly monitoring and improving the blockchain address set belonging to the transaction platform, so as to identify the behavior of replacing the aggregated wallet address of the transaction platform, and continuously marking the new deposit address of the transaction platform, obtaining much larger address set data than the public address data on the Internet. BRIEF DESCRIPTION OF DRAWINGS

[0047] Figure 1 is the system framework diagram of the embodiment;

[0048] Figure 2 is the main flowchart of the embodiment. DETAILED DESCRIPTION

[0049] The application will be further described in detail below with reference to the accompanying drawings.

[0050] As Figure 1 ,2 As shown, a dynamic monitoring blockchain address set system includes a transaction platform summary wallet address collection module, a blockchain ledger and transaction data analysis module, and an address set dynamic monitoring module,

[0051] The transaction platform summary wallet address collection module is built-in with a text crawler program, which is used to periodically collect summary wallet address information related to global digital currency transaction platforms from multiple sources on the Internet, extract associated information such as the transaction platform to which the address belongs, the address type, and the corresponding blockchain name, construct and maintain a structured transaction platform summary wallet address data table, and the multiple sources on the Internet include social platforms, media information platforms, and personal blogs. The summary wallet address information includes deposit addresses, cold wallet addresses, and hot wallet addresses.

[0052] The blockchain ledger and transaction data analysis module obtains the block data of the target blockchain through the RPC interface of the blockchain node, analyzes the transaction data in each block, extracts key fields such as transaction hash, sender address, recipient address, transaction amount, and timestamp, and stores the parsed transaction data into a transaction database. The blockchain node RPC includes a self-built blockchain node or a public blockchain node RPC address.

[0053] The address set dynamic monitoring module is used to periodically perform dynamic monitoring tasks, including retrieving deposit transactions related to transaction platform summary wallet addresses in the transaction database, analyzing transaction characteristics to mine transaction platform deposit addresses, and updating to the transaction platform deposit address data table; querying the transfer transactions of the addresses in the deposit address data table, identifying transactions transferred to unmarked addresses, determining unmarked addresses as new transaction platform summary wallet addresses, updating to the transaction platform summary wallet address data table, and realizing two-way dynamic mining of summary wallet addresses and deposit addresses. The transaction characteristics include the sender address, transaction amount, and timestamp.

[0054] Further, the transaction platform summary wallet address collection module includes a crawler control unit and an address data table maintenance unit.

[0055] The crawler control unit is configured with a multi-threaded crawler strategy, which accesses multiple sources on the Internet at a preset period, such as once a day, and extracts addresses that meet the blockchain address format through keyword matching to grab text content containing summary wallet addresses. The keyword matching includes [transaction platform name] + summary wallet address and [transaction platform name] + cold wallet. The blockchain address format includes Ethereum 42-bit hexadecimal address and Bitcoin 34-bit Base58 address.

[0056] The address data table maintenance unit de-duplicates and checks the validity of the captured addresses, and stores them in the transaction platform summary wallet address data table in the format of "transaction platform ID-address-address type-blockchain name-collection time-source". The captured addresses are based on address hash, and the validity check includes calling the blockchain node RPC interface to verify whether the address has transaction records.

[0057] Further, the blockchain ledger and transaction data analysis module includes a node connection unit and a data analysis and storage unit.

[0058] The node connection unit supports two connection modes, including self-built blockchain nodes and connecting public blockchain node RPC addresses. The heartbeat detection mechanism is used to ensure the stability of node connection. The self-built blockchain nodes include deployment on local or cloud servers, synchronization of full data of target blockchains, and opening of RPC interfaces. The connection of public blockchain node RPC addresses includes Ethereum InfuraRPC and Bitcoin BlockCypherRPC.

[0059] The data analysis and storage unit uses a transaction analysis algorithm to extract transaction hash, sender address, recipient address, transaction amount, and timestamp from block data. Invalid transactions are filtered, and valid transaction data is stored in the transaction database in the format of "block height-transaction hash-sender address-recipient address-amount-timestamp". MySQL+Elasticsearch is used to support quick queries by address and time range. Invalid transactions include failed transactions and zero-amount transactions.

[0060] Further, the address set dynamic monitoring module includes a deposit address mining unit and a new summary wallet discovery unit.

[0061] The deposit address mining unit retrieves the transaction database at a preset period, filters deposit transactions of the recipient address belonging to the transaction platform summary wallet address data table, extracts the sender address as a candidate deposit address, determines it as a valid deposit address through feature verification, updates it to the transaction platform deposit address data table, and the preset period includes once every 6 hours. Feature verification includes multiple transfers to the same transaction platform summary wallet within 30 days and transfer amounts consistent with user deposit habits.

[0062] The new summary wallet discovery unit queries the outgoing transactions of the address in the deposit address data table, extracts the recipient address, and if the address is not in the transaction platform summary wallet address data table and meets the conditions of "receiving 100+ deposit addresses from the transaction platform in a single month, and the total received amount accounts for more than 80%", it is determined as a new transaction platform summary wallet address, and is updated to the transaction platform summary wallet address data table.

[0063] Further, it also includes address marking and early warning module, which adds unique mark to the addresses in the transaction platform's aggregated wallet address data table and deposit address data table. When a new aggregated wallet address is monitored, an early warning is triggered automatically, and the new address information is pushed to the supervision or operation personnel. The unique mark includes [transaction platform name]-aggregated wallet-[number], [transaction platform name]-deposit address-[number]. The early warning includes email, SMS or system notification. The new address information includes address, platform, discovery time, and number of associated deposit addresses.

[0064] As shown in Figure 1 , 2 A dynamic monitoring method of a set of blockchain addresses, comprising the following steps:

[0065] S1: Aggregated wallet address collection. The transaction platform aggregated wallet address collection module collects transaction platform aggregated wallet addresses from the Internet through text crawler, constructs and maintains the transaction platform aggregated wallet address data table.

[0066] S2: Blockchain transaction data analysis. The blockchain ledger and transaction data analysis module obtains block data through the blockchain node RPC interface, analyzes transactions and extracts key fields, and stores them in the transaction database.

[0067] S3: Deposit address mining. The address set dynamic monitoring module retrieves the deposit transactions of the aggregated wallet addresses in the transaction database, mines valid deposit addresses, and updates them to the deposit address data table.

[0068] S4: New aggregated wallet discovery. Query the transfer transaction of the deposit address, identify the new aggregated wallet address, and update it to the aggregated wallet address data table.

[0069] S5: Address marking and early warning. Mark the address uniquely, and trigger an early warning when a new aggregated wallet is monitored.

[0070] S6: Loop monitoring. Repeat steps S1-S5 to continuously and dynamically update the address set.

[0071] Wherein, the specific execution process of the text crawler in step S1 includes:

[0072] S11: Crawler configuration. Set multi-thread concurrent access, define keyword library, and configure regular expression. The keyword library includes Binance aggregated wallet, Coinbase cold wallet, and Kraken deposit address. The regular expression includes Ethereum address and Bitcoin address.

[0073] S12: Multi-source crawling. Access Twitter, Medium, and blockchain security blogs at a frequency of once a day, and crawl text content containing keywords.

[0074] S13: Address extraction and verification, regular expression is used to extract the address in the text, the blockchain node RPC interface is called to verify whether the address exists transaction record, and invalid address is excluded;

[0075] S14: Data table update, the valid address and associated information are stored to the summary wallet address data table, and only the collection time and source are updated for the repeated address, the associated information includes platform, type and blockchain.

[0076] The specific process of the deposit address mining in step S3 comprises:

[0077] S31: Deposit transaction retrieval, according to the period of once every 6 hours, the transactions of ''recipient address e summary wallet address data table'' are screened in the transaction database, and a deposit transaction set is formed;

[0078] S32: Candidate address extraction, the sender address in the deposit transaction set is extracted as a candidate deposit address;

[0079] S33: Feature verification, for each candidate address, the number of transfer transactions and the distribution of transfer amount to the summary wallet of the transaction platform within 30 days are counted, and if the conditions are met, the effective deposit address is determined;

[0080] S34: Data table update, the effective deposit address is updated to the transaction platform deposit address data table according to the format of ''platform ID-address-first discovery time-30 day transfer times-total amount'', and the statistical data of the existing address is only updated.

[0081] The specific process of the new summary wallet discovery in step S4 comprises:

[0082] S41: Transfer transaction query, the transfer transactions of all addresses in the deposit address data table within 30 days are queried, and the recipient address is extracted to form a to-be-verified address set;

[0083] S42: Address screening, the addresses already in the summary wallet address data table are excluded from the to-be-verified address set, and a candidate new address is obtained;

[0084] S43: Validity determination, the transfer sources received by the candidate new address within 30 days are counted, and when ''the number of transfer transactions from the transaction platform deposit address is greater than or equal to 100 times, and the total amount accounts for more than or equal to 80%'', the new summary wallet address is determined;

[0085] S44: Data table update, the new summary wallet address and associated information are updated to the summary wallet address data, and the associated information includes platform ID, discovery time and associated deposit address quantity.

[0086] The working process and beneficial effects of the application are as follows:

[0087] By dynamically monitoring the blockchain address set belonging to the same transaction platform, the deposit address is mined from the summary wallet address, and the newly emerging summary wallet address is mined from the deposit address, two-way dynamic analysis is realized, the blockchain address set belonging to the transaction platform is continuously monitored and improved, so that the behavior of the transaction platform replacing the summary wallet address is identified, and the new deposit address of the transaction platform is continuously marked, so that the address set data is much larger than the public address data on the Internet.

[0088] The above only describes the preferred embodiments of the present application and is not used to limit the present application. Any modification, equivalent replacement, improvement, etc. within the design concept of the present application shall be included in the protection scope of the present application.

Claims

1. A system for dynamically monitoring a blockchain address set, characterized in that, include: The transaction platform aggregated wallet address collection module has a built-in text crawler program, which is used to periodically crawl aggregated wallet address information related to global digital currency transaction platforms from multiple sources on the Internet, extract related information such as the transaction platform to which the address belongs, address type, and corresponding blockchain name, and build and maintain a structured transaction platform aggregated wallet address data table. The multiple sources on the Internet include social platforms, media information platforms, and personal blogs. The blockchain ledger and transaction data parsing module obtains block data from the target blockchain through the blockchain node RPC interface and parses the transaction data in each block; The address set dynamic monitoring module is used to perform dynamic monitoring tasks on a regular basis, including: retrieving deposit transactions related to the transaction platform's aggregated wallet address in the transaction database, analyzing transaction characteristics to discover deposit addresses on the transaction platform, updating the transaction platform's deposit address data table, and querying the outgoing transactions of addresses in the deposit address data table.

2. The system for dynamically monitoring a blockchain address set according to claim 1, characterized in that, The transaction platform's aggregated wallet address collection module includes a crawler control unit and an address data table maintenance unit. The crawler control unit is configured with a multi-threaded crawler strategy. It accesses multiple sources on the Internet at preset intervals, captures text content containing aggregated wallet addresses through keyword matching, and extracts addresses that conform to the blockchain address format using regular expressions. The address data table maintenance unit performs deduplication and validity checks on the captured addresses. The validity check includes calling the blockchain node RPC interface to verify whether the address has a transaction record.

3. The dynamic monitoring blockchain address set system according to claim 1, characterized in that, The blockchain ledger and transaction data parsing module includes a node connection unit and a data parsing and storage unit: The node connection unit supports two connection modes: self-built blockchain node and connection to public blockchain node RPC address. The node connection stability is ensured through a heartbeat detection mechanism. The self-built blockchain node is deployed on a local or cloud server, synchronizes the full data of the target blockchain and opens the RPC interface. The connection to public blockchain node RPC address obtains data by connecting to the RPC interface of a blockchain node publicly provided on the Internet. The data parsing and storage unit uses a transaction parsing algorithm.

4. The system for dynamically monitoring a blockchain address set according to claim 1, characterized in that, The address set dynamic monitoring module includes a deposit address mining unit and a new aggregated wallet discovery unit: The deposit address mining unit searches the transaction database at a preset period, filters deposit transactions whose recipient addresses belong to the transaction platform's aggregated wallet address data table, extracts the sender addresses as candidate deposit addresses, determines them as valid deposit addresses through feature verification, and updates them to the transaction platform's deposit address data table. The new summary wallet discovery unit queries the deposit address data table for outgoing transactions of addresses, extracts the recipient address, and if the address is not in the transaction platform summary wallet address data table, it is determined to be a new transaction platform summary wallet address and updated to the transaction platform summary wallet address data table.

5. A dynamic monitoring system for blockchain address sets according to claim 1, characterized in that: It also includes an address tagging and early warning module, which adds a unique tag to the addresses in the transaction platform's aggregated wallet address data table and deposit address data table. When a new aggregated wallet address is detected, an early warning is automatically triggered, and the new address information is pushed to regulatory or operations personnel. The early warning can be sent via email, SMS or system notification. The new address information includes the address, the platform to which it belongs, the discovery time, and the number of associated deposit addresses.

6. A method for dynamically monitoring a blockchain address set based on the system of claim 1, characterized in that, Includes the following steps: S1: Summary Wallet Address Collection. The summary wallet address collection module of the trading platform uses a text crawler to collect summary wallet addresses of the trading platform from multiple sources on the Internet, and builds and maintains a summary wallet address data table of the trading platform. S2: Blockchain transaction data parsing. The blockchain ledger and transaction data parsing module obtains block data through the blockchain node RPC interface, parses transactions and extracts key fields, and stores them in the transaction database. S3: Deposit Address Mining. The address set dynamic monitoring module retrieves deposit transactions of wallet addresses from the transaction database, mines valid deposit addresses, and updates the deposit address data table. S4: New summary wallet discovery, query outgoing transactions of deposit addresses, identify new summary wallet addresses and update the summary wallet address data table; S5: Address Tagging and Alerts. Addresses are uniquely tagged, and alerts are triggered when a new aggregated wallet is detected. S6: Loop monitoring, repeat steps S1-S5 to achieve continuous dynamic updates of the address set.

7. The method for dynamically monitoring a blockchain address set according to claim 6, characterized in that... The process includes the following steps: S1: Summary Wallet Address Collection. The summary wallet address collection module of the trading platform uses a text crawler to collect summary wallet addresses of the trading platform from multiple sources on the Internet, and builds and maintains a summary wallet address data table of the trading platform. S2: Blockchain transaction data parsing. The blockchain ledger and transaction data parsing module obtains block data through the blockchain node RPC interface, parses transactions and extracts key fields, and stores them in the transaction database. S3: Deposit Address Mining. The address set dynamic monitoring module retrieves deposit transactions of wallet addresses from the transaction database, mines valid deposit addresses, and updates the deposit address data table. S4: New summary wallet discovery, query outgoing transactions of deposit addresses, identify new summary wallet addresses and update the summary wallet address data table; S5: Address Tagging and Alerts. Addresses are uniquely tagged, and alerts are triggered when a new aggregated wallet is detected. S6: Loop monitoring, repeat steps S1-S5 to achieve continuous dynamic updates of the address set.

8. The method for dynamically monitoring a blockchain address set according to claim 6, characterized in that, The specific process of deposit address mining in step S3 includes: S31: Deposit transaction retrieval, at a cycle of 6 hours, filters transactions in the transaction database whose recipient addresses belong to the summary wallet address data table, forming a deposit transaction set; S32: Candidate address extraction, extracting the sender's address from the deposit transaction set as a candidate deposit address; S33: Feature verification. For each candidate address, count the number of transfers and the distribution of transfer amounts to the aggregate wallet of the trading platform within 30 days. If the conditions are met, it is determined to be a valid deposit address. S34: Data table update. Valid deposit addresses will be updated to the trading platform's deposit address data table in the format: Platform ID - Address - First discovery time - Number of transfers in 30 days - Total amount. For existing addresses, only the statistical data will be updated.

9. The method for dynamically monitoring a blockchain address set according to claim 6, characterized in that, The specific process for discovering the new aggregated wallet described in step S4 includes: S41: Transfer out transaction query. Query all transfer out transactions of all addresses in the deposit address data table in the past 30 days and extract the recipient addresses to form a set of addresses to be verified. S42: Address filtering, exclude addresses already in the summary wallet address data table from the set of addresses to be verified, and obtain new candidate addresses; S43: Validity determination: Statistically analyze the sources of transfers received by the candidate new address within 30 days. If the number of transfers from the deposit address of the trading platform is ≥100 and the total amount accounts for ≥80%, it is determined to be a new aggregated wallet address. S44: Data table update, update the new aggregated wallet address and associated information to the aggregated wallet address data. The associated information includes platform ID, discovery time, and number of associated deposit addresses.

Images