Chainalysis
Annual report measuring illicit financial flows on blockchains. Covers sums paid to ransomware operators, laundering, scams and funds tied to sanctioned entities. Provides an ecosystem-wide view of extortion amounts, complementary to incident-response data.
Transaction-tracing analysis across major public chains, attributing addresses to known entities. Ransomware figures are floor estimates, revised upward in later editions as new addresses are identified.
Use to estimate the macroeconomic envelope of cyber extortion and to contextualise Coveware's microeconomic figures. Relevant for accumulation analysis and market-trend work.