Table 1 Comparison of risk identification points for different types of addresses
From: Aparecium: understanding and detecting scam behaviors on Ethereum via biased random walk
| Â | Â | Active Time Span | Day Maximum Balance | Day Transfers Number | Final Balance | BMax-BMin/NT |
|---|---|---|---|---|---|---|
Normal | Large institutions | Very active. Transfers occur in every day. | Relatively stable with a little fluctuations. Held funds amount in M dollars. | Relatively stable with a little fluctuations. | High. | Low. |
Ethereum tryer | Across the entire address life cycle with 3-4 months. | Change occur if there is a transaction. Held funds amount in K dollars. | Discontinuous. Under 100 trans/day. | Low. | Slightly higher than larger institutions. | |
Ethereum speculators with financial knowledge | Across the entire address in long life cycle with more transfers. | Fluctuated without intensive volatility. | Discontinuous. Under 100 trans/day. | Low. | Slightly higher than larger institutions. | |
Ethereum shortterm holders | Across the entire address in life cycle with only 1-2 days. | Change occur if there is a transaction. Held small funds. | Discontinuous. Under 10 trans/day. | Low. | Slightly higher than larger institutions. | |
Scam | Theif | Across the entire address in life cycle with short time. | Wild fluctuations. | Maintain in single digits with long term. | Tend to 0. | High. |
Bandit | Very active in a short term. | Wild fluctuations. | High but much smaller than large institutions. | Tend to 0. | Very High. |