On-Chain KYT Monitoring Agent
Detects risk-significant transaction patterns across supported chains and bridges.
Combines deterministic rules, typologies, and customer context, then packages reproducible transaction paths instead of opaque risk scores.
Authority
Monitor and intervene
Team role
Monitors and escalates
Handoffs
Named collaborators
The role
What it owns and where its authority ends
Desk
On-Chain Financial Crime
Desk workflow
Detect, reconstruct, enrich, adjudicate, restrict within policy, and preserve the reporting record.
Collaboration
Passes a defined work product to the next owner
Decision boundary
Monitors continuously and intervenes only within stated limits.
Systems and capabilities involved
Multi-chain event stream
KYT rules engine
Customer activity baseline
Case management
Handoffs
What this role gives and receives
Capabilities offered
The handoffs name the next owner or specialist and the work that moves between them.
Handoff to
Receives from
External handoff
AML investigations and SAR process
External handoff
Chain event streams
Context
What the role needs to do the work
- Current work
- The matter in flight: its assets, events, policy results, approvals, and unresolved facts
- Prior interactions
- Prior cases on the same asset or counterparty, exceptions, and reviewer outcomes
- Policies and reference
- Firm asset, chain, entity, jurisdiction, risk, control, and reporting taxonomies
- Working method
- The desk's own approved runbooks and escalation paths
Illustrative workflow
How the work moves
Starting point
A customer wallet rapidly hops value through a bridge and two fresh addresses
- 01
Anchor source events
- 02
Reconstruct cross-chain path
- 03
Compare expected behavior
- 04
Open a cited alert with interim controls
Result
Replayable KYT case with path graph, typology evidence, and priority
Checks and boundaries
What must be tested or reviewed
- 01Replays alerts against the original block and policy version
- 02Detects seeded peeling chains, bridge hops, and rapid pass-through patterns
- 03Suppressions expire and retain reviewer rationale
Human authority
- Investigator approves adverse disposition and any external suspicious-activity report
Keep exploring