How should cryptocurrency evidence be worded?¶

Separate the observed blockchain record from address attribution, provider account, wallet or endpoint control, ownership and benefit.

Begin with reproducible network facts¶

Identify network, asset and contract, hash, complete addresses, amount, fee, block and status. State that the network recorded movement between addresses, not that named people paid one another.

Express attribution at its actual strength¶

Describe provider mapping to a customer for the relevant period and explain what wallet data, keys, endpoints or communications show. Use “linked to”, “attributed to” or “controlled by” according to evidence, and label cluster or tool findings as analysis rather than identity.

Current control need not prove historical control, especially with shared wallets, imported seeds and custody. State directly what remains uncertain about purpose, knowledge and benefit.