README
Interactive tools to assist with blockchain analysis and research. These tools are provided free to use, and are intended to be minimalistic and easily accessible to anyone with a browser. Should they outgrow this space, they will be made available externally via Github and/or other dedicated services.
Copyright © 2026 DNZN // RESEARCH
BSD 3-Clause License - https://opensource.org/license/bsd-3-clause
Eth Wallet Analyzer
A client-side browser tool for analyzing Ethereum wallet transactions. Fetches ETH transactions (including internal transactions from contract interactions) and ERC20 token transfers from Etherscan API, then generates a detailed markdown report showing inflows, outflows, top counterparties, and recent transaction history.
Usage
- Get a free API key at etherscan.io/apis
- Enter a wallet address and your API key
- Set additional/optional configurations.
- Click "Analyze Wallet"
Privacy
- All processing happens client-side in your browser
- API key is stored in
localStorage, and never sent to DNZN - Etherscan API responses are cached locally in the browser
localStoragefor 1 hour - Source available at js/tools/eth-wallet-analyzer/wallet-analyzer.js
Limitations
- Ethereum mainnet only
- 10,000 transaction limit per endpoint
- ERC20 tokens only (no NFTs)
Technical Details
Endpoints
txlist- ETH transactionstxlistinternal- Internal transactions (contract calls)tokentx- ERC20 transfers
Caching
- Keyed by endpoint + parameters (API key excluded)
- 1 hour expiry, cleaned on page load
- Manual clear available
Gas
- Outgoing ETH includes gas costs (gasUsed x gasPrice)
Troubleshooting
- "Missing API key": Get one free at etherscan.io/apis
- "Invalid address": Must start with
0xand be 42 characters - "No data found": No transactions in selected period, or Etherscan API down
- Stale data: Click "Clear Cache" and re-run
Self Audit
Independent AI Review
Security analysis was performed by a separate AI context that had no prior knowledge of this tool's development.
Verdict: Safe for use.
Key findings:
- No data exfiltration: Requests go directly to Etherscan's public API
- Read-only operations: All Etherscan API calls are read-only queries (no transactions signed, no write operations)
- API key protection: Stored in
localStorage, stripped from cache keys, never logged - Input validation: Addresses validated against
^0x[a-fA-F0-9]{40}$ - Cache expiry: Entries expire after 1 hour, cleaned on page load
Additional notes:
- Markdown rendering uses
marked.jswith internally-generated content (not user input) - Wallet history stored locally (max 10 addresses), user-clearable
- API key show/hide/delete controls with confirmation prompts