Every wallet leaves a pattern.

Enter a public wallet address. Whorl traces where the funds came from, where they went and who was on the other side.

Download for Windows

Windows 10 and 11 · Public data only · No account

  1. 1Hop 19 wallets
  2. 2Hop 221 wallets
  3. 3Hop 354 wallets
  4. Pattern3 traitssample

Sample: an investigation of the wallet johndoe.eth

Hop 1Hop 2Hop 3

johndoe.eth

First seensample

14 Mar 2021

Last active 2 Nov 2026 · 1,118 transfers

Money insample

412.60 ETH

  • Exchanges61%
  • Bridges24%
  • Other wallets15%
  • Largest96.00 ETH from 0x9d2…7Ab

Money outsample

398.15 ETH

  • Exchanges38%
  • Bridges9%
  • Other wallets53%
  • Largest120.00 ETH to 0x3aB…91c
  • Still in the wallet14.45 ETH

The patternsample

29wallets share this patternA lead, not proof of one owner.

  • TimingTue to Thu, 13–16 UTC
  • Counterparties2 exchanges, 1 bridge
  • Amountsround, 40 to 120 ETH

0x4f0x9a+27in the app

Download for Windows

One address in. Four answers out.

Whorl reads transparent public blockchains such as Bitcoin, Ethereum and Tron. Public data only: the same ledger anyone can open in a block explorer.

When it was active

The first transfer and the last, the busy quarters and the silent ones, down to the hours of the day it usually moves.

Transfers by weekday and hour, UTCsample

Who is on the other side

Counterparties sorted by kind: exchanges, bridges and plain wallets. Every label says where it came from.

84 counterparties in 3 hopssample

  • Exchangespublic tag13
  • Bridgespublic tag6
  • Other walletsno label65

The largest transfers

The biggest moves in and out, each with its hash, so you can check it yourself in a block explorer.

Largest of 1,118 transferssample

  • Out120.00 ETHto 0x3aB…91c9 Aug 2025tx 0xa77…2d4
  • In96.00 ETHfrom 0x9d2…7Ab2 Jun 2024tx 0x5e1…c09
  • Out64.50 ETHto 0xB1d…0e221 Jan 2026tx 0x83f…a16

The pattern

Timing, counterparties and amounts, read as one shape. Whorl lists other public wallets with the same shape. A match is a lead, not proof of the same owner.

29 wallets with the same patternsample

  • johndoe.ethwallet you entered
  • 0x4fin the app
  • 0x9ain the app
  • 0xc1in the app

How a hop is read.

A transfer on a public chain is a record anyone can open. Whorl follows the amount and the clock from one wallet to the next. Each step out is one hop.

  • Sender
  • Receiver
  • Amount
  • Time
  • Hash

Two hops out of the sample walletsample

  1. johndoe.eth0x71C…e4F

    the wallet you entered
  2. Hop 1120.00 ETH9 Aug 2025, 14:02 UTCtx 0xa77…2d4

  3. 0x3aB…91cheld it for 41 minutes

    no label
  4. Hop 2118.40 ETH9 Aug 2025, 14:43 UTCtx 0x1c9…e80

  5. Bridge contract0xB1d…0e2

    public tag

41 minutes apart, 98.7% of the amount. Whorl marks the second transfer as the likely next step, and shows why.

What Whorl will not claim.

An address is not a person. Whorl stops where the public record stops, and says so on every report.

SaysExchange · public tag

NeverExchange, confirmed

Labels are tags, not verdicts.

“Exchange” and “bridge” come from public tags and from heuristics. Each label says which. Some will be wrong.

SaysSame pattern

NeverSame owner

A match is a lead.

Two wallets with one pattern can be one owner, one bot, or two strangers using the same service. The rest is your work.

Says0x3aB…91c · no label

NeverOwned by a named person

No names of private people.

Whorl shows addresses and the public labels of services. It does not put a private person’s name on a wallet.

Straight answers.

Which blockchains can it read?

Transparent public blockchains, such as Bitcoin, Ethereum and Tron. On those, every transfer is public: sender, receiver, amount and time. Privacy coins such as Monero hide all of that by design. Whorl cannot read them this way.

Can it see anything private?

No. Whorl has no access to keys, seed phrases, exchange accounts or identity records. It reads the public ledger and public tags, and nothing else.

Where do the results go?

They stay on your PC. An investigation is a file you can keep, export or delete. There is no account and no cloud copy of what you looked up.

Is this allowed?

Reading a public blockchain is what anyone can do by hand in a block explorer. Follow the terms of each data source and your local law. Do not use Whorl to harass anyone or to expose a private person.

Start with one address.

Windows 10 and 11 · Public data only · No account

Download for Windows