AI-enabled, chain-validated, one-click visualisation of fund flows

Transcript

[music] [music] >> Everyone, uh so I'm from the Etherscan team. I do product. And uh actually it's very related to what Demetrius was talking about. Uh we've um I've put up this very AI-generated clickbaited title and we'll see if the content of the talk uh lives up to the name. Um but yeah, it's essentially the same thing. Uh and since the 11 years we've been running the Explorer, we've always had uh people asking how we can trace transactions across multiple hops. Uh just in the last few days there's this

biggest hack ever in the whole world uh with Binance and uh with Mercado Bitcoin in Brazil. Um people always want to know what happened. And a lot of people actually go on X and share their own investigations. There's a lot of citizen journalism that's already being done. Uh but there's no real way to surface that to uh everyone. Uh but it's not just hacks. Uh just now uh we mentioned address poisoning in an earlier talk. Uh there's a lot of these uh happening and sometimes you want to see this in a visual chart instead of just uh a list of transactions.

And it could even be just um understanding a contract interaction. So this is a tweet from uh Cassandra.eth uh talking about Kohaku which was mentioned in yesterday's uh opening ceremony. And um she posted a list uh sorry, a a link to the transaction and you can actually explore that uh transaction uh in a visual way. So a lot of people have been doing this. Uh HackenProof uh just now talked about it. There are a lot of companies raised billions probably and kind of provide this service to investigators. But uh it's not that available to the normal user uh for you and me to be able to to use. And actually Etherscan already did

something similar way back in 2020 uh called EthProtect. Uh, we retired it shortly after because we figured out for the normal user it's very tedious, very cumbersome to be able to s- like piece up the whole uh case of a transaction flow. Uh, so we stopped uh working on it. But with AI we've been able to figure a way where not just for us to build this product but for people to be able to use it. Um, and that's uh enough talking about it. I'll try and demo. Uh, unfortunately with painful experiences doing live demos it's not a good idea trying to do it uh live, but I have the slides and if you have your devices you could actually scan the QR code and go direct to the

links that I'm uh showing here. Uh, so if you go to etherscan.io/flow uh you can create an Etherscan flow. Uh, if you click the button in the middle um I'll just very quickly go through this. Uh, you can do an instant diagram where there's not validated against on-chain data or you could verify it against uh Etherscan's data. And if you click next uh you just literally copy this command into your agent uh that you prefer. Or um yeah, so I just copied it here and it ran it for a little while and the skill is ready for the agent to use.

Uh, or if you want you could review the entire skill. It's open source on GitHub uh and uh you can see how it works. You can fork it if you'd like and use it in your own uh UIs. Then uh if you kind of add the skill already uh you can get to this page. Uh, in this case I literally copied Cassandra Street uh gave it to uh Codex to analyze and it spun out uh this JSON file which you can get from there. And uh this is the case flow already uh with literally >> you >> one click uh from an agent uh I return a result. So you can see with Kohaku, there is that 0.03 ether and 0.01 ether

deposit being done. That is not via the normal Tornado Cash addresses. So, you can visualize it directly in the UI. Uh with the API key from Etherscan, you can actually validate this transaction. I just click one time and let it run. And it will check that all of the transactions and addresses listed match what Etherscan shows. So, you're not trusting some random guy on X when they say something. You can actually validate that all the transactions that they mentioned are legit. And you can publish it with a comment.

And once there, it's live. You can check anyone can check that um the link and you can see this flow. You can even share it on X, which I will do very shortly to my X account. And there'll be a nice image that goes with it. And yeah, so you can cover many cases. So, this is an address poisoning sample that I shared earlier. You can see the fake USDC is being transferred. And this is one small zoomed in portion of the Binance hack. As of that day, I had 334 transactions across many different chains. Not all of them validated against Etherscan cuz we don't support the non-EVM transactions yet.

Uh but yeah, so in the final few seconds, how did it measure up to the title? So, is AI enabled? Uh it's chain validated. It's not exactly one click, so apologize for the clickbait. Um and it goes to the limitations cuz it's we're not doing this as a full-fledged product yet. Uh people raised hundreds of millions to work on this and we're just doing it as a vibe-coded side project, quote unquote. Uh so, I'd love to be able to do more with this feature, but ultimately it's up to the users. So, if you guys find it useful, if you guys find that it helps whether to track hacks or just to understand contracts, please let us know your feedback either

here or outside later. There's a lot of ways it could be improved and I feel like this is one use case where agents actually help, not just for people like us to build a product, but for you or anyone to be able to do the analysis in a very easy and simple way. So, that's pretty much it. Thanks, everyone. >> Thank you. Thank you, Harith. I feel like you robbed me a little bit on that intro with the one-click thing and so on. But, um pretty impressive stuff either way. Uh any questions from anyone in the audience for for Harith? If so, please raise your hand. And then uh there'll be a box thrown towards you that you ought to catch.

>> Can I use this to do my taxes? >> Um I would believe so. Probably you might want to add like one or two other skills or we might kind of work with you to uh work on that as well. Um depends on your jurisdiction and all of the stuff and how that works, but yeah. At least it would be able to eliminate a bunch of address poisoning that you'd see on your address. So, it's a lot easier for you to find the legit transactions. >> Is there a lot of uh usage of tools in the [snorts] skills or does the does the skill point the agent that's uh deterministic tooling or is it agent only?

>> It's just that agent. Um you can use it with We made it very easy for Codex and Claude, but you can literally use it with any agent that you have. Uh and uh it's open source, so if you have any improvements you'd like us to make, we're happy to uh to explore. And yeah, my challenge is we have to juggle against 100 other things that we need to do for the explorer. So, if I can get users telling us that this is really helpful, then I can help justify spending more time on it. >> [music]