01
Malware Research
Reverse engineering of malware interacting with blockchain APIs and smart contracts. Extraction of blockchain addresses, domains, URLs, configuration data, and other IOCs.
BLOCKCHAIN THREAT INTELLIGENCE
Detect malicious infrastructure hidden in public blockchains.
Blockc2hain analyzes malware and on-chain activity to identify blockchain addresses, smart contracts, domains, payload locations, and infrastructure used for command-and-control and other malicious operations.
Currently in private development
Research started October 2025
$ blockc2hain analyze 0x7f...91c
network ethereum
classification malicious
confidence high
activity:
• c2 configuration
• payload location
• domain rotation
linked:
domains 7
samples 14
campaigns 2
status monitoredTHE PROBLEM
Legitimate decentralized infrastructure is increasingly abused by threat actors.
Malware can use public blockchain networks to retrieve C2 domains, payload locations, configuration data, and other operational information. Security teams cannot simply block major blockchain APIs because they are legitimate services, while manually investigating every observed blockchain address does not scale.
THE PLATFORM
From malware reverse engineering to actionable intelligence.
02
On-chain Discovery
Analysis of known malicious entities, behavioral patterns, transactions, and related infrastructure to discover previously undocumented addresses and contracts.
03
Threat Correlation
Correlation of blockchain activity with malware samples, domains, campaigns, YARA rules, and public threat intelligence.
04
Feeds & APIs
Continuously updated intelligence for SOC teams, MSSPs, threat intelligence platforms, EDR/XDR vendors, blockchain security teams, and government organizations.
HOW IT WORKS
A continuous intelligence loop.
Malware samplesReverse engineering and IOC extraction
→
Known malicious entitiesValidated blockchain addresses and contracts
→
On-chain discoveryBehavioral and infrastructure analysis
→
Threat intelligenceFeeds, APIs, detections and research
WHY NOW
Traditional threat intelligence was not built for decentralized infrastructure.
Public blockchains create a resilient infrastructure layer that attackers can abuse without relying on a traditional server they directly control. Blockc2hain is building a dedicated intelligence layer for this emerging attack surface, helping defenders identify malicious activity before it becomes widely documented.
ABOUT BLOCKC2HAIN
Research-driven from the beginning.
The research behind Blockc2hain began in October 2025 with malware investigations involving public blockchain infrastructure. What started as manual reverse engineering, on-chain hunting, and infrastructure correlation is being developed into a repeatable, continuously updated threat intelligence capability.
Our focus is simple: connect malware research with blockchain analytics to make malicious decentralized infrastructure visible and actionable for defenders.
CONTACT
Interested in research, partnerships, or early access?
Blockc2hain is currently in private development and is speaking with security teams, researchers, potential partners, and investors.
[email protected]