The enterprise trust stack: Holder Graph forensics, tamper-evident audit trails, webhooks, and an Issuer Dashboard

This summer ChainAnalyzer shipped four features aimed squarely at compliance teams. The common theme: moving investigation results through your organization in an audit-proof form.

1. Holder Graph & Cluster Forensics (Business+)

Token holder distributions rendered as force-directed graphs, with common-funder clustering via Neo4j BFS. Sybil structures — "the top 30 holders are actually one entity's distributed bags" — become visible as graph shapes. AI-generated forensic narratives (why this cluster is suspicious) and PNG export are built in, ready to paste into an investigation report.

2. Financial-grade audit trails

Every activity log entry is now hash-chained and periodically anchored to WORM (Write Once Read Many) object storage — a two-layer design. Rewriting even a single historical row breaks the chain detectably. Nobody, including us as the operator, can silently alter history. Built for regulated environments where you may later need to prove who saw which scan result, and when.

3. Three webhook events + a dedicated delivery worker

Risk level change / watchlist update / report ready — three webhook events, delivered by a dedicated worker with retries and duplicate-delivery prevention (atomic delivery claims). Wire them into your SIEM or team chat on Pro plans and above.

4. Issuer Dashboard (Enterprise)

For stablecoin issuers: a dashboard that tracks multi-chain circulating supply and issuance/redemption flows by querying operational wallets directly on-chain — first-party data rather than aggregator estimates, aiming for accuracy you can carry into financial reporting and audits.