Risk Tags Specific to the Stellar Ecosystem
Stellar Support is Currently in Beta
While our initial Stellar Ecosystem support is live, we're always working on improving and adapting our new technologies for Stellar. If you have feedback or questions, please get in touch.
Example Addresses
Try these Stellar addresses to test our API and DD.xyz app:
GA223OFHVKVAH2NBXP4AURJRVJTSOVHGBMKJNL6GRJWNN4SARVGSITYGMalicious address, serial scam minterWillowDollar:GAFKQXZYW32INZMX3N4CPB73P3ZYTPHYEZF2HYBHVL6LFPSLLOWPTJVSExample token with first buyer data
Supported Endpoints
Stellar support is currently available in our Threat Risks endpoint and Holder Analysis endpoint
Address Risk Endpoint
URL: GET /risk-score/addresses/:address?chain=stellar
Provides comprehensive risk scoring for Stellar addresses (wallets and tokens).
This endpoint currently supports wallet address and token address formats
Holder Analysis Endpoint
URL: GET /risk-score/holder-analysis/:identifier?chain=stellar
Provides token holder distribution analysis including first buyers and top holders.
Response Includes:
- Token Address
- Holder count
- Mint time
- Metadata (name, decimals, symbol)
- First buyers analysis (supply purchased by first x buyers, activity since mint)
- Top 10 holder analysis
Stellar-Specific Risk Tags
| Tag | Description |
|---|---|
stellar-clawback-operations | This address has performed clawback operations, which allow asset issuers to reclaim tokens from holders. This indicates centralized control and potential risk of unauthorized asset seizure. |
stellar-multiple-clawbacks | This address has executed multiple clawback operations (5 or more), indicating a pattern of reclaiming assets from holders. This suggests high centralization risk and potential for abuse of issuer privileges. |
stellar-malicious-account | This account has been flagged as malicious in the StellarExpert community directory, indicating known fraudulent or harmful activity (theft, scam, spam, phishing). |
stellar-unsafe-account | This account has been flagged as unsafe in the StellarExpert community directory, suggesting suspicious or risky behavior (obsolete, potentially dangerous). |
stellar-malicious-issuer-token | This token issuer has been flagged as malicious in the StellarExpert community directory, indicating the token may be fraudulent. |
stellar-unsafe-issuer-token | This token issuer has been flagged as unsafe in the StellarExpert community directory, suggesting elevated risk. |
Additional Possible Risk Tags
These risk tags may also appear for a Stellar address or token
| Tag | Description |
|---|---|
| automated_trading | This address has been identified as an automated trader. This means it is likely to be a bot or a script. |
| wash_trading | This trader or entity buys and sells the same asset to create artificial market activity, inflating trading volumes or prices. Score based on wash trading intensity. |
| dprk | This address has been identified as having connections to North Korean (DPRK) entities or activities. DPRK-linked addresses are considered extremely high risk due to international sanctions and involvement in cybercrime. |
| sanctioned | This is a Sanctioned Activity that has been found and reported by world authorities. |
| open_sanctions | This is a Sanctioned Activity that has been found and reported by world authorities (Open Sanctions list). |
| flagged | This address has been flagged in security databases or risk assessment systems as potentially suspicious or high-risk. Flagged addresses may be associated with various types of malicious activity, fraud, or other security concerns. |
| hack | This address has been associated with hacking, or may be at risk of being a hacker. |
| ofac_sanctioned | This address is linked to an entity sanctioned by the Office of Foreign Assets Control (OFAC), leading to legal and compliance issues. |
| insufficient_wallet_age | This wallet was created within a recent time frame. New wallets have limited transaction history for risk assessment. |
| insufficient_wallet_balance | This wallet has no balance. Zero-balance wallets may indicate abandoned or suspicious accounts. |
| insufficient_wallet_transactions | This wallet has no transaction history. Accounts without transactions have limited data for risk assessment. |
| low-liquidity | This token has a market cap below $10,000, indicating very low liquidity and high price manipulation risk. |
| low-pool-liquidity | This token has total pool liquidity below $10,000, making it susceptible to large price swings from small trades. |
| low-holder-count | This token has 10 or fewer holders, indicating extremely concentrated ownership and high manipulation risk. |
| token-too-new | This token was created less than 24 hours ago. Very new tokens have not established trading history and carry elevated risk. |
| extreme-holder-concentration | The top 10 holders own 70% or more of this token's supply, creating significant dump risk and price manipulation potential. |
| first-buyer-dominance | The initial buyers collectively hold 50% or more of the current token supply. This pattern often indicates insider advantage, coordinated buying, or unfair distribution that may precede price manipulation or dumps. |
| top-10-holders-own-x-percent | The top 10 holders own x% of total supply, indicating moderate ownership concentration. |