CCA Blockchain Forensic Analysis 3

Question 1

What is 'address poisoning' in the context of cryptocurrency fraud investigation?

Accepted Answer

Creating a lookalike address with matching first/last characters to trick victims into sending funds to the wrong address

Answer

Address poisoning exploits copy-paste behavior by sending zero-value transactions from a vanity address that visually resembles the victim's counterparty address.

Question 2

In UTXO-based chain analysis, which output type is most commonly identified as a 'change output' returned to the sender?

Accepted Answer

The output with a non-round amount sent to a previously unused address

Answer

Change outputs typically carry the residual non-round amount and are sent to a fresh address generated by the sender's wallet, distinguishing them from the payment output.

Question 3

Which technique do forensic analysts use to attribute blockchain addresses to real-world entities without a legal request to an exchange?

Accepted Answer

Open-source intelligence (OSINT) combined with direct interaction transactions

Answer

OSINT (forums, social media, dark web markets) combined with controlled test transactions that interact with suspect addresses can attribute wallets to entities outside of formal legal process.

Question 4

A forensic report shows a wallet cluster sending funds through five intermediate hops before reaching a known exchange. This pattern most closely describes which stage of money laundering?

Accepted Answer

Layering

Answer

Layering involves moving funds through multiple transactions or intermediaries to obscure the audit trail and distance proceeds from their criminal origin.

Question 5

Which property of a public blockchain makes it fundamentally different from traditional financial records for forensic purposes?

Accepted Answer

Blockchain records are immutable and permanently accessible without a court order

Answer

Public blockchains are permissionless ledgers where all historical data is permanently transparent, giving investigators indefinite access without needing to subpoena a custodian.

(CCA) Certified Cryptocurrency Auditor Practice Test

(CCA) Certified Cryptocurrency Auditor Practice Test

CCA Blockchain Forensic Analysis 3