It described a tool called Rumker, explaining that Chainalysis could use its surreptitious Bitcoin nodes for identifying IP addresses not only of individual users’ wallets but also those of unknown services—including dark web markets. “Although many illegal services run on the Tor network, suspects are often negligent and run their bitcoin node on clearnet,” the slide read, using a term for the traditional internet not protected by Tor.
