Arkham\u2019s free plan now shows only the last 100 transactions of any wallet. To see the rest, you need Arkham Enterprise. That paid tier also holds risk scores, case files and tracing from one chain to another. Arkham launched it on 20 October 2026, and its announcement lists no\u00a0price.<\/p>\n
A busy wallet can make 100 transactions in an afternoon. So if you chase stolen funds or check wallets for a compliance team, the free plan now stops early. If that is you, you need an Arkham Intelligence alternative, at least for part of the\u00a0work.<\/p>\n
I wanted a fair test, so I took one real theft and followed it to the end. On 8 January 2026, an attacker took 8,535 ETH from Truebit, an Ethereum project with its own token. That was about $26.4 million at the time. Within 53 hours, all of it had gone into Tornado Cash, a mixer that pools many people\u2019s coins so the trail\u00a0breaks.<\/p>\n
I ran that trail through both Bitquery tools myself. For the other five, I say what each does best and where it\u00a0stops.<\/p>\n
Bitquery MoneyFlow<\/strong> (lite.bitquery.io<\/a>): a free, Arkham-style flow chart in your browser. Paste a wallet, pick one of 17 chains, and follow the money one step at a\u00a0time.Bitquery MCP<\/strong>: for people who work in Claude, ChatGPT or Cursor. Ask in plain English, and the AI pulls live transfers and labels from 19 chains, plus risk scores for Ethereum, Bitcoin and\u00a0TRON.Nansen<\/strong>: for trading research and \u201csmart money\u201d\u00a0wallets.Chainalysis Reactor<\/strong> and TRM Labs<\/strong>: what police and large compliance teams buy. Prices come by\u00a0quote.Dune<\/strong>: for people who write SQL and want dashboards.Etherscan<\/strong>: free, and fine for checking one wallet or one transfer at a\u00a0time.<\/p>\n Why people look for an Arkham Intelligence alternative<\/p>\n Arkham Intelligence is a blockchain analytics platform, and it built its name on labels. A label is a name attached to a wallet address, such as \u201cBinance hot wallet\u201d. Arkham says it holds 3.9 billion \u201cattributions\u201d, its word for these labels. Those labels stay free, along with its graph tool, called Visualizer, and its block explorer.<\/p>\n Here is what sits behind Arkham Enterprise<\/a> on 20\u00a0October:<\/p>\n the full transaction history of a wallet, with filters (free users see the 100 most recent transactions)Tracer 2.0, which follows money across bridges, the services that move coins between\u00a0chainsthe counterparties panel, which shows who a wallet deals with\u00a0mostrisk scores and case managementcreating new custom\u00a0labels<\/p>\n Arkham does give free Enterprise access to some independent investigators and public-interest groups through a grant program. Everyone else has to ask for a\u00a0price.<\/p>\n The API is gated too, with one exception. You apply through a form, and once Arkham approves you, paid plans start at $100<\/a>, billed in monthly credits. Arkham also hosts an MCP server<\/a>, so Claude, Cursor or Codex can query its data, but it needs that API plan or a trial. The exception is for AI agents: about 90 read endpoints sold one call at a time, at $0.20 per credit in USDC, with no\u00a0account.<\/p>\n I get why Arkham moved full history behind a paywall. Serving full history for every wallet costs money. Still, Arkham keeps one big edge. If your main question is who owns a wallet, its free labels are hard to beat, and nothing on this list replaces them one for one. The tools below compete on history, access and price\u00a0instead.<\/p>\n Truebit sold its TRU token through its own sale program on Ethereum, written in 2021. A math bug in that old code made the price of new TRU come out as zero. The attacker minted TRU for free, sold it back for ETH, and repeated the trick several times in one transaction. Security firm SlowMist put the loss at $26.44\u00a0million<\/a>.<\/p>\n Here is the trail, as the two Bitquery tools showed\u00a0it:<\/p>\n 8 January, 16:02 UTC.<\/strong> 8,535 ETH lands in the attacker\u2019s wallet, 0x6C8E\u9225\ufffd2b50 (transaction<\/a>).Same day.<\/strong> The wallet splits the money: 4,267 ETH to one new wallet, 4,001 ETH to another. A third payment of 268 ETH follows on 10\u00a0January.8 to 10 January.<\/strong> The 4,267 ETH pile hops through three more new wallets. The 4,001 ETH pile makes one\u00a0hop.10 January.<\/strong> Two final wallets feed Tornado Cash in round amounts of 100, 10, 1 and 0.1 ETH. By 20:52 UTC, 8,535 ETH has gone in, the same amount that was\u00a0stolen.<\/p>\n Any tracing tool should answer three questions about a trail like this. Where did the money come from? How did it split? Where did it end\u00a0up?<\/p>\n MoneyFlow is Bitquery\u2019s browser tool for tracing money between wallets. It lives at lite.bitquery.io<\/a>, and it is free: you only need to sign in with a Bitquery\u00a0account.<\/p>\n Starting a trace takes four\u00a0steps:<\/p>\n Paste an\u00a0address.Pick the chain. On 29 October the menu listed 17: Bitcoin, Ethereum, BNB Smart Chain, Polygon, Arbitrum, Base, Optimism, TRON, XRP Ledger, Cardano, Litecoin, Dogecoin, Dash, Algorand, Filecoin, Arc and Robinhood Chain.Pick the coin or token. MoneyFlow lists every currency the wallet has touched, with the date it last\u00a0moved.Set a date range if you want one, then press Create MoneyFlow.<\/p>\n The result is a flow chart. Money coming in sits on the left, money going out sits on the right, and the width of each band shows the amount. For the Truebit wallet, one green band of 8,535 ETH comes in and splits into red bands of 4,267, 4,001 and 268\u00a0ETH.<\/p>\n Trace Out<\/strong> adds the next step of the trail, and Trace In<\/strong> walks back toward the source. Each step saves a new version of the trace, so you can go back if a step gets\u00a0messy.<\/p>\n The table under the chart shows Bitquery\u2019s labels next to each address. Both wallets that took the big piles carry the tag hacker-truebit-hacker<\/em>. Exchange wallets get tagged too. When I traced the Bybit hacker\u2019s wallet from February 2025 the same way, the money came from a Bybit wallet tagged bybit-proof-of-reserves<\/em>.<\/p>\n The chart also showed something I did not expect. A fan of tiny payments, each worth less than $1, came into the attacker\u2019s wallet from look-alike addresses. One look-alike copies the first and last four characters of a wallet the attacker used, so both read 0x3b58\u9225\ufffd862a in short form. The trick is called address poisoning. Scammers hope you copy the fake address from your history next time, and here they aimed it at the thief. A threshold box above the chart hides payments below any dollar amount you\u00a0choose.<\/p>\n Two more buttons help when you need to share the work. Generate report<\/strong> turns the trace into a table of every transfer, with full hashes, which you can download as a CSV file. Get API<\/strong> opens the query behind the chart in Bitquery\u2019s GraphQL IDE<\/a>, so a developer can run it\u00a0again.<\/p>\n Where it falls short.<\/strong> Solana is not in the chain menu yet. Each trace follows one currency, so if a thief swaps ETH for USDT, you start a second trace. And after a few steps the chart can turn into loops when money flows back into wallets already on it. In the Truebit case, the third step got hard to read, and the table was\u00a0clearer.<\/p>\n MCP, short for Model Context Protocol, is a standard way to plug outside tools into an AI assistant. Bitquery MCP<\/a> plugs live blockchain data into Claude, ChatGPT, Cursor, VS Code and OpenAI\u00a0Codex.<\/p>\n Setup is short. Add https:\/\/mcp.bitquery.io as a custom connector in your assistant, then sign in with your Bitquery account. There is no API key to\u00a0paste.<\/p>\n You then get 314 tools. They trace transfers on 19 chains, including Solana, Bitcoin, Ethereum, TRON, the XRP Ledger and Stellar. They also cover DEX trades and prices on 10 chains. Guided prompts handle the common jobs: money_flow<\/em> follows funds until they reach an exchange or a mixer, and risk_screen<\/em> returns a LOW, MEDIUM or HIGH verdict with evidence.<\/p>\n I gave Claude the Truebit attacker\u2019s wallet and asked where the ETH ended up. I also asked it to name every wallet on the way and score the last ones for risk. It pulled the transfers hop by hop, looked up the labels and ran a risk check on each final\u00a0wallet.<\/p>\n The answer named two exit wallets. The first, 0x7720\u9225\ue6c759d, got 4,267 ETH after three more hops and sent 4,266.9 ETH to Tornado Cash on 10 January. The second, 0xd841\u9225\ue6c8135, got the 4,001 ETH pile plus the 268 ETH payment and sent 4,268.5 ETH to Tornado Cash the same evening. Both scored 100 out of 100 for risk, the top of the scale, mainly because they paid a mixer. The risk check also flagged look-alike poisoning addresses next to\u00a0both.<\/p>\n MoneyFlow reached the same Tornado Cash address three steps out from the attacker. The MCP got there from one question. Arkham has a hosted connector too, so the real difference is access. Arkham\u2019s needs an approved API plan or trial, while Bitquery\u2019s trial is self-serve and needs no\u00a0card.<\/p>\n The product page<\/a> listed three plans on 29 October 2026. The free trial runs 7 days with 100 credits, and it needs no card. Trading MCP costs $19 per month and covers trading data only, with 32 tools and no tracing. AI Investigation MCP, the plan with tracing, costs $149 per month, or $100 per month billed yearly, and includes all 314\u00a0tools.<\/p>\n Where it falls short.<\/strong> On Ethereum the risk check looks one step out from a wallet; on TRON it can look several steps. An AI assistant can also misread a result, so open the transaction hashes it cites before you rely on them. And like MoneyFlow, it follows one chain at a time, so you hop a bridge yourself.<\/p>\n In words: Arkham\u2019s free plan shows the last 100 transactions per wallet, while MoneyFlow uses whatever date range you set and the MCP pages through the full history. Arkham\u2019s Visualizer stays free, and MoneyFlow draws a flow chart too; the MCP answers in\u00a0text.<\/p>\n Arkham Enterprise follows money across bridges for you. MoneyFlow and the MCP work one chain at a time. Risk scores come with Arkham Enterprise and with Bitquery MCP, not with MoneyFlow.<\/p>\n Price works differently on each side. MoneyFlow is free with a Bitquery account. Arkham Enterprise lists no price. Its API starts at $100 after approval, or $0.20 per credit pay as you go. Bitquery MCP is self-serve, with a free trial and then $149 per month for\u00a0tracing.<\/p>\n Best for police, prosecutors and large exchanges. Reactor is Chainalysis\u2019s case graph, and law enforcement uses it widely. There is no public price and no self-serve trial. If you work alone or on a small budget, it is likely out of\u00a0reach.<\/p>\n Best for compliance teams and government buyers. TRM sells its Forensics tool for tracing funds across chains, next to its wallet screening tools. Most of it is sold by quote, mainly to large\u00a0firms.<\/p>\n Best for analysts who write SQL. Dune lets you query blockchain data and build dashboards, and it has a free tier and its own MCP server. There is no ready-made tracing screen, so you write the queries yourself or let its MCP server write\u00a0them.<\/p>\n Best for checking one transaction or one wallet for free. Etherscan shows name tags on well known addresses, and it tags the Truebit attacker\u2019s wallet \u201cTruebit Exploiter 1\u201d. There is no flow chart, so tracing a trail across many hops means a lot of\u00a0tabs.<\/p>\n Best for trading research. Nansen labels wallets and marks the ones with a strong record as \u201csmart money\u201d. You can then watch what they buy and sell. There is a free tier and a paid Pro plan, plus an API, an MCP server and a command-line tool. Its tools center on trading signals, so it is a weaker fit if you need to build a case\u00a0file.<\/p>\n Bitquery sells three more things for this kind of\u00a0work:<\/p>\n Coinpath:<\/strong> the money-flow data behind MoneyFlow, sold to companies with full history and bulk\u00a0export.Crypto investigation service<\/strong><\/a>:<\/strong> if you were robbed and would rather hand the work to someone, Bitquery\u2019s team traces the funds. Its page says the first assessment is\u00a0free.Ethereum datasets<\/strong><\/a>:<\/strong> the full history of the chain as files, for teams that want to run their own analysis.<\/p>\n You want Arkham\u2019s look without paying for Enterprise: Bitquery MoneyFlow<\/strong>, which is\u00a0free.You already work in Claude or ChatGPT: Bitquery\u00a0MCP<\/strong>.You trade and want smart-money signals:\u00a0Nansen<\/strong>.You work for police or a regulated firm with a budget: Chainalysis Reactor<\/strong> or TRM\u00a0Labs<\/strong>.You write SQL:\u00a0Dune<\/strong>.You only need to check one transfer: Etherscan<\/strong>.<\/p>\n Is there a free alternative to Arkham Intelligence?<\/strong><\/p>\n Yes. Bitquery MoneyFlow is free with a Bitquery account and traces a wallet over any dates you pick. Etherscan is free for looking up one wallet or transaction at a time, and Dune has a free tier. Bitquery MCP has a 7-day free trial with 100 credits and no card. Arkham itself still has a free plan, but it shows only the last 100 transactions per\u00a0wallet.<\/p>\n What is the best Arkham alternative for tracing stolen\u00a0crypto?<\/strong><\/p>\n For a visual trail, Bitquery MoneyFlow; for asking questions in plain English, Bitquery MCP. For court work with a large budget, Chainalysis Reactor or TRM Labs. I work at Bitquery, so weigh my pick with that in\u00a0mind.<\/p>\n Does Arkham have an\u00a0API?<\/strong><\/p>\n Yes. You apply through Arkham\u2019s API form, and once Arkham approves you, plans start at $100, billed in monthly credits. Some applicants get trial access first. Arkham also hosts an MCP server for AI assistants, and AI agents can pay per call at $0.20 per credit in\u00a0USDC.<\/p>\n Can AI trace crypto transactions?<\/strong><\/p>\n Yes, if the assistant is connected to live blockchain data. With Bitquery MCP, Claude followed the Truebit money to Tornado Cash and scored both exit wallets 100 out of 100 for risk. Check the transaction hashes it cites before you act on\u00a0them.<\/p>\n Can you trace crypto after it goes into Tornado\u00a0Cash?<\/strong><\/p>\n Not directly. A mixer pools many people\u2019s deposits, so the link between a deposit and a withdrawal breaks. Investigators match the timing and size of later withdrawals, which is slow and gives odds, not\u00a0proof.<\/p>\n Start a trace at lite.bitquery.io<\/a>, or connect Bitquery MCP<\/a> to your AI assistant and ask it to follow a wallet. If you want the raw history instead, Bitquery sells the Ethereum dataset<\/a> as\u00a0files.<\/p>\n Best Arkham Intelligence Alternatives in 2026: 7 Tools, 2 Tested on a $26M Hack<\/a> was originally published in Coinmonks<\/a> on Medium, where people are continuing the conversation by highlighting and responding to this story.<\/p>","protected":false},"excerpt":{"rendered":" Arkham now puts full wallet history, cross-chain tracing and risk scores behind a paid Enterprise tier. I followed a real $26 million theft with two Bitquery tools, then lined up five more\u00a0options. Arkham\u2019s free plan now shows only the last 100 transactions of any wallet. To see the rest, you need Arkham Enterprise. That paid […]<\/p>\n","protected":false},"author":0,"featured_media":245318,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-245317","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-interesting"],"_links":{"self":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/245317"}],"collection":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=245317"}],"version-history":[{"count":0,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/245317\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/media\/245318"}],"wp:attachment":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=245317"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=245317"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=245317"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}The test case: the $26 million Truebit\u00a0hack<\/h4>\n
1. Bitquery MoneyFlow: visual crypto tracing in your\u00a0browser<\/h4>\n
2. Bitquery MCP: ask your AI assistant to follow the\u00a0money<\/h4>\n
Arkham vs Bitquery at a\u00a0glance<\/h4>\n
5 more Arkham alternatives worth\u00a0knowing<\/h4>\n
3. Chainalysis Reactor<\/h4>\n
4. TRM\u00a0Labs<\/h4>\n
5. Dune<\/h4>\n
6. Etherscan<\/h4>\n
7. Nansen<\/h4>\n
Other Bitquery products for investigators<\/h4>\n
How to choose an Arkham alternative<\/h4>\n
FAQ<\/h4>\n
Try it\u00a0yourself<\/h4>\n