Is anyone aware of existing STIX extensions for dealing with cryptocurrency transactions?

[0101001001001]

We’re looking to start creating an intelligence feed for financial service clients showing crypto transactions suspected of being used to support illegal activities.

Ideally I want to deliver this info as STIX data. I know the core STIX 2.1 spec has no crypto related objects. Wondering if anyone out there has worked on something in the public domain I could take a look at?

[dgreenwood-dogesec]

I wrote some very hacky ones for an experiment a very long time ago…

• Crypto TX example: https://github.com/signalscorps/stix4signalscorps/blob/main/objects/custom-object-examples/cryptocurrency-transaction--86357cfc-7573-5da3-82ea-aeabbaa88a46.json
• Crypto Wallet example: https://github.com/signalscorps/stix4signalscorps/blob/main/objects/custom-object-examples/cryptocurrency-wallet--ede371d0-631c-5d68-b3f6-48f5c510b857.json

A LOT can be improved upon.

Also, this paper by Adam Turner also implements a custom SCO (see page 120 for spec of x-cryptocurrency-address object):

Addressing The Intelligence Applications of Bitcoin Payments Related to...