Test whether a syntactically valid Monero address can support an extortion attribution—it cannot.
This fictional exercise says an extortion note submitted to Northstar Payroll contains a Monero address. The address is deliberately copied from official Monero documentation so the checksum result is real and reproducible while the incident narrative and project are clearly synthetic.
01
INVESTIGATOR BRIEF
Research question
Validate the public address locally, compare its classification with the official Monero format, and explicitly reject ownership, activity, balance, payment, and malicious-intent conclusions.
The supplied address is an official Monero documentation example. ChainRadar can validate its structure and checksum, but no criminal association or chain activity follows from that result.
02
PROVENANCE BEFORE CONCLUSION
Evidence ladder
Read these layers in order. A later layer may explain an observation, but it does not change what kind of evidence the underlying transaction is.
01 · on-chain fact
No chain-activity fact is established
The local validator performs only Base58, prefix, decoded-length, address-type, and Keccak checksum checks. It does not query Monero chain activity.
02 · source-reported context
The address is a public documentation example
Official Monero documentation publishes the exact address and the format rules. The Northstar extortion narrative is a ChainRadar training fixture.
03 · bounded inference
Syntactic validity is not evidence of an incident
A valid checksum supports only a narrow transcription and network/type conclusion. It cannot support ownership, use, balance, payment, attribution, safety, or malicious intent.
03
REPRODUCIBLE START POINT
Seed public address
Monero · Training fixture · no incident date
Official documentation example used as a synthetic control
The Monero documentation publishes this exact standard-address example and explains its mainnet prefix, two public keys, four-byte checksum, and 95-character encoding.
No real actor address is asserted in this synthetic control.
Validate only the exact public-address syntax. The absence of a chain query is intentional, and the documentation example must not be relabelled as criminal infrastructure.
05
CHAINRADAR LAB
Platform workflow
01
Monero Address Validator
Validate the address locally
ActionOpen the prefilled public address and validate it without sending it to a provider.
Evidence goalValid mainnet standard address, supported prefix, and verified Keccak-256 checksum.
A ChainRadar result is one observation. Compare it with an independent ledger, official record, or technical source and record both agreement and discrepancy.
01
The supplied string is a valid Monero mainnet standard address.
ChainRadar check
Browser-local Base58, prefix, length, type, and checksum validation
Independent check
Exact example and layout in the official Monero standard-address documentation
Expected agreement
Mainnet, standard address, 95 characters, and checksum valid.
02
The validator detects transcription corruption.
ChainRadar check
Last-character negative-control validation
Independent check
Official rule that the first four bytes of Keccak-256 form the checksum
Expected agreement
The modified address is rejected with a checksum mismatch.
03
The address belongs to an extortion actor or received a payment.
ChainRadar check
No such operation exists in the local validator
Independent check
The address is publicly documented as a format example
Expected agreement
The claim is unsupported and must be rejected.
07
REPORTING STANDARD
Calibrated findings
Supported conclusions
The exact string is a syntactically valid Monero mainnet standard address.
Changing one encoded character causes a deterministic checksum failure.
No incident, payment, balance, ownership, identity, or malicious intent is established.
Required limitations
The Monero validator performs no provider or blockchain query.
The project, note, and extortion scenario are fictional and must never be presented as a real event.
The documentation example must not be labelled as criminal infrastructure.