Key Takeaways
- Investigators examined 29,120 crypto addresses and identifiers.
- The operation generated 14,300 leads across 11 exchanges and payment services.
- Private-sector partners identified over 7,700 suspect accounts.
Operation Lighthouse Turns Blockchain Data Into Leads
Investigators converted months of cryptocurrency data analysis into actionable leads during the Operation Lighthouse sprint, announced Aug. 25 by blockchain analytics firm Chainalysis.
Chainalysis described its operation targeting child sexual abuse material (CSAM):
“Operation Lighthouse investigated 29,120 cryptocurrency addresses and digital identifiers, and targeted more than 100 distinct CSAM platforms, forums, and distribution networks across the surface web and dark web.”
Public blockchains maintain transaction histories that investigators can follow between cryptocurrency addresses, although an address does not independently reveal its owner. The public nature of bitcoin transactions allows investigators to map fund movements before combining that activity with exchange records, payment data, and law enforcement evidence to identify account holders.
The National Cyber-Forensics and Training Alliance hosted the sprint in New York, bringing together investigators from several continents. At least nine law enforcement agencies, more than 13 private-sector partners, and specialized nonprofits participated, including Europol, the Australian Federal Police, the Royal Canadian Mounted Police, and the United Kingdom’s National Crime Agency.
Thousands of Accounts Surface Across 125 Countries
Chainalysis reported:
“The first-of-its-kind sprint generated 14,300 investigative leads, surfaced 7,700+ suspect accounts, and identified CSAM-linked suspects in 125 countries.”
The figures represent accounts, identifiers, and investigative leads rather than arrests or convictions. Authorities must conduct follow-up investigations, obtain legal process, and establish each account holder’s role before pursuing criminal charges. Private-sector partners also identified 16 registered sex offenders, while two participating companies alone identified at least 150 individuals.
Online distribution networks operate at a scale extending far beyond cryptocurrency activity. The Internet Watch Foundation confirmed 311,610 reports containing or leading to abusive material in 2025, an increase of 7% from the previous year. Its analysts also identified 15,031 commercial websites selling abuse imagery, more than double the 7,028 counted in 2024.
Earlier Operations Demonstrate Blockchain Tracing’s Reach
International investigations have previously converted digital intelligence into arrests and platform disruptions. A Europol-supported operation against Kidflix identified approximately 1,400 suspects and resulted in 79 arrests. Authorities said the platform had attracted about 1.8 million users between April 2022 and March 2025.
Blockchain forensics contributed directly to the Kidflix investigation by tracing the platform’s cryptocurrency payment infrastructure. Binance’s investigative team helped connect more than 120 users to recorded transactions, illustrating how public transaction records can produce identifiable leads when combined with information held by exchanges and payment companies.
The same investigative method applies across other dark web markets and criminal payment systems. A multinational operation targeting the AudiA6 laundering service traced approximately 10,333 BTC deposited into associated wallets, leading to arrests, infrastructure seizures, asset freezes, and efforts to extradite two alleged senior operators.
Investigative Outcomes Could Continue Through 2027
Operation Lighthouse established a shared process through which law enforcement, cryptocurrency companies, and nonprofits can examine common leads simultaneously. Comparable cooperation between authorities in Ghana and the United Kingdom helped recover $15.1 million in cryptocurrency after investigators used shared blockchain data to connect wallets spanning nearly 20 digital assets.
“At Coinbase, we believe the transparency of crypto is a powerful tool for protecting people and disrupting abuse,” Coinbase stated, adding:
“Operation Lighthouse shows what’s possible when law enforcement, industry, and nonprofit partners act together – turning on-chain insights into meaningful investigative leads and action against CSAM networks.”
Chainalysis said the Lighthouse results are expected to develop into account restrictions, arrests, and prosecutions as authorities pursue the generated leads. Those outcomes could continue accumulating through 2027, while the firm plans to apply the sprint model to other categories of illicit cryptocurrency activity.
