user64911: How it was found that the Dao hackers used shapeshift?
In a more practical exemple, how to find that 13qCK9VzJCicXeh47W59rh7A6tfun92Sr5 belongs to https://www.blockchain.com using only block explorer data?

user7272: There is no guaranteed way to check.
In most investigations, it is a combination of tracing the money to known addresses (most exchanges and companies consolidate funds into a handful of hot and cold wallets), and exchanges volunteering/sharing information when served with warrants.

64911: <p>How it was found that the Dao hackers used shapeshift?</p>

<p>In a more practical exemple, how to find that <code>13qCK9VzJCicXeh47W59rh7A6tfun92Sr5</code> belongs to <a href="https://www.blockchain.com" rel="nofollow noreferrer">https://www.blockchain.com</a> using only block explorer data?</p>
 7272: <p>There is no guaranteed way to check.</p>

<p>In most investigations, it is a combination of tracing the money to known addresses (most exchanges and companies consolidate funds into a handful of hot and cold wallets), and exchanges volunteering/sharing information when served with warrants.</p>
