Darknet screening on Ethereum follows account calls and token transfers, not UTXO merges. Analysts attribute market settlement wallets, then trace ERC-20 hops, DEX swaps, and bridge exits that move value after a cash-out.
Smart-contract settlement replaces classic escrow coins
Some markets and illicit shops settle in ETH or stablecoins through contracts and intermediary EOAs rather than a single deposit address pattern familiar from Bitcoin. The useful question is which contract or labeled service received value, and whether the screened account initiated that call.
DEX multi-hop after a market payout
Illicit proceeds on Ethereum rotate through decentralized exchanges within minutes. A darknet-linked inflow that immediately swaps into another token is still darknet-sourced exposure; the swap does not erase the attribution, it only adds a hop that must be recorded.
Bridge exits need a linked deposit and release
Carrying a darknet tag onto another chain requires linking the bridge deposit to the matching release. Treating two unrelated amounts as one transfer invents exposure. Keep the Ethereum-side entity name and the bridge transaction hash in the note.
Next step
Screen the ETH address and inspect any named illicit service path before acting. A token-swap trail is context, not automatic proof of market operation by the current controller. This information is not legal or financial advice.