An unidentified string repeatedly recorded on the Bitcoin blockchain over three weeks is more likely data used to test automated tools than a real encrypted message, an analysis said.

On Oct. 26, CoinPost reported that Galaxy Research, the investigative arm of Galaxy Digital, analysed recent string-recording activity seen on the Bitcoin network. It judged the activity was closer to testing than an attempt to deliver a specific message.

The string in question was recorded on the Bitcoin blockchain about 40 times a day for three weeks. Galaxy Research tallied that the daily count started at about 12, then rose to 24 and then to about 40. The data was stored using OP_RETURN, a function that can record arbitrary information in Bitcoin transactions.

This activity was enabled by eased rules in Bitcoin Core v30. Released in October 2025, the version relaxed the byte cap for data recording via OP_RETURN and the limit on how many such records are allowed per transaction. In May this year, there was also a case in which the full text of the U.S. Constitution was recorded on the blockchain using the same function.

Galaxy Research analysed that the funds used for the recent string recordings came from the same source as the funds used for the U.S. Constitution recording at the time. The money trail goes back to three small exchange withdrawals in May this year, with a total of 0.033 bitcoin (BTC). The identity of the actual operator was not confirmed.

Funds used so far for this activity total about 3.33 million satoshis. Of that, about 24 percent is estimated to have been paid as miners' fees, with the rest analysed as remaining at related addresses.

Galaxy Research also viewed the possibility that the strings are actual ciphertext as low. That is because, across 562 texts analysed, the appearance rate of each of the 26 letters was nearly even at about 3.6 to 4.2 percent. It said this differs from letter frequencies seen in typical languages, making it hard to view as a simple substitution cipher. It also found no statistical characteristics of a Vigenere cipher using a repeating key.

The recording pattern was also assessed as closer to traces of an automated program. Long strings were posted every 6 hours and short strings every 90 minutes, with the same cycle continuing at night and on weekends. Based on this, Galaxy Research estimated the activity may be closer to tool testing than message delivery and issued a recommendation in the sense of "stop reading".

The case also renewed debate over recording data other than financial transactions on the Bitcoin blockchain. Opponents worry that more data recording could burden Bitcoin's original purpose and the use of network resources. Supporters, in contrast, argue it can broaden the scope of on-chain use. With data-recording cases increasing after OP_RETURN rules were eased, discussion is expected to continue over the range of data that should be allowed on the Bitcoin network.