Follow the funds, on-chain.

An automated tracer paired with human analysts that maps the path of stolen crypto across mixers, bridges and intermediate wallets to an attributable destination, where compliance levers exist.

Request a trace How tracing works
Chains supported
7+
Counterparty types
6
Avg trace turnaround
5–10 d
Cross-chain bridges
4 partners

How tracing works

Four steps from source address to actionable destination.

The tracer is automated where speed matters and human-led where judgement matters. Every trace ends with a recommended recovery channel, not just a map.

  1. 01 Intake You send us the source address, chain, transaction hash, and a brief description of the loss.
  2. 02 Outbound expansion The tracer walks every outbound transaction from the source, classifying counterparties at each hop.
  3. 03 Attribution Destinations are matched against known wallets — exchanges, mixers, bridges, OFAC-flagged addresses.
  4. 04 Recovery channel Output: a trace map plus the recommended recovery route — exchange compliance, freeze order, or victim-pool claim.

Coverage

What we trace, and where we trace it to.

Tracing only matters if it ends somewhere actionable. Coverage is built around the chains where attribution is realistic and the destination types where compliance levers exist.

Chains supported

  • BitcoinBTC, native and wrapped
  • EthereumETH and ERC-20 tokens
  • StablecoinsUSDT, USDC across all major networks
  • TronTRX and TRC-20
  • BNB Smart ChainBNB and BEP-20
  • PolygonMATIC and Polygon ERC-20
  • Cross-chain bridgesCoordinated with bridge analytics partners

Counterparty types we attribute

  • Centralised exchangesTier-1 and regional venues with compliance desks
  • Decentralised exchangesThrough tagged contract interactions
  • OTC desksIdentified through cluster analysis
  • Mixers and tumblersTornado Cash, Wasabi, Samourai, others
  • BridgesCross-chain hops continued via partner intel
  • OFAC and sanctions-flaggedTriggers different recovery channels

Deliverables

Three artefacts, every trace.

A trace is only useful if it produces something a counsel, an exchange, or a regulator can act on.

⌖

Trace map

Visual graph of every hop from source to attributable destination, with transaction hashes preserved.

  • Source address & chain
  • All intermediate hops
  • Destination cluster
  • Tx hashes for evidence
⌕

Attribution report

Counterparty intelligence on the destination cluster: exchange identity, jurisdiction, and known compliance posture.

  • Cluster identification
  • Counterparty type
  • Jurisdiction & AML stance
  • Known case history
⛨

Recovery channel

The recommended route to actually recover funds, ranked by feasibility, with the next concrete step.

  • Exchange compliance route
  • Civil action via counsel
  • Banking SAR coordination
  • Victim-pool claim option

Honest limits

What tracing can and cannot do.

A trace is the foundation, not the recovery itself. Setting expectations honestly up front saves time and money for everyone involved.

What tracing can do

  • Identify the destination of stolen funds
  • Preserve transaction evidence on-chain
  • Reveal counterparty type and jurisdiction
  • Recommend the best recovery channel
  • Continue across mixers and bridges with partner data

What tracing cannot do

  • Reverse a transaction or seize funds directly
  • Identify a real-world person without exchange cooperation
  • Guarantee compliance response from every venue
  • Recover funds after on-chain laundering is complete
  • Act as legal evidence on its own without counsel review

Request a wallet trace.

Send the source address, chain and a brief description. We respond with a feasibility assessment within 48 hours, at no cost.

Request a trace