01
Collect
Preserve transaction hashes, addresses, block data, timestamps, and relevant lawful open-source material.
Methodology / About
Show the work. State the limits.
Forensic analysis should be inspectable. Our methodology emphasizes public sources, reproducibility, careful attribution, and transparent confidence language.
Scope notice: Analysis identifies transaction paths and potential attribution from public data. It does not freeze, seize, or recover assets.
Operating principles
A grounded standard of proof.
02
Trace
Map flows across hops, services, tokens, chains, and bridges while recording transformations and fees.
03
Evaluate
Test attribution indicators, alternative explanations, data quality, and the strength of each inference.
04
Report
Present sources, exhibits, confidence language, assumptions, and limitations in an understandable record.
Confidence language
Not every lead is a fact.
Reports distinguish direct observations from reasoned inferences. Attributions are qualified by the evidence available, and plausible alternatives are identified where relevant.
ConfirmedDirectly supported by public records or authoritative source material.
High confidenceMultiple independent indicators align with no strong conflicting evidence.
Moderate confidenceCredible indicators exist, but meaningful uncertainty remains.
UnresolvedThe available data does not support a responsible conclusion.
Independent analysis
We do not change a conclusion to fit a desired outcome. Findings may help, narrow, or occasionally contradict an initial theory. That independence makes the work more useful.
Have transaction data to review?
An initial assessment helps determine whether a defined analytical scope is practical.
Request an assessment