Skip to content
CipherBlade
Practices/Crypto businesses

Forensics on call for the businesses that hold the assets. Incident response, diligence and compliance for exchanges, funds and protocols.

Open a case

An on-call forensic team for the moment something moves that should not have, and the advisory work that makes that moment less likely.

Services reached4 of 4 classified
ServiceTypeRecords
Centralized exchangeCustodialKYC, IP, bank
OTC deskCustodialClient file
Swap serviceNon-custodialNone
Bridge contractSmart contractNone
MonitoringLive
  • 02:14Movement on flagged address48.20 ETH
  • 02:16Funds reached exchange deposit48.20 ETH
  • 02:31Freeze request sent—
Illustrative
Services

What we do. And what you get from each.

01Incident response

Round-the-clock monitoring and response to movements of stolen funds, with real-time tracking, analysis and recovery strategy.

02Due diligence & source of funds

Transaction histories and fund origins analysed, asset flows traced, anomalies and red flags identified — so you know whether the money matches the story you were told.

03Compliance & AML

Design and implementation of AML programs, staff training, help with assessments and suspicious activity reports, and an investigator on call for the hard ones.

04Security advisory

Risk assessments and audits, security protocols aligned with industry standards, private-key handling and access review, and training for your team.

How it runs

The same four stages, every case.

01IntakeYou send what you have — hashes, addresses, the story so far. We tell you which questions the chain can answer, what it will take, and what it will cost before any work begins.
02TracingFunds are followed hop by hop across chains, bridges and swap services using public and proprietary data, until they reach a service that holds records.
03AttributionWe identify the exchanges and custodians the funds reached, and what they are likely to hold — so a subpoena or data request asks for exactly the right thing.
04EvidenceFindings are delivered as a documented, visualized report written for the reader who has to rely on it: counsel, a court, or an agency.
Other practices

The rest of the firm.

Law firms & litigantsExpert WitnessVictims of cybercrimeInvestigationsLaw-enforcement agenciesPublic Sector

Open a case. A response in 24 hours or less, during working hours.

Everything you send is treated as strictly confidential. Tell us what happened and what you need it to prove; we will tell you plainly what the chain can and cannot show.

Open a case
What to send
  • Transaction IDs (hashes)
  • Wallet and deposit addresses
  • Amount involved, where applicable
  • Your nationality and country of residence
  • Counsel, court and case number, if a matter is open

Cases with complete details are prioritised.