Practices/Victims of cybercrime

When crypto is stolen, the trail starts immediately. Tracing, monitoring and law-enforcement liaison, scoped to the size of the loss.

Investigations are scoped to each case, with a budget proportionate to what was lost. Analysts trace the funds, look for clues to who is behind it, and reconstruct how it happened.

Incident types

Pig-butchering scamsWallet compromiseInvestment fraudRomance scamsSIM swappingCorporate hacks & DeFi exploits

Recovery of assets cannot be guaranteed. Be wary of anyone who promises it.

MonitoringLive

02:14Movement on flagged address48.20 ETH
02:16Funds reached exchange deposit48.20 ETH
02:31Freeze request sent—

Trace · Exhibit BComplete

Originbc1q·····7f3k3.4120 BTCClient wallet
Peel chain14 hops3.3986 BTCConsolidated at hop 14
Bridge0x5c1e·····a09d212,840 USDTCross-chain
Swap service0xa7b3·····41ce211,960 USDTNo KYC
Exchange deposit0x9f2a·····e21b211,960 USDTRecords holder

Illustrative

Services

What we do. And what you get from each.

01Tracing & monitoring

We trace stolen funds and monitor their movement around the clock, and use industry relationships to attempt to have them intercepted and frozen.

02Attribution

We reconstruct the modus operandi and follow every lead toward the people responsible.

03Law-enforcement liaison

We act as the bridge between you and the agencies involved: a report with recommended courses of action, and ongoing support while they investigate.

How it runs

The same four stages, every case.

01IntakeYou send what you have — hashes, addresses, the story so far. We tell you which questions the chain can answer, what it will take, and what it will cost before any work begins.

02TracingFunds are followed hop by hop across chains, bridges and swap services using public and proprietary data, until they reach a service that holds records.

03AttributionWe identify the exchanges and custodians the funds reached, and what they are likely to hold — so a subpoena or data request asks for exactly the right thing.

04EvidenceFindings are delivered as a documented, visualized report written for the reader who has to rely on it: counsel, a court, or an agency.

Other practices

The rest of the firm.

Law firms & litigantsExpert Witness Crypto businessesBusiness Law-enforcement agenciesPublic Sector

Open a case. A response in 24 hours or less, during working hours.

Everything you send is treated as strictly confidential. Tell us what happened and what you need it to prove; we will tell you plainly what the chain can and cannot show.

Open a case

What to send

Transaction IDs (hashes)
Wallet and deposit addresses
Amount involved, where applicable
Your nationality and country of residence
Counsel, court and case number, if a matter is open

Cases with complete details are prioritised.