01
Transaction tracing & timestamps
Validate TXIDs, block times, denominations, and fee patterns against explorer and node-backed data.
On-chain analysis
Follow value where the ledger allows
Defensible transaction graphs from victim outflows to services and bridges—with explicit gaps where privacy tools obscure paths.
What blockchain tracing actually covers
Tracing reconstructs asset movement from a defined anchor—victim wallets, credited platform addresses, or known TXIDs—into a documented path of hops, services, and residual uncertainty.
Unlike a full crypto investigation (which also weighs communications, accounts, and attribution), tracing focuses on ledger-visible movement: transaction paths, wallet clustering, timestamps, and destination analysis.
Where mixers/tumblers, privacy chains, or opaque custodial internals break continuity, we record the break rather than inventing certainty.
When tracing is the right first step
- You hold TXIDs, deposit addresses, or platform withdrawal records
- Loss involves major chains or L2s with public visibility
- You need exchange identification or service-cluster signals for counsel or reporting
- Cross-chain bridges or swaps exceed informal spreadsheet tracking
- Evidence must be preserved with timestamps and reproducible explorer references
What we analyze on-chain
02
Wallet analysis & clustering
Group addresses into heuristically linked clusters when co-spend or other signals support it—stated as analysis, not identity.
03
Exchange identification
Map inflows to labeled hot wallets and deposit clusters where labels are vetted and current.
04
Cross-chain movement & bridges
Correlate bridge deposits/withdrawals and wrapped-asset hops when contracts and timing align.
05
Mixers, tumblers & obfuscation
Flag privacy transitions analytically—documenting reduced certainty without claiming to “undo” mixing.
06
Destination analysis & preservation
Capture terminal visibility (service, cluster, or unresolved wallet) with exportable records suitable for counsel.
Tracing methodology
01
Anchor & scope
Lock starting wallets/TXIDs, chain set, and time window so the graph is reproducible.
02
Path reconstruction
Build multi-hop transaction paths with per-edge notes on confidence and data source.
03
Cluster & service labeling
Apply wallet clustering and exchange identification heuristics; separate fact from inference.
04
Cross-chain correlation
Link bridge and swap legs when on-chain evidence supports the join.
05
Evidence package
Deliver graphs, tables, timestamps, and a gap analysis—ready for legal or investigative use.
Possible investigative outputs
Transaction graph
Path views with hop metadata, timestamps, and a confidence legend.
Cluster / exchange memo
Rationale when funds touch labeled exchange or service clusters.
Cross-chain appendix
Bridge and wrap events tied to the primary path when visible.
Gap analysis
Where tracing stops (mixer, custodial opacity, unknown wallet) and why.
Frequently asked questions
Can tracing always identify a person?
No. Tracing often ends at a service, cluster, or unlabeled wallet. Naming a person usually requires lawful process, OSINT, or platform cooperation—not the ledger alone.
Do you reverse mixers or tumblers?
We analyze entry/exit patterns and document breaks in certainty. We do not claim to fully reverse privacy tools when the chain does not support it.
How is this different from crypto investigation?
Tracing is ledger-centric (paths, clustering, destinations). Crypto investigation adds communications, accounts, chronology, and attribution indicators around the on-chain picture.
What should I preserve before contacting you?
TXIDs, wallet addresses, screenshots of explorer views, platform withdrawal emails, and dates. Never share seed phrases or private keys.
Related resources
Need a documented trace?
Share starting transaction identifiers for scoping—no wallet secrets required.