When assets are stolen, every second counts. Our forensic experts trace stolen funds across chains, mixers, and bridges — building court-ready evidence and coordinating with exchanges to freeze and recover your assets.
Tell us what happened and share the addresses involved. We make a rapid initial assessment of the theft vector and whether the funds are still moving.
We collect transaction hashes, wallet addresses, timelines, and communications, preserve them as evidence, and define the scope of chains and entities to investigate.
We follow the funds across wallets, chains, mixers, and bridges — clustering related addresses and attributing them to known services and entities.
When traced funds reach an exchange or custodial service, we prepare the evidence its compliance team needs and support freeze requests through the proper channels.
You receive a clear, court-ready report of the fund flow, and we support law enforcement and your legal counsel throughout the recovery process.
Every incident leaves a trail on-chain. These are the case types we investigate most often.
Funds moved out of a compromised exchange or custodial wallet. Rapid tracing of the outflows before they scatter across chains and services.
A protocol drained through a contract vulnerability. We reconstruct the exploit path and follow the proceeds wallet by wallet.
A malicious approval or leaked seed phrase emptied a wallet. We map the drainer infrastructure and trace where the funds cash out.
A team removed liquidity and disappeared. We trace deployer and treasury wallets to their exit points.
Payments made under extortion. We follow the ransom flow to services where identification becomes possible.
Funds routed through mixers, bridges, or chain hops to break the trail. Timing and amount correlation can often re-establish it.
Compliance-grade investigations of counterparties, wallets, and transaction histories — exposure screening, source-of-funds analysis, and documentation that stands up to regulatory review.
Immediate support in the first hours after an incident: securing remaining assets, preserving evidence, and containing the damage before the full investigation begins.
Crypto forensics is the analysis of blockchain transactions to trace stolen or illicit funds. Because most blockchains are public ledgers, transfers can be followed from wallet to wallet, clustered, and attributed to services — producing evidence that exchanges, law enforcement, and courts can act on.
Sometimes — but no honest investigator guarantees it. Recovery usually happens when traced funds reach a regulated exchange that freezes them in response to a well-documented request. The earlier tracing starts, the higher the chance the funds are still at a freezable point.
An initial assessment typically takes a few business days. A full investigation depends on the number of hops, chains, and services involved — from days for a direct path to weeks for cases involving mixers or many counterparties. We share interim findings as we go.
Transaction hashes, the affected wallet addresses, an approximate timeline, and any related communications or screenshots. We never ask for your seed phrase or private keys — no legitimate investigator will.
Often, yes. Bridges record matching events on both chains, and mixer deposits can frequently be correlated by timing and amounts. Obfuscation reduces certainty rather than eliminating traceability — we are transparent about confidence levels in the report.
It depends on scope — the number of chains, hops, and entities involved. After an initial review of your case we provide a clear quote for the defined scope, so you know the cost before the tracing work begins.
Established in 2016, ChainLight's award-winning experts provide tailored security solutions to fortify your smart contracts and help you thrive on the blockchain.
Tell us about your project — we usually respond within one business day.
