A disciplined, transparent process
Our methodology is designed to produce findings that can be relied upon and independently reviewed — and to be honest about what they cannot prove.
Assessment
We review the information you can safely share, confirm what is known versus what is alleged, and determine whether an investigation is appropriate and what it could realistically achieve.
Engagement
A written engagement agreement sets out scope, deliverables, exclusions, fees, and cancellation terms. No investigation work proceeds without your consent.
Evidence collection
We validate wallet addresses and transaction hashes, retrieve on-chain data, and document evidence with source references, retrieval timestamps, and integrity records where appropriate.
Tracing & analysis
We trace fund flow across supported networks, identify service touchpoints, and build a documented transaction timeline. Findings distinguish verified observation from interpretation and unverified leads.
Review & findings
Findings are confidence-rated and peer-reviewed. Every significant finding references its evidence source. Attribution is never presented as proven without adequate supporting evidence.
Report & next steps
You receive a versioned investigation report with methodology, limitations, and recommended next steps, plus transparent guidance on reporting and recovery pathways.
How we keep findings credible
Source-cited findings
Every significant finding references its evidence source.
Provider-independent
An abstraction layer lets analytics providers change without disrupting the core.
Confidence-rated
Findings carry explicit confidence assessments and unresolved questions.
No unauthorized access
We never attempt wallet access, key discovery, or security circumvention.
Tracing is not the same as recovery.
We map where assets went and document the evidence. Recovery, where possible, depends on exchanges, custodians, law enforcement, and legal processes outside our control.
Start a Case Assessment