What we do

Blockchain forensic analysis is neither automatic nor simple. Every case requires patient, methodical, manual reconstruction of how the funds moved, who moved them, and where they are now. We combine enterprise-grade commercial tools (Chainalysis Reactor, TRM Labs, Elliptic Lens, Crystal) with in-house on-chain analysis developed over hundreds of cases.

When you need us

To identify the path of funds lost to a hack, phishing attack, or scam.
To reconstruct hidden crypto assets in divorce or estate disputes.
To map a network of addresses attributable to a known counterparty.
To verify the provenance of incoming funds (AML and KYT analysis).
To investigate compromised exchanges, mixers, or bridges.
To provide supplemental intelligence in ongoing investigations.

Chains covered

Bitcoin · Ethereum (+ all ERC-20 and L2) · Tron · BSC · Solana · Polygon · Arbitrum · Optimism · Avalanche · Lightning Network · Monero (heuristic analysis) · Zcash (heuristic analysis)

For cases involving emerging chains or privacy coins, we conduct a free preliminary feasibility assessment.

Our process

Intake

Collection of transaction hashes, wallet notes, existing documentation, and event timeline.

Clustering

Identification of address clusters attributable to the counterparty via heuristic analysis.

Tracing

Reconstruction of fund flow through mixers, bridges, DEXs, and centralised exchanges.

Attribution

Identification of VASPs, exchanges, and counterparties along the path for freeze actions.

Reporting

Court-ready forensic report with documented chain of custody and reproducibility.

Testimony

Expert support at hearings and interaction with court-appointed experts, prosecutors, and law enforcement.

Report format

Every engagement concludes with a structured forensic dossier in English or Italian, including:

Executive summary (1-2 pages)
Detailed case timeline
Visual fund-flow graph (PDF + SVG)
Analytical table of every relevant transaction (timestamp, hash, amount, identified counterparty)
VASP attribution and recoverability assessment
Operational recommendations (freeze notifications, filings, legal actions)
Technical appendix with methodology and tools

Timing & pricing

A straightforward case (linear tracing, 1-2 hops) typically closes in 5-10 business days. Complex cases involving mixers and cross-chain movements take 3-6 weeks. A written quote is always provided after a free preliminary assessment.

Blockchain Forensics