Crypto forensic reports for lawyers and investigators

• —Supporting a request to an exchange or stablecoin issuer to freeze identified funds
• —Seeking a disclosure order compelling an exchange to identify an account holder
• —Evidence for a criminal complaint or a report to law enforcement
• —Civil claims where the flow of funds must be proven step by step

Counsel or law enforcement uses the report to request a freeze, seek a disclosure order, or file a complaint. We stay available to clarify, update, or give sworn testimony.

• —Examiner qualifications and declaration
• —Scope and sources of data
• —Incident summary (your account, verified on-chain)
• —Flow-of-funds analysis with diagrams
• —Attribution of endpoint addresses
• —Chain-of-custody log
• —Limitations and confidence levels
• —Appendix: raw transaction data, hashes, tooling versions

We follow funds through every hop, not just the first exchange deposit. Where funds are split, bridged, or swapped we document each branch and the heuristic used to connect it.

• —Multi-chain: UTXO, EVM, XRPL, Tron, Solana
• —Commercial attribution data cross-checked against open sources
• —Clustering heuristics named and justified per step

Every piece of data in the report has a recorded origin, timestamp, and hash. A second examiner can reproduce the trace from the appendix alone.

• —SHA-256 of every source file and node response
• —Tooling and database versions recorded
• —Examiner log of every query, with timestamps

Reports are written to the form expert declarations take in civil freeze and disclosure proceedings. Confidence is stated per finding; nothing is overstated.

• —Findings separated from opinion
• —Limitations section in every report
• —Examiner available for declaration or testimony

Every source file and node response in the report is recorded with a SHA-256 hash, along with tooling and database versions. Anyone can recompute a SHA-256 hash with standard tools (for example “shasum -a 256” on macOS or Linux, or “certutil -hashfile [file] SHA256” on Windows) and compare it with the value recorded in the report.

Yes. Complex engagements (from $9,000) include a prepared sworn declaration, with examiner testimony billed hourly. On any engagement we stay available to clarify or update the report.

Counsel can start an intake on a client's behalf through this site or by email. We reply within two business days with a tier, a fixed price, and our view of whether a report will help.