Methodology walkthrough. Client details are withheld and no recovery outcome is implied.The situationA user signed a malicious approval that let an attacker move specific tokens out of the wallet over time.Our approachIdentified the malicious approval and the spender address.Traced the…
Category: Case Studies
CryptoCISO investigation walkthroughs based on real flagged platforms.
-
Case Study: Screening a Broker Before a Deposit
Methodology walkthrough. Client details are withheld and no recovery outcome is implied.The situationA prospective investor asked us to vet a platform before funding an account.Our approachChecked the platform against our forensic registry and risk indicators.Reviewed licensing claims and corporate footprint.Flagged…
-
Case Study: Documenting a Cloned-Exchange Scam
Methodology walkthrough. Client details are withheld and no recovery outcome is implied.The situationA convincing exchange turned out to share its design and infrastructure fingerprints with other flagged operators.Our approachCompared site structure and contact patterns with known clones.Linked deposit wallets shared…
-
Case Study: A Romance-Scam Crypto Trace
Methodology walkthrough. Client details are withheld and no recovery outcome is implied.The situationA victim was guided by a long-term online contact onto a fake trading app and made escalating deposits.Our approachPreserved chat logs and transaction records as a timeline.Traced deposits…
-
Case Study: Investigating a Fake Yield and Staking Platform
Methodology walkthrough. Client details are withheld and no recovery outcome is implied.The situationA platform displayed steadily growing staking rewards while quietly sweeping principal off-chain.Our approachCompared the dashboard’s claimed balances against actual on-chain activity.Traced principal deposits to collection wallets.Documented the gap…
-
Case Study: A Withdrawal-Block Broker to the Off-Ramp
Methodology walkthrough. Client details are withheld and no recovery outcome is implied.The situationAn investor could deposit but not withdraw from an offshore broker that then demanded a release fee.Our approachLogged the deposit trail and the fee demands.Traced pooled client funds…
-
Case Study: Mapping a Pig-Butchering Network
Methodology walkthrough. Client details are withheld and no recovery outcome is implied.The situationSeveral unrelated reports pointed to different platform names but showed a familiar long-con investment pattern.Our approachCompared deposit destinations across reports.Identified shared consolidation wallets receiving funds from multiple platforms.Built…
-
Case Study: Tracing Funds Through a Crypto Mixer
Methodology walkthrough. Client details are withheld and no recovery outcome is implied.The situationA victim’s deposits were moved off an unlicensed platform and into a mixing service designed to break the on-chain link between sender and receiver.Our approachCaptured every pre-mix transaction…
-
Case Study: After a Seed-Phrase Phishing Attack
Methodology walkthrough. Client details are withheld and no recovery outcome is implied.The situationA holder entered their seed phrase into a convincing phishing site; within minutes the wallet was emptied across several transactions.Our approachMapped the draining transactions and the consolidation wallet…
-
Case Study: Mapping a Cloned-Platform Network
Methodology walkthrough. Client details are withheld and no recovery outcome is implied.One operator, many facesA single fraud operation frequently spins up dozens of near-identical platforms with different names. Recognizing the shared fingerprints helps warn future victims and strengthens attribution.How we…