A five-stage engagement built for legal outcomes.
From your first message to your attorney's first filing — each stage has a fixed deliverable and a clear decision point.
Intake
Submit wallet addresses, transaction hashes, and a short narrative through the secure case-review form or by email. We confirm within one business day whether the case is one we can meaningfully advance.
Scoped assessment
Fixed-fee preliminary assessment: initial tracing, a feasibility opinion, and a written scope for any further investigation. If the on-chain evidence can't move your matter forward, we tell you here — before you commit to a full engagement.
Investigation
Deep tracing across chains and services, counterparty attribution, and coordination with exchange compliance teams where an actionable endpoint exists. All artifacts are preserved under chain-of-custody.
Reporting
Delivery of the forensic report — executive summary, transaction graph, counterparty attribution with confidence tiers, and a tooling manifest — reviewed by an independent second analyst before release.
Legal handoff
Support your attorney, insurer, or law-enforcement contact with expert declarations, follow-up analysis, coordination on freeze requests, and — where appropriate — expert witness testimony.
A conversation, then a written scope.
No engagement begins over DMs, on encrypted messengers with unknown parties, or on the promise of a percentage cut. Every matter starts with a confidential intake call and a written scope you countersign before any billable work is performed.
- 15-minute discovery call — no charge
- Written NDA before any evidence is shared
- Fixed-fee assessment with clear inclusions
- Kill-switch clause if feasibility fails
Everything is documented — for you and for the record.
From NDA to final report, each stage produces a signed document. If the matter later becomes contested, the paper trail supports both the investigation and the client relationship.
We stay engaged through the legal process.
Delivery isn't the end. We support your counsel through disclosure, respond to opposing-expert critique, and — where scoped — appear as an expert witness. Follow-up analyses are handled by the same analyst who authored the original report.
- Expert declarations and affidavits
- Deposition & trial testimony where scoped
- Freeze-request evidence packages for exchanges
- Ongoing tracing as new addresses surface
What you can expect from us — in writing.
First response within one business day of intake, during business hours (Eastern Time).
Written feasibility memo typically within three business days of scope approval.
Agreed delivery date in the engagement letter; status updates at each milestone.
A named senior analyst plus a partner-level escalation contact on every matter.
- Wallet addresses or transaction hashes connected to the loss
- A short written timeline of events and amounts
- Screenshots and message logs with the counterparty, unedited
- Exchange tickets, police report numbers, or insurer claim references, if any
- Your attorney's contact details where counsel is already instructed
- ✕Pay any further “tax”, “unlock”, or “release” fee — this is a second-stage scam
- ✕Contact or threaten the counterparty; it destroys evidence and legal remedies
- ✕Share seed phrases or private keys with anyone, including us
- ✕Delete accounts, chats, or apps involved in the incident
- ✕Engage a firm charging a percentage of “recovered” funds
Bring us into your case.
Most engagements begin with a 15-minute call and a wallet address. That's enough for us to tell you whether the on-chain path is worth pursuing.