Обновлено

01 / BLOCKCHAIN INTELLIGENCE · CRYPTO TRACING

The blockchain preserves the movement of funds. We reconstruct its meaning

BLACKFILE examines the routes of digital assets, connections between addresses, the sequence of transactions and the use of blockchain services

We combine data from public ledgers with verifiable temporal, financial, corporate and other information, in order to separate confirmed facts from probable connections and unconfirmed assumptions

Analysis of public data · International work · Lawful methods · Confidential engagement

At the initial stage, a public address or transaction hash is sufficient. Passwords, seed phrases and private keys must not be submitted

02 / TRANSACTION ROUTE / FLOW EXPLORER

The route is reconstructed node by node - from the originating wallet to the withdrawal point

The diagram shows how the analysis is built: each node on the route is assigned a type, status and transaction data. All addresses and amounts on the diagram are synthetic

  1. N-01

    Sender's wallet

    Confirmed on the blockchain
    Address / hash
    0x3fA8…c21b
    Asset and network
    USDT · Ethereum
    Amount
    184 500
    Date and time
    D0 · 14:22 UTC
    What this contributes to the analysis
    Entry point: the disputed transfer is recorded in the public ledger with an exact time and amount

The material transaction and the selected route are marked in red. The statuses "hypothesis" and "requires external confirmation" are never presented as established facts.

03 / SITUATIONS

When the movement of digital assets becomes part of a more complex matter

  1. 01

    Fraud and misappropriation of funds

    Establish the direction of asset movement after transfer and record the sequence of transactions.

  2. 02

    Tracing a debtor's assets

    Check for a digital trail, connected addresses and possible routes of asset movement.

  3. 03

    Corporate or investment dispute

    Examine transactions that may be connected to the parties to the deal, the company or the period in which the dispute arose.

  4. 04

    Bankruptcy and insolvency

    Check for signs of digital asset withdrawal, splitting of amounts or movement of funds before the obligations arose.

  5. 05

    Source of funds verification

    Analyze the history of asset movement and identify the discernible categories of counterparties and services.

  6. 06

    Inheritance and family matters

    Establish known addresses, related transactions and directions of digital asset movement within the bounds of a lawful matter.

04 / WHAT CAN BE ESTABLISHED

From a single transaction to a verifiable map of fund movement

  1. 01

    Asset route

    The sequence of transfers between addresses, networks, services and smart contracts.

  2. 02

    Related wallets

    Addresses that may belong to the same cluster based on a combination of technical and behavioral indicators.

  3. 03

    Services used

    Exchanges, bridges, payment services, protocols, exchangers and other identifiable points on the route.

  4. 04

    Asset and network changes

    Transitions between tokens, use of cross-chain bridges and further movement of funds in another network.

  5. 05

    Time sequence

    Matching of transactions with events, documents, communications and established actions of the parties.

  6. 06

    Risk connections

    Contacts with known categories of high-risk services, sanctioned addresses, or infrastructure flagged in available sources.

  7. 07

    Points of possible attribution

    Sections of the route where establishing ownership further may require requests from a lawyer, a court, law enforcement, or a regulated platform.

05 / CONFIDENCE LEVELS

Each conclusion is assigned its own level of confirmation

  1. 01 · ON-CHAIN FACT

    Blockchain fact

    Transaction, address, amount, asset, network, time, and confirmed route.

  2. 02 · SERVICE ATTRIBUTION

    Service attribution

    Established ownership of an address by a known service, contract, bridge, or infrastructure.

  3. 03 · CLUSTER ASSESSMENT

    Cluster assessment

    Probable connection between several addresses, based on a combination of analytical indicators.

  4. 04 · EXTERNAL CORROBORATION

    External confirmation

    Link between blockchain data and documents, corporate information, public statements, or other independent sources.

A blockchain fact does not always establish identity. In the final report, confirmed information, analytical assessments, and unconfirmed hypotheses are marked separately.

A night urban environment: a digital trace remains even where no observer is visible
LEDGER / MEANING

The ledger remembers every transaction. Meaning appears once they are arranged into a route.

06 / RESULT

Not an array of transactions, but a clear structure for further action

  • R-01asset movement map
  • R-02table of key addresses and transactions
  • R-03established sequence of operations
  • R-04list of identified services and infrastructure
  • R-05description of the analytical methods used
  • R-06separation of facts, assessments, and hypotheses
  • R-07map of risks and information gaps
  • R-08list of possible next steps
  • R-09appendices with technical data
  • R-10version of the materials for the legal team, if needed
07 / SCENARIOS

What the work looks like on typical matters

Locating a debtor and hidden crypto assets
CASE / CTDebt Intelligence

Search for the debtor and related crypto assets in connection with a debt of 180,000 USD

Assemble a verifiable position on a USD 180,000 debt connected with crypto assets.

Результат. Evidentiary line assembled

Открыть кейс

Composite examples based on typical matters. Details have been altered to preserve confidentiality.

CT-01

Movement of assets across several networks

Following a disputed transfer, funds were distributed across several addresses, exchanged for other assets, and moved through a cross-chain bridge.

Result
  • the sequence of movement was reconstructed
  • the networks and services involved were identified
  • points potentially suitable for further legal requests were identified
  • a transaction map was prepared for the legal team
CT-02

Digital footprint of the debtor's assets

The known address was matched against a number of related operations and a suspected cluster of wallets.

Result
  • confirmed transactional connections were established
  • facts were separated from analytical assumptions
  • directions for further verification were identified
  • material was prepared for joint work with the client's advisors
CT-03

Verification of the origin of digital assets

Before the transaction, it was necessary to examine the history of asset receipt and identify categories of counterparties.

Result
  • the flow of funds was analysed
  • identified services and risk connections were determined
  • an assessment of information gaps was formed
  • a basis was provided for the decision on whether to proceed with the transaction
08 / PROCESS

From initial assessment to closed briefing

  1. 01

    Initial assessment

    We receive general information, a public address or a transaction hash, and check the feasibility of the task.

  2. 02

    Defining the scope

    We record the assets, networks, period, known addresses, suspected events and the required outcome.

  3. 03

    Data collection and analysis

    We reconstruct the movement of assets and establish the available connections between addresses, services and events.

  4. 04

    Verification

    Key conclusions are verified again, and their level of reliability is indicated separately.

  5. 05

    Preparation of material

    We create a structured report, flow diagrams, tables and a list of further actions.

  6. 06

    Closed briefing

    If necessary, we hold a confidential discussion of the results with the client or their legal team.

09 / ENGAGEMENT FORMATS AND FEES

Three engagement formats - from a single route to an international investigation

01

Blockchain Trace

from €3,500

Estimated timeframe: 5-8 business days

For the verification of a single route, address or group of related transactions.

Includes
  • one primary asset or one network
  • a limited set of source addresses
  • analysis of the key route
  • identification of the services detected
  • a brief transaction map
  • a final analytical summary

A brief transaction map and analytical summary with reliability levels for the conclusions.

02Most requested

Multi-Chain Intelligence

8 000-25 000 €

Estimated timeframe: 12-25 business days

For analysis of complex movement of funds across multiple assets, networks and services.

Includes
  • multiple blockchains and assets
  • bridges, exchanges and smart contracts
  • analysis of connected addresses
  • timeline reconstruction
  • cross-referencing with external sources
  • detailed movement map
  • analytical report
  • closed briefing

Detailed movement map, analytical report and closed briefing.

03International disputes

Complex Crypto Asset Investigation

After assessment

Timeframe determined after assessment of the task

For international disputes, significant amounts, multiple parties and long transaction routes.

Possible composition
  • forming a dedicated analytical team
  • multiple networks and jurisdictions
  • extended financial and corporate analysis
  • liaison with the legal team
  • preparation of separate evidentiary appendices
  • regular updates to the movement map
  • phased reporting

An individual research program with phased reporting.

The cost depends on the number of addresses, networks, transactions, the period of analysis, the complexity of the route and the required output format. Any extension of scope is agreed in advance.

10 / LEGAL LIMITS

We work only with lawfully accessible information

We analyze available blockchain data and other lawfully obtained information. Access to closed data of regulated platforms usually requires action by a lawyer, a court, a competent authority, or the platform itself.

BLACKFILE не осуществляет
  • hacking of wallets or accounts
  • obtaining seed phrases, passwords and private keys
  • unauthorized access to exchange data
  • circumventing security systems
  • unlawful surveillance
  • substitution or fabrication of evidence
  • transactions involving client assets
  • guaranteed freezing or recovery of funds
12 / QUESTIONS

What is important to understand before the analysis begins

In some cases, blockchain data can reveal significant connections and points of possible attribution, but an address alone does not confirm identity. Final identification of the owner may require external sources or an official request.

In some cases, the route can be traced further through bridges, exchanges and other services. The possibility depends on the specific networks, protocols and structure of the transactions.

BLACKFILE performs analysis and prepares materials. The decision on freezing or recovery depends on the platforms, legal procedure and actions of competent authorities.

Usually a known public address, a transaction hash, the approximate period and a general description of the situation are sufficient. Private keys, passwords and seed phrases must not be transmitted.

The material can be prepared for use by a legal team. Its procedural applicability and admissibility are determined by lawyers and the competent court.

Yes. The specific networks and the possibility of tracing are assessed after the source data is received.

13 / INITIAL ASSESSMENT

Start with a known transaction

Provide general information about the situation. At the first stage, do not send passwords, seed phrases, private keys, documents or sensitive personal data.

Contact

Пароли, seed-фразы и закрытые ключи не запрашиваются никогда, в том числе после начала работы.

The route exists - it needs to be reconstructed

State the known address or transaction hash and describe the situation. BLACKFILE will assess the feasibility of the task and propose an analysis format.