Reports and articles.
Investigation reports and analysis from the investigators behind OCINT. Published on BlockchainUnmasked; each opens in a new tab.
Latest from the team.
Reports are case studies from investigations. Articles are analysis of the wider crypto-crime landscape.
From $2M to $200M: how Web2 OSINT connected two crypto-scam cases into one laundering network
A technical case study on fusing open-source intelligence with on-chain tracing to link two unrelated victims to a single transnational laundering network.
Read on BlockchainUnmasked
The trail that names no one: attribution and the limits of on-chain evidence in the Prince Group case
Notes from the on-chain work on Southeast Asia’s most entangled scam network, and why attribution often needs evidence beyond the blockchain.
Read on BlockchainUnmasked
The investigator’s stack: the tools every team should know
We asked our investigators one question: what tools can’t you work a case without? Here is the stack that moves cases forward.
Read on BlockchainUnmasked
HTX, A7, and the new sanctions reality for crypto compliance
The UK’s May 2026 Russia sanctions package names HTX, moving compliance from onboarding into routing, liquidity and counterparty risk.
Read on BlockchainUnmasked
Crypto is a car with no brakes
April 2026 saw $635M lost across 28 incidents in 30 days. That is not volatility; it is a system-wide failure to build basic safety controls.
Read on BlockchainUnmasked
THORChain’s ‘neutrality’ defense fails on its own terms
After $80M from the KelpDAO hack moved through THORChain, its claim of true-DeFi neutrality starts to fall apart.
Read on BlockchainUnmaskedSee the method on a live case.
The reports show the work after the fact. A demo shows it on a redacted case, from intake to the drafted next step.