Your crypto forensics case team.
Turn complex blockchain activity into a case your legal team can understand and act on. OCINT traces the assets, researches the counterparties, rebuilds the timeline and organizes the exhibits, with the method stated so it can be tested.
- Litigation and disputes
- Fraud and asset tracing
- Due diligence
Crypto matters turn on facts most legal teams can’t see.
- 01Flows no one can follow
Funds split, bridged and swapped across chains. Counsel needs a schedule a judge, an arbitrator or an opponent can follow.
- 02A defendant who is only an address
Who controls the wallet, what else they run and where they can be reached are open questions.
- 03Evidence that disappears
Exchange records and websites vanish while the first letters are drafted.
- 04Work that won’t survive cross-examination
Screenshots with no method, no dates and no way to reproduce the conclusion.
One case team. Three disciplines.
The tracing analyst, the open-source researcher and the case assistant a matter needs, working from one record.
Trace the assets
Follow disputed, stolen or misappropriated assets across chains to the venues that hold them, with every transaction, amount and timestamp sourced.
Research the counterparty
Connect wallets to domains, hosting, handles, and corporate and sanctions records, and develop attribution leads with confidence stated.
Organize the evidence
Agents rebuild the timeline, assemble exhibits and draft reports and preservation requests for counsel to review.
Counsel decides. OCINT keeps evidence apart from inference and states its method and assumptions. Legal strategy, filings and conclusions about who controls an account stay with you and the court.
A matter, from instruction to strategy.
How a client’s problem becomes a case counsel can run.
A client lost funds to an online investment platform. They bring wallet addresses, a handful of transaction hashes, messages from the operator and a website that no longer resolves.
- 1Instruction
The client’s problem
Everything the client has becomes one case record, with what is missing listed before work begins.
Case record - 2Trace
Where the assets went
Funds are followed across chains to deposit addresses at two exchanges, with a declared method for any commingled funds.
Asset schedule - 3Connect
Who is behind it
The dead website is fingerprinted and linked to the operator’s other sites, wallets and handles.
Counterparty briefing - 4Assemble
A timeline and exhibits
Every movement is placed on one chronology with its source, ready to be exhibited.
Exhibit bundle - 5Strategy
Counsel’s next move
Preservation drafts for each exchange support a freezing application and, where a court allows it, service on the wallet.
Preservation drafts
Illustrative scenario. What can be traced depends on the chain, the asset and the data available, and is confirmed for each case.
What your firm can now do.
Each capability, described by what it changes for counsel. Availability is marked.
Trace assets across chains, swaps and supported bridges to the exchanges and services holding them.
Cross-chain tracing In useInvestigate wallets and counterparties, and develop attribution leads from blockchain and open-source research.
Counterparty research In useA transaction timeline with every hop, amount and timestamp tied to its source.
Timeline reconstruction In useA declared allocation method (FIFO, LIFO or proportional), stated so the court can test it.
Allocation analysis In useEvidence kept apart from inference, chain of custody documented and every reviewer decision logged.
Evidence record In useWhere a court allows it, service of process to a wallet through ChainServe, OCINT’s legal service partner.
Wallet service Via partnerFrom intelligence to action.
What counsel receives, built for the next person who has to rely on it.
Transactions, amounts and timestamps from the client’s wallet to the venues holding the assets.
The services, infrastructure and actors on the path, with established facts and leads labeled.
One timeline, every item linked to its source and collection date.
One per exchange, with what its compliance desk needs, ready for counsel to review and send.
A clear written account with method, assumptions and limitations stated.
Expert-witness reporting and testimony through BlockchainUnmasked, from the same record.
Admissibility is for the court. OCINT documents sources, methods and limits so the work can be examined and tested.
Six years of investigative experience. Now working at AI speed.
OCINT was not built by a software company guessing at how investigations work. It grew out of BlockchainUnmasked, the investigations firm behind it, where investigators have spent six years tracing stolen funds, mapping scam operations and preparing evidence for agencies, exchanges and courts.
That experience is what the agents work from. They follow the playbooks, typologies and review standards BlockchainUnmasked investigators use every day, not a general-purpose model alone. The output is a prepared case your people can check, not a chat answer.
For counsel, it means the experts who testify through BlockchainUnmasked work from the same record OCINT produced, not a rebuilt export.
BlockchainUnmasked casework to October 2026.
What counsel asks first.
Short answers from the investigations team. The full FAQ has the rest.
Does OCINT replace our expert or investigator?
No. It gives your team the capacity of a crypto forensics case team, and BlockchainUnmasked can provide the retained expert. Your team decides what is relied on.
Is the output admissible?
Admissibility is for the court. OCINT documents sources, methods, assumptions and limitations so the work can be examined and tested, keeps evidence apart from inference, and records who reviewed each finding and when.
Can OCINT say who controls a wallet?
It can identify the service a deposit address belongs to and develop attribution leads with the evidence and confidence stated. Who controls an account is established through the service’s records, obtained through legal process.
Can a defendant who exists only as a wallet address be served?
Where a court allows it, service of process to a wallet is available through OCINT’s legal service partner, ChainServe, with a verifiable on-chain record of delivery. See partners.
Can OCINT guarantee the assets come back?
No. OCINT traces the assets and prepares the evidence and requests. Exchanges and courts decide what happens to them.
Where counsel goes next.
Other ways OCINT supports a matter.
Meet your crypto forensics case team.
Bring a redacted matter. We’ll walk the trace, the timeline and the exhibits, and show how methods, assumptions and limits are documented.
Individual victim? Report a scam or read what to do first.