For forensic firms, cyber investigators, and incident response teams
Blockchain investigations
for serious casework.
Chain Trace Labs gives forensic firms a professional blockchain investigation workflow for ransomware tracing, fraud analysis, case intelligence, monitoring, reporting, evidence handling, and client-ready delivery across complex matters.
Multi-chain
Coverage across major supported networks
Batch ready
Built for case queues and portfolio review
Firm workflow
Reporting, evidence, monitoring, and collaboration
CASE_ID
COMPLETE
CT-2026-0041
SOURCE_WALLET
0x3f4a...c91b (ETH · ERC-20)
HOPS_TRACED
12 across 3 chains
VELOCITY
HIGH - $840K moved in 4m 22s
CLUSTER_MATCH
43 addresses · 3 prior cases linked
EXCHANGE_HIT
Named exchange exposure recorded | escalation review
BATCH_QUEUE
284 / 500 cases processed · 41m remaining
Bitcoin837,421 blocks indexed
Ethereum1.2B txs traced
TronUSDT-TRC20 native
BNB ChainFull BEP-20 support
PolygonBridge detection
SolanaSPL token tracing
AvalancheC-Chain + subnets
ArbitrumL2 rollup traced
OptimismOP Stack support
BaseCoinbase L2
LitecoinUTXO model
Ripple XRPLedger index
Bitcoin837,421 blocks indexed
Ethereum1.2B txs traced
TronUSDT-TRC20 native
BNB ChainFull BEP-20 support
PolygonBridge detection
SolanaSPL token tracing
AvalancheC-Chain + subnets
ArbitrumL2 rollup traced
Core capabilities
Every engine your
investigation needs
Built for investigation teams that need scalable tracing, case intelligence, evidence workflows, and client-ready outputs rather than isolated blockchain lookups.
01 -
Multi-hop blockchain tracing
Follow funds across deep trace paths, through bridges, mixers, DEX swaps, and cross-chain transfers. Graph output highlights risk-weighted edges, destination context, and exchange exposure where supported.
∞ hops
02 -
Batch investigation
Upload a CSV of TXIDs, wallet addresses, or case references. The engine supports high-volume review, deduplicates overlapping address clusters, and surfaces cross-case links automatically.
500 tx/s
03 -
Cross-case network graph
Addresses shared between cases surface instantly. Identify serial offenders, syndicate structures, and wallet clusters that span multiple unrelated investigations in your database.
All cases
04 -
Wallet address clustering
Heuristic-based common-input ownership inference plus custom tagging. Group wallets by entity, flag exchange deposit clusters, and link addresses across your entire case history.
All chains
05 -
Smart contract forensics
Review ERC-20 and BEP-20 contracts for ownership controls, hidden mint paths, blacklist or pause functions, and honeypot-style risks. Contract review findings are stored as part of the case record.
Bytecode
06 -
Chain of custody & audit log
Queries, results, annotations, and exports can be preserved with timestamps and evidence context to support a stronger audit trail for internal review, legal preparation, and evidentiary packaging.
Immutable
Performance
Built for
production workloads
| Metric | Result | ||
|---|---|---|---|
| Batch trace (500 cases) | 41 min | Fastest | |
| Single TXID trace | Case-dependent | Fastest | |
| Cross-case graph build | Real-time | Unique | |
| Report generation (PDF) | 12s | Fast | |
| API response (p99) | Sub-second typical | Fast | |
| Engine uptime (SLA) | High-availability target | Target |
Chain Trace vs. manual investigation
Illustrative comparison for a deep trace across multiple reviewed chains, with exchange or endpoint identification and report output.
Time to completelower is better
Structured report included
Cross-case linking
Investigation pipeline
From intake to court evidence
Every stage is automated. You control what runs, when it runs, and who sees the output.
Intake & triage
TXID validation, duplicate detection, urgency scoring
AUTO
Forensic trace
Multi-hop, multi-chain, clustering, velocity
ENGINE
Intelligence enrichment
OSINT, dark web, HIBP, domain liveness
AUTO
Report & sign
PDF generation, digital signature, chain of custody
12s
Deliver & monitor
Client portal, webhooks, real-time wallet alerts
LIVE
WHITE-LABEL
Branded client portal
Your clients see your logo, your domain, your colours. Full CNAME support with custom email notifications.
API / SDK
Full REST API
Trigger investigations, pull results, push to your case management system. PHP, Python, Node SDKs included.
NOTIFICATIONS
HMAC webhooks
Signed webhook delivery on engine completion, exchange hits, and wallet movement events. Retries with exponential backoff.
TEAMS
RBAC workspaces
Multi-investigator workspaces with role-based access. Assign cases, share annotations, audit all access.
API & integration
Runs inside
your workflow
The Chain Trace REST API gives programmatic access to every engine. Trigger a trace, poll for completion, pull structured JSON results, and push to your own case management or client-facing tools - without touching the UI.
Full REST API - trigger traces, get results, manage cases programmatically
SDKs for PHP, Python & Node - drop-in library, full type hints, example scripts
White-label platform - CNAME, logo, colours, custom email - your brand throughout
Webhook delivery - HMAC-signed events on every engine state change
// Initiate a batch trace $ct = new Chain Trace\Client([ 'api_key' => getenv('CT_API_KEY'), 'white_label' => 'yourfirm.com', ]); $batch = $ct->batch->create([ 'cases' => csv_to_array('cases.csv'), 'tier' => 'enterprise', 'notify' => 'https://yourfirm.com/hook', ]); // Poll for completion while ($batch->status !== 'complete') { sleep(30); $batch->refresh(); } // Pull structured results $results = $batch->results([ 'format' => 'json', 'include' => ['graph', 'report_url'], 'exchange_hits_only' => true, ]); echo $results->count() . " exchange hits found";
// GET_STARTED
See the engine running
on your cases
Book a technical demo and we'll run a live trace on a real case from your queue - no sanitised data, no slide deck. Just the engine at work.