Blockchain Forensics

Following the money on-chain when others say it's gone. We work directly with individuals affected by theft, fraud, and rug pulls; with attorneys who need on-chain evidence to advise their clients; and with state and federal law-enforcement agencies on cases that need investigative capability the agency may not have in-house. This is investigation work — distinct from our blockchain engineering pillar: we trace and document what happened on-chain, and we never take custody of client funds or promise recovery.

Scope is written collaboratively during discovery and signed off before any build work starts. Changes are handled as written amendments, not surprise invoices.

• Reproducible methodology, banded confidence.

  Every conclusion in a RESILIENCE evidence packet ships with the queries, the heuristics, and the confidence band that produced it. A second qualified analyst with the same data and the same report can reproduce the work. We do not publish conclusions we cannot defend in writing.

• Block-height-keyed artifacts.

  Every transaction graph, every cluster boundary, every attribution claim is anchored to a specific block height and a UTC timestamp. Re-running the analysis on the same inputs produces the same output. The agency or counsel owns the audit trail; we keep our copy for our records.

• In-house tooling, not third-party attribution.

  We do not re-sell another firm's labelled-address dataset or hand a client an output we cannot reproduce. Cluster reconstruction, mixer-pool reconciliation, bridge-event stitching, deposit-address resolution — the tooling that produces our conclusions is built in-house and audited against ground truth on every engagement.

• Senior-investigator review on every artifact.

  No report leaves the practice without a second pair of senior eyes on the methodology and the language. The work is too consequential to ship with a junior signature alone — and the redaction discipline only holds if a senior reads every line before it goes out the door.

• Stolen-fund tracing & recovery support

  Custom-quoted

  Wallet clustering, bridge and mixer tracing, exchange liaison, and custom on-chain tooling we build in-house when an investigation calls for it — the work of following the money to where it currently sits. We are confident in tracing; we are honest about recovery. Public ledgers are immutable and self-custody wallets are non-penetrable by design, so any firm promising guaranteed recovery from the chain itself deserves a hard second look. What we deliver is the truth of where funds went, who controls them now, and the evidence packet your attorney, exchange contact, or law-enforcement officer needs to act on it.

  From $4,499 · typical cases $4.5K–$45K

  Investigation totals scope with hop count, chains in play, and evidence depth. Share the case and within two business days you'll receive a senior-investigator intake plan and a custom-priced invoice. No payment is charged until you approve scope.

  Request a quoteFrom $4,499

• Investigations for individuals & families

  Personal engagements for victims of fraud, theft, scams, and rug pulls — many of whom have nowhere else to turn. We take the case, do the work, and deliver an evidence packet that puts the next move in your hands.

  From $1,999 · individuals & families

• Law-enforcement engagements

  Spotlight

  RESILIENCE works with state, county, federal, and international law-enforcement agencies on cases involving lost or stolen funds. We deliver evidence packets to the requesting officer; we do not testify, we do not appear in court — courtroom presentation stays with the agency and counsel.

  From $3,499 · law-enforcement rate

• Attorney engagements

  Spotlight

  RESILIENCE works directly with plaintiff and defense counsel on civil matters that touch the chain — fraud, asset recovery, divorce-asset tracing, estate matters, contract disputes. We deliver a written evidence packet you can use to inform negotiation, demand letters, discovery, or pleadings. We do not appear in court; counsel handles the legal surface.

  From $4,499 · counsel-of-record rate

• Evidence reports for investigators & counsel

  Reproducible methodology, on-chain transaction graphs annotated with block heights and timestamps, and a written report that documents what we found, how, and how confident we are. Designed to be read and acted on by the requesting officer or counsel — not by a courtroom.

  From $2,499 per report

1. Discovery

   Week 0

   Working session, written scope, clear success criteria.

2. Design & architecture

   Week 1

   System design, milestones, fixed or weekly pricing.

3. Build

   Weeks 2+

   Weekly releases, live portal, direct access to engineers.

4. Launch & handoff

   Final week

   Production hardening, observability, written handoff.

• May 21, 2026

  What “senior engineer on every email” actually means.

  We say it on the home page. Here is what it looks like inside an engagement — the response times, the code reviews, the decisions — in concrete terms a prospect can hold us to.

• May 21, 2026

  How to scope a build without getting fleeced.

  A buyer's guide for the prospect who has been burned by a software shop before — and wants the words to use the next time they sit across from one.

• May 21, 2026

  Build from scratch, or use a template? An honest framework.

  The practice says we build from a blank repository on every engagement. That is not the right answer for every project. Here is when it is, and when it isn't.

How do you price engagements?

Fixed-price for well-scoped work, weekly retainer for open-ended or exploratory engagements. Pricing is always in the proposal brief before any contract.

Do you work with existing teams?

Yes. We regularly embed with in-house engineers, or augment a small team with specific capabilities — AI integration, infrastructure, design — for a defined period.

What happens after launch?

Either a written handoff so your team owns everything, or an ongoing retainer for maintenance, features, and on-call support. Your choice, stated up-front.