On-chain forensics · Evidence layer

Independent on-chain evidence, built for counsel.

We trace stolen or misappropriated crypto assets across public blockchains and turn the findings into evidence that lawyers, exchanges and courts can work with. We act as an independent evidence provider, instructed by counsel.

  • Singapore company
  • No custody of funds
  • No recovery promises
  • Not a law firm

What we do

Public-chain analysis with a clear separation between what is observed on-chain and what is inferred. Every report is written so another analyst can reproduce it.

Fund-flow graph

Transaction-hash-referenced paths from the incident wallets to current holdings and exit points.

Exchange deposit attribution

Identified deposit addresses and services, each with a stated confidence level and the basis for it.

Freeze-request evidence pack

Timeline, addresses, hashes, amounts and attribution notes, structured for exchanges and courts.

Reproducible methodology

Chain-of-custody note: data sources, retrieval dates, tool versions and an evidence log.

How an engagement works

Fees are stage-based and set out in writing. Terms are subject to an engagement letter, conflicts and client due diligence, and our right to decline.

Initial Tracing Report

  • Verify the incident facts and trace the principal fund paths.
  • Identify key nodes, such as exchange deposit addresses.
  • Assess the feasibility of freeze requests.
  • Written recommendation on next steps.

Full evidence package and freeze support

  • Extend tracing to all relevant paths.
  • Assemble the full evidence package and methodology note.
  • Support counsel's freeze and assistance requests to exchanges.
  • Respond to follow-up evidence queries.

Stage 2 applies to matters of USD 150,000 or more. Whether any funds are frozen, and when, is decided by exchanges, courts and other third parties, not by us.

Pricing

All amounts in USD. Structure can be adapted to law-firm instruction (instructing party, payment timing, fee mechanics).

Available

Initial Tracing Report

USD 5,000 fixed
  • Prepaid, non-refundable.
  • Any matter size.
  • The report may be passed to counsel or exchanges.
Available

Full engagement

USD 50,000 Stage 2, fixed
  • For matters of USD 150,000 or more.
  • Stage 1 (USD 5,000) is credited against Stage 2.
  • Stage 2 is payable after delivery of the full evidence package and freeze-request support with counsel and exchanges.
  • Plus a 20% success fee only on funds actually recovered within 12 months of Stage 2 delivery. It is invoiced and never deducted from recovered funds.
Available

Team risk-signal report

USD 1,500 from
  • B2B: project hiring and vendor screening.
  • Risk signals, including indicators associated with DPRK IT-worker schemes, from public organisation-level data.
  • Signals and confidence ratings only. We never state that a named person is any actor.
Coming

BNB Chain reports

Fund-flow risk and evidence reports for BNB Chain. Details to follow.

There is no fee that depends on recovery other than the success fee described above. Fees are subject to a written engagement letter.

Who we work with

We are instructed by professionals, not by individuals responding to unsolicited outreach.

Law firms and counsel

Firms in DIFC, ADGM, Singapore and elsewhere preparing freeze applications, disclosure requests, exchange notifications and court filings.

VASP security and compliance teams

CISO and MLRO teams that need incident-response tracing or team risk-signal reports.

Projects and ecosystems

Web3 projects that need fund-flow evidence after an incident, or risk signals when hiring remote staff.

We do not claim any partnership with, or endorsement by, any regulator, police unit, exchange or law firm.

Sample report

A sample report built on a public incident (BSC Token Hub exploit, 2022) shows the structure of our deliverables: fund-flow graph, attribution with confidence levels, and the methodology note.

Principles

  • No custody. We never hold, receive or move client funds, keys or seed phrases.
  • No promise of recovery. Outcomes depend on exchanges, courts and third parties.
  • No unsolicited contact with victims. Inbound enquiries, or via counsel, only.
  • Not a law firm. We give no legal advice and do not represent clients in proceedings.
  • Facts and inference are separated. Attribution is confidence-rated analysis, not a legal conclusion or an identification of any person.
  • Written terms. No large undefined upfront fees. Fees are stage-based and in writing.

Anti-scam notice

We never cold-message victims. We never ask anyone to send crypto to us. We never use free-mail or messaging-app accounts for engagements. Verify anyone claiming to be Vector (SG) only through this website and the email address below. Be cautious of anyone offering “recovery” for an upfront fee.

Contact

Email only. This site has no contact form and collects no data. Please do not send private keys or seed phrases, ever.

Counsel and compliance teams: please include the instructing firm or organisation, the jurisdiction, and a short description of the matter. We will reply by email.