The Situation

A company approached us after $2.5M in crypto assets disappeared without explanation. Funds had moved across multiple bridges and networks, deliberately obscured to cover the trail.

What We Did

  • Traced fund movement across multiple chains and bridges
  • Identified a pattern pointing to an internal source
  • Confirmed a former employee had left a backdoor in the company's infrastructure
  • Documented on-chain evidence linking the individual to the theft
  • Supported the client through recovery and legal proceedings

The Outcome

  • $2.5M fully recovered
  • Former employee identified and confirmed
  • Case resolved in under 24 hours

Sometimes the threat isn't outside. Sometimes it walked out the door with a resignation letter — and a backdoor.

Other casework
Case File 012 · October 13, 2025$1.5M frozen in 24 hours after system breach. Case File 008 · September 4, 2025How we unfroze $800K locked by a flawed investigation.