Selected work
Cases and systems from investigations I have worked on.
$10.5M USDT recovery in a single case
Investigative work supporting the freeze and recovery of $10.5M in stolen USDT in a single case, in coordination with Swiss authorities. The funds were frozen by Tether and recovered through burn and reissue.
Read the essay
An Inferno Drainer campaign, reverse-engineered
One campaign’s operator, isolated among thousands of wallets sharing the same drainer contracts, with no labels to start from. Mapped from on-chain behaviour alone: the queries isolated the operator’s wallet and identified the victims.
Read the essay
11.7K BTC coin-mixing case
Bitcoin traced through a mixer, with the Token Recovery team. Overflow analysis narrowed the withdrawal window; volume analysis isolated the thief’s cluster.
Read the essay
A deterministic investigation platform
I built an investigation platform from scratch, with no language model in the loop, so every step can be reproduced and audited. At its core is a tracing engine with bridge and DEX interpreters, a pattern classifier and a pattern description generator, built on an ontology and taxonomy of blockchain behaviour.
Recoveries with US and UK law enforcement
I contributed to asset recoveries of more than $1M with the United States Secret Service and more than $1M with UK police, working in coordination with both. I have also supported investigations with other law enforcement agencies.