The flagship casework: exchange freezes, fund recoveries, and exploit attributions, documented in public from the first tip to the final outcome.
Tagged “legal action”Clear tag
Two-part investigation attributing the theft of $46M in U.S. Government-held crypto to John Daghita, known online as “Lick.” An arrest and a large recovery of funds followed.
Investigation into $6.5M stolen through social engineering attacks attributed to Ronald Spektor, who was later criminally charged in Brooklyn.
Investigation into a violent UK home invasion in which victims were forced to transfer $4.3M in crypto, traced onchain and fully recovered.
Investigation into the $243M social-engineering theft from a Genesis creditor by Malone Lam, Veer Chetal, Danish Zulfiqar, Jeandiel Serrano and associates, followed by criminal indictments and large recoveries of funds.
Cold-case investigation into the 2021 Uranium Finance $50M exploit, reviving onchain leads that preceded criminal charges and a $31M recovery.
Investigation identifying the attacker behind the $9M Platypus Finance flash-loan exploit within a day, followed by the arrest of two suspects in France.
Investigation attributing high-profile Twitter account takeovers and phishing drainer thefts to Cameron Redman (“Cam”/“Cream”), later sentenced in the U.S.
Investigation attributing a string of NFT phishing drainer thefts, including high-value Bored Apes, to two French operators, Mathys and Camille, later indicted in Paris.
