Product
Case Management
Every address, flag, and tag from an investigation lives under one case, so a trail that spans weeks doesn't get scattered across separate lookups.
case · exploit-followup
case_4f21
case_8b02
case_9d77
case_4f21 · exploit-followup
TimelineEvidenceNotes
14:36ZSplit pattern matches execution fingerprint family.
14:34Z8qLm…2kDe shows prior activity touching multisig_3 (inferred).
14:33ZPinned trace from treasury_1 → CEX deposit.
Illustrative example — mock case file with mock notes and timeline.
Notes & saved evidence
Investigations accumulate context. Cases keep it in one place.
Pin wallets, save queries, attach notes, and build a timeline as an investigation develops — without losing track of what led where.
Evidence Report
Cluster sybil-cluster-0192
- Investigation ID
- inv_8f3a2c
- Cluster ID
- sybil-cluster-0192
- Wallet count
- 41
- Classification
- Coordinated
- Confidence
- High
- Evidence families
- 3 / 4
- Entity exclusions
- 1 (Binance Hot Wallet)
- Methodology
- engine v1.1.0 · signal-family model
- Generated
- 2026-08-04T14:36:11Z
- Report hash
- sha256:9a41…e02c
Illustrative example — mock cluster, report hash, and Verified badge.
Handoff
A case closes with an export, not a conversation.
When an investigation is done, the case produces a structured record — investigation ID, methodology, typed findings, and versioned report — for the team or exchange that needs it.
Start a case.
Open a case and keep every finding organized as you investigate.