These cases focus not only on where funds moved, but on which path node changes the next action: a records request, identity verification, possible remaining balance or an intersection between paths.
What is an investigation value point?
A value point requires both a reproducible fund path and sourced address or entity information. An exchange label alone is not a conclusion. It becomes an evidence-request lead only when incident funds reached the labeled address and the label is corroborated.
How cases are published
Public cases remove names, contact details, account data and unnecessary address detail while preserving the mechanism, amount range, path structure, evidence level, stop reason and reusable reasoning. Facts, associations and inferences are marked separately.
Common high-value structures
- Funds enter a custodian or exchange that may retain KYC records.
- Split paths intersect at one consolidation address or entity.
- Source- and destination-chain amount and timing can be paired.
- Assets may remain at an identifiable service.
- One address appears in multiple verified cases, while association does not automatically prove a common controller.
Articles and Cases in This Cluster
What Should an Exchange Evidence-Request Package Contain?An exchange label is a lead, not proof. A useful request point requires a supported fund path, corroborated label, complete transaction chain and an authoriz…Funds Stolen After an Acquaintance Managed the Investment: Why Two TRON Wallets ConvergedTwo affected TRON wallets followed different first hops before converging on the same consolidation system. Gas funding, test transfers and downstream inters…40,000 USDT Split, Bridged and Reconsolidated: Finding Actionable Endpoints in a Complex PathA 40,000 USDT loss was split across many addresses, bridged from Ethereum to TRON, swapped and reconsolidated. The investigation focused on continuity, third…Assets Disappeared After Installing an Unfamiliar Wallet: Tracing a Theft Across Three ChainsA Polygon loss was swapped, consolidated, bridged to BNB Chain and moved onward to Ethereum. Repeated path use and cross-source intersections created leads, …A Familiar Token Name, a Worthless Asset: How About 22,000 USDT Was Swapped for a Fake TokenA buyer was directed to bridge USDT to Solana and acquire an unfamiliar token using a familiar name. Token creation, a targeted dust transfer, rapid selling …