AI on-chain investigations

Ask any question of the blockchain. Get an investigation back.

An AI agent that traces funds, attributes wallets, and writes auditable reports across every major chain — powered by Bitquery + Coinpath.

MultichainEvery figure links to a block explorerConfidence + caveats on every finding
live trace · investigating
Trace where this address sent money and flag any laundering exposure.
Origin
0x4f9a…b2e1
Pooling wallet
TRvMe…Yq8
19.25% of funds
Consolidator
0x77c2…9a4f
Binance ✓
1NDyJt…k39
verified exchange
Huione Group
TKHuk…m2L
⚑ laundering exposure
Built on Bitquery + Coinpath40+ chainsBillions of labeled transfersBTC · TRON · EVM in one workflow
Not another dashboard

An investigator, not a tool.

Dashboards answer the questions someone else thought of. An agent answers yours — in plain language, end to end — and corrects the dashboards when they're wrong.

Dimension
Legacy tools (Reactor / TRM / Elliptic)
AI investigator
Questions
Only what the UI supports
Any question, in plain language
Methodology
Fixed — usually one tracing model
FIFO / LIFO / value-weighted — picks the fit, explains it
Output
Pre-set graph + CSV
Visualization, report, or RFI built per case
New analysis
Wait for a vendor feature
Ask for it — built on the spot
Second opinion
Trusts itself
Audits its own and others' reports
Transparency
"Risk: high"
Shows the math, caveats & confidence
Chains
Per-chain modules
Multichain, one flow

Competitors named for clarity — the agent treats every one of their reports as auditable input.

How it works

From a question to an auditable report — in one loop.

01

Ask

"Investigate this address." "Trace these funds to a cash-out." "Audit this report." Plain language, no query syntax.

02

Investigate

Pulls Coinpath money-flow + entity labels, picks the right tracing method, follows the funds across hops and chains.

03

Visualize

Builds the flow graph or step-by-step exhibit on the fly — every transaction hash linked to a block explorer.

04

Report

Writes the auditable, RFI-ready summary, with attributed value, confidence, and honest caveats.

Capabilities

Everything an analyst does — at machine speed.

Trace, both directions

Forward to the cash-out, backward to the source. Multi-hop.

Wallet attribution

Behavioral fingerprinting: OTC desk, mixer, consolidator, exchange.

Follow the gas

Native-token funding reveals the operator behind a wallet fleet.

FIFO / LIFO / value-weighted

The right tracing model for the question — and why.

Sanctions & illicit screening

Huione, sanctioned VASPs, freeze-flagged wallets, scam rails.

Pattern detection

Consolidation vs distribution vs mixing — automatically.

Reports & RFIs

Auditable write-ups with explorer-linked evidence.

Multichain

Bitcoin, TRON, EVM — one conversation.

Proof

Real investigations. Real findings.

Every figure is reproduced from on-chain data and links to a block explorer.

"Re-audit this investigation report."

Caught what the report missed.

Confirmed the report's on-chain spine to the dollar — then found it overstated exchange attribution ~34× and completely missed a Huione Group laundering exposure, the funds' most important destination.

"Who controls these wallets?"

One operator, hidden in plain sight.

Token flows looked unrelated. Following the gas linked 20 wallets moving ~$338M to a single controller — common control no token-flow tool would surface.

"Where did this exchange send funds?"

Sanctioned → Binance in one hop.

Flagged a blocked/sanctioned exchange off-ramping $2M USDT directly into Binance, with the deposit address identified for an RFI.

Featured investigation

Published, end to end — with every hash on-chain.

On-chain investigationTRONFinancial crimeAML

$812M, one ghost wallet, three exchanges — nobody flagged it.

Six major exchanges fed a four-day-old burner that moved $812M on TRON in plain sight — every hop public, zero compliance alerts, cash-out at OKX, Kraken, and Binance.

By Bitquery Researchverified Jun 23, 202614 min read
Read the full investigation
$812M
moved through the ghost wallet
6
major exchanges fed one burner wallet
4 days
wallet age at activation
€160K
NBG fine on the VASP at the exit
The circuit — read backward
Feeders208 wallets
Consolidator$21.2M · net ~$130
Relays ×4$110M throughput
ExitSher888 · Bybit

Every query ran through Bitquery MCP · cross-verified vs Arkham, MetaSleuth & OKLink · hashes confirmed on Tronscan.

Methodology

Defensible by design.

Naive tools sum every downstream transfer and cry wolf. The agent weights by how much of the victim's money is actually in each hop — and never confuses connectivity with attribution.

Funds reaching OKX — same case, two methods
Naive / FIFO · gross
$93,068
Value-weighted · attributable
~$2,700
The difference is commingling — the agent shows it, not hides it.
01

Gross ≠ attributed.

Every figure separates transaction size from the victim's real share.

02

Connectivity ≠ attribution.

A path to an exchange isn't proof the money landed there.

03

Show the working.

Every hop links to a block explorer; confidence and caveats on every claim.

04

Audit mode.

Re-run any existing report against live chain data — confirm what's right, flag what's overstated or missed.

Every case ships its own visualization

Not a template — built for the question.

0x4f9apool 19%Binance ✓Huione ⚑
Fund-flow graph

Origin → pool → exchange / Huione

Timezone fingerprint

Activity-by-hour → operator region

Operator-fleet star map

Follow-the-gas common control

Also: step-by-step exhibits with every tx hash, audit scorecards, compliance dashboards, and peel-chain timelines.

Built for

Whoever needs to know where the money went.

Exchange compliance / MLRO

Know what's behind every deposit before you clear it.

Investigators & fund recovery

Follow the money to the exchange door, with an audit trail.

Law enforcement / FIU

Turn an address into a named lead.

Fraud & risk teams

Spot the laundering rail, not just the transaction.

FAQ

Questions investigators ask first.

Bitcoin, TRON, and EVM chains today, with 40+ chains available through Bitquery + Coinpath. One workflow, no per-chain modules.

Bitquery's on-chain datasets and Coinpath money-flow engine, plus on-chain entity labels. Every figure links back to a public block explorer.

Findings separate gross transfer value from attributed value, flag commingling, and carry a confidence level. Crowd-sourced labels are re-verified before anything is called illicit.

Yes. Paste a report or a CSV and the agent re-runs it against live chain data — confirming what's right and flagging what's overstated or missed.

Yes — auditable write-ups with explorer-linked evidence, ready for SAR/RFI workflows.

Yes — usage-based API and on-prem deployment for sensitive casework.

Point it at an address. See what it finds.

Paste a wallet, watch a full investigation run — trace, attribution, and report.

BTC · TRON · EVM · API & on-prem available