Request a quote
← All case studies

Crypto investigations,
on screen.

See how Web3 Forensia follows public activity, examines the evidence, and makes the limits clear. Choose a case to watch or share.

Try Web3 Forensia

For more investigations and regular updates on web3.forensia.ai and forensia.ai, follow @ForensiaLabs on X .

Bitget investigation

1:51 · Recorded Web3 Forensia demo

Link to this case
Recorded demonstration · not live dataOpen video

Follow the transactions

Follow the recorded wallet investigation from the first transaction to the source records behind it.

  • Inspect transfers and related addresses.
  • Separate observed activity from coverage limits.

Addresses & artifacts

Use these full identifiers to follow the investigation yourself.

Download reference index (JSON) ↓

  • Wallet examined in the recording

    Ethereum · Address

    0x770b10b273fC44Fe9197D6bF20F145c2e98463Ee
    View on explorer ↗

  • Reported test transfer

    Ethereum · Transaction hash

    0xc19560f5fe5308c9ec8aa5721d7acb9a713cbf6166e2a8e34b6ecd5327c37be6
    View on explorer ↗

  • Token transfer examined

    Ethereum · Transaction hash

    0xa3ae35a0006ff4299f8f18614c2c21750eb8e0f5c047df4a526e1cc6ae599ce5
    View on explorer ↗

  • Native-asset outflow examined

    Ethereum · Transaction hash

    0xf5ae8db20a36d4e05bfebdc71e261a2e1879ddb5a6ab645b98811be6aeefedd3
    View on explorer ↗

  • Transfer-event example

    Ethereum · Transaction hash

    0x37761447f318f32dab64666bb9fbf4cd40819ec77376817d08fc5da1a79fb36a
    View on explorer ↗

Identifiers transcribed from the original investigation production records. Their relationship to the incident has not been independently revalidated here. Watch the source recording ↗

The download contains identifiers and source links—not raw node responses, private case files, or a verified forensic report.

Bybit investigation

1:24 · Recorded Web3 Forensia demo

Link to this case
Recorded demonstration · not live dataOpen video

Inspect the execution

Explore the transaction and contract evidence shown in this Web3 Forensia walkthrough.

  • Read the execution trace and contract context.
  • Distinguish on-chain observations from sourced attribution.

Addresses & artifacts

Use these full identifiers to follow the investigation yourself.

Download reference index (JSON) ↓

  • Bybit Safe wallet (reported)

    Ethereum · Address

    0x1db92e2eebc8e0c075a02bea49a2935bcd2dfcf4
    View on explorer ↗

  • Delegatecall target (reported)

    Ethereum · Address

    0x96221423681a6d52e184d440a8efcebb105c7242
    View on explorer ↗

  • Replacement implementation (reported)

    Ethereum · Address

    0xbdd077f651ebe7f7b3ce16fe5f2b025be2969516
    View on explorer ↗

  • Wallet-control change (reported)

    Ethereum · Transaction hash

    0x46deef0f52e3a983b67abf4714448a41dd7ffd6d32d32da69d62081c68ad7882
    View on explorer ↗

  • ETH drain (reported)

    Ethereum · Transaction hash

    0xb61413c495fdad6114a7aa863a00b2e3c28945979a10885b12b30316ea9f072c
    View on explorer ↗

Addresses and transaction roles are attributed to CertiK’s technical analysis. These source links are not a claim that Forensia independently reproduced every finding. Read the source analysis ↗

The download contains identifiers and source links—not raw node responses, private case files, or a verified forensic report.

Coldcard wallet investigation

2:06 · Recorded Web3 Forensia demo

Link to this case
Recorded demonstration · not live dataOpen video

Connect the records

Follow the Bitcoin address and transaction records examined in this recorded case.

  • Compare address activity with transaction outputs.
  • Understand why a transfer alone does not establish ownership.

Addresses & artifacts

Use these full identifiers to follow the investigation yourself.

Download reference index (JSON) ↓

  • Collection address shown in the recording

    Bitcoin · Address

    bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0
    View on explorer ↗

  • Consolidation transaction examined

    Bitcoin · Transaction hash

    0c6bf853a645b699a3b2cd6d8e3c44cf1a02a16f538df08212a44753f75d9d01
    View on explorer ↗

  • Receiving address shown in the recording

    Bitcoin · Address

    bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r
    View on explorer ↗

Identifiers from the original recording’s production records. These references do not independently establish a firmware vulnerability, wallet ownership, or responsibility for a theft. Watch the source recording ↗

The download contains identifiers and source links—not raw node responses, private case files, or a verified forensic report.