Report incident

What to do if your crypto is stolen?

Stop the bleeding and preserve evidence. The first 24 hours are critical — after that, funds hit mixers or OTC desks.

Step-by-step action plan

Speed is everything. The first hours after a theft decide whether you recover your funds or not — so don't freeze up, work the checklist below.

1. Report the incident

Submit an incident report through the form on this site. Include: what happened, the affected wallet address(es), transaction hashes of the outgoing transfers, screenshots of the wallet and any correspondence with the attacker, plus anything else that helps us reconstruct the attack. We use this to triage the case in minutes and recommend a response.

2. Flag the attacker's addresses

As soon as we have the data, we push the attacker's addresses into analytics feeds used by exchanges, swap services, OTC desks, and blockchain explorers. The moment a flagged address tries to deposit somewhere, risk engines catch it — the exchange freezes the transaction and blocks the withdrawal.

3. Locate the stolen assets

  • If the funds are already on a CEX: we send a compliance request directly to the exchange through our established contacts. The service is free; what matters is speed — act before the attacker cashes out.
  • If the funds are on a cold wallet or sitting idle: we set up wallet tracking so you get a real-time alert the moment they move. When they hit a custodial endpoint, we're ready with the freeze request.
  • If the funds are in a DEX, swap service, or bridge: a deeper analysis is needed — we identify the output assets after swaps, trace paths through liquidity pools and cross-chain bridges, and keep tracking every new address that touches them.

4. Request an analytical report

An analytical report is the evidence-grade document produced after a full blockchain investigation: transaction chain, clustered addresses, mixer and bridge usage, CEX touch-points, deanonymization leads. Exchanges, law enforcement, and courts accept it as formal proof.

5. File a police report

Bring these documents with you:

  • The analytical report on the incident.
  • A written statement describing the events.
  • A formal request to the relevant exchange.

Most officers don't have the tools to investigate on-chain. The stronger the dossier you bring, the faster the case actually opens.