// FORENSICSWe reconstruct on-chain exploits — with sealed, reproducible evidence.
OnChainSurfer is a forensic firm for the crypto ecosystem. We trace exploits, drains, and laundering across chains and publish the reconstruction under a verifiable chain of custody — every claim reproducible by anyone, no trust required.
(BNB Smart Chain + Solana)
under chain of custody
on public explorers
asserted — by design
What we do
Exploit reconstruction
We deconstruct how an exploit works and how it ran: smart-contract source and bytecode audited in a network-isolated sandbox, the attack vector identified, and the on-chain execution reconstructed transaction by transaction — each step observed and sealed.
Fund tracing & laundering trails
Following proceeds across chains, bridges, DEX swaps and mixers — with visual trace graphs and wallet clustering under documented heuristics. We map what is observable and mark the hard boundaries honestly, never past the evidence.
Attribution & evidence custody
Explorer-label attribution stated as observation, not proof. We build our own attribution database case by case from legally clear public sources — never rented from a vendor.
The standard
Our forensic standard is not a style guide — it is an enforced pipeline. Every published report passes these gates.
Sealed before analyzed
Every artifact is SHA-256 fingerprinted and timestamped into a write-once custody ledger at capture — before any theory is formed. Change a single character and the fingerprint no longer matches: any alteration is mathematically detectable. Sealed records are never edited or deleted, only appended.
Enforced by code, not policy
An automated gate checks every finding before publication: claims without complete sealed evidence are downgraded to hypotheses, and identity attribution below High confidence is blocked.
Per-finding confidence levels
High confidence requires on-chain verification, at least two independent sealed sources, and third-party reproducibility. Every finding carries its level, visibly.
Zero inherited sources
Pre-existing public write-ups are treated as leads, never as sources. Every fact we publish is independently re-collected and re-sealed under our own chain of custody.
We state what we do not claim
Every report carries an explicit boundary section: floor counts versus totals, hard visibility limits, and exactly what the evidence does not support.
Human-verified, AI-accelerated
AI agents accelerate collection and analysis, but no finding is marked verified without human sign-off. AI suggests, evidence decides, the human verifies.
Latest research
All investigations →About
OnChainSurfer is built on one principle: affirmative language only for sealed, observable evidence. Interpretations are labeled as hypotheses. Every transaction hash we cite is published in full — never truncated — with checksummed addresses and UTC timestamps, so every claim is reproducible by anyone against the public chains. No trust required.
We are an independent, AI-augmented forensic practice: investigations are directed by a human investigator and executed with specialized AI agents across every discipline. The guarantee is the forensic standard — not headcount. Independence means no conflicts of interest: we answer to the evidence.