Wallet investigation after theft or hack
In short
When a wallet is emptied, the outgoing transactions remain on the blockchain and reveal where the funds were taken.
- Paucitas investigates an emptied or compromised wallet by following its outgoing transactions.
- We reconstruct where the funds went and which services they passed through.
- The findings are recorded in a factual, verifiable report.
- We do not promise recovery, but we document the trail for any further steps.
Has your wallet been emptied after a hack or theft? Paucitas carries out a wallet investigation after theft or a hack, following the outgoing transactions to reconstruct where the funds went and recording the findings verifiably.
What happens during a wallet hack?
In a wallet hack, an attacker who gains access to a private key or seed phrase can move funds out of the wallet. Those outgoing transactions are permanently recorded on the blockchain, which means the path the funds took remains visible even after the wallet is empty.
How Paucitas investigates a wallet
We identify the unauthorised outgoing transactions and follow them using blockchain analysis, reconstructing the chain of addresses the funds passed through. We record where they flow towards, including any cash-out points that connect to identifiable services, and we document each transaction hash so the trail is verifiable.
What you receive
You receive a factual account of how the wallet was emptied and where the funds went, as far as it can be established on-chain. The report is written to be verifiable and usable for a police report or further steps.
Our approach step by step
We start with an intake to establish what happened and which data is available, such as the wallet address and the time of the incident. We then reconstruct the outgoing flow, map the destinations, and record the findings in a verifiable report. Preserve all data and avoid taking action yourself.
Related terms and background
Further reading
Related topics
Frequently asked questions about wallet investigation after theft or hack
Can you tell who emptied my wallet?
We follow where the funds went and record any points where they connect to identifiable services. Naming an individual is usually a matter for the authorities, but our report gives them a verifiable starting point.
Should I create a new wallet first?
Securing your remaining assets is sensible, but preserve all data about the incident first and avoid taking action that could complicate the trail. We can advise on what to keep before you move anything.