Knowledge Base

164 notes · 8 topics · open tradecraft

This is the open reference library behind my investigations: 164 notes on blockchain forensics, from how a UTXO works to how a case holds up in court. It’s the tradecraft I actually use, written in my own words and organized so I can find it fast. Browse by topic in the sidebar.

Topic	Notes	What’s here
Fundamentals	12	Blockchain, UTXO and account models, EVM transactions, and the vocabulary every case rests on.
OSINT	13	Open-source intelligence: what it is, how to collect it safely, and how to grade sources.
Tracing	31	Following funds on-chain: graph, taint and peel analysis, cross-chain correlation, EVM mechanics.
Attribution & Clustering	15	Turning addresses into clusters and clusters into real-world identities, with explicit confidence.
Laundering & Obfuscation	45	How illicit funds are laundered and obfuscated, and how to break them. Includes the mixers deep-dive.
Evidence & Legal	20	Preserving evidence, chain of custody, admissibility, and defensible reporting.
Casework Method	26	Running the investigation: intake, scoping, OPSEC, response priority, freezing, sanctions.
Tooling	2	Choosing tools, and the consolidated tool catalogue.

Published casework lands under Casework as I complete investigations.