Tracing

46 notes

Following funds on-chain: graph, taint and peel analysis, cross-chain correlation, EVM mechanics.

Jump to any note in this section:

Note
ERC-20 Approvals: The Forgotten Attack Surface
THORChain Vault Churn and Asgard Migration

Note
A Smart Contract Interaction Is a Lead, Not an Endpoint
Understand the Protocol Before You Conclude

Note
Asset-Tracing Methodologies for Commingled Funds (PIFO, LIBR, LIFO, FIFO, Pari Passu, Rolling Charge)
Service Choke-Points: What Each Service Type Can Give You

Note
Blockchain Explorer Review Procedure
Forensic Method Selection Decision Tree
Non-Explorer Bridge Correlation
Transaction Tracing Decision Tree and Endpoint Classification
Traversing an Ambiguous Peel Chain with a Wallet Fingerprint
Wallet Review Procedure

Note
Bitcoin OP_RETURN as a Cross-Chain Signal
CoinJoin / Mixer Detection
CoinJoin Implementation Signatures
Consolidation Addresses and Tiered Intermediary Groups
Cooperating Instant Exchanges as Pivot Points
Cross-Chain / Bridge & Swap Analysis
Dating a Block Height Without an Archive Node
Decoding a Cross-Chain Destination Address from Input Data
Document a Token Transfer by Network, Standard, and Contract
Etherscan Advanced Filter for Point-in-Time Review
EVM Event Logs & Decoding Calldata
Exchange Pass-Through Detection by One-to-One Deposit and Withdrawal Matching
Filter-by-Size + Scrape + LLM Summarise
Finding a Bitcoin Transaction by Its OP_RETURN
Mint-Style Bridges: Pivot to Counterparty-Graph Analysis
Peeling Chain Analysis
Post-Mixer Bitcoin Tracing
Protocol Housekeeping vs Incident
Router & Multicall Traffic: Read Swap Events, Exclude MEV
Smart Contract / DeFi Protocol Tracing
Taint Analysis (Taint Tracing)
Temporal / Timing Correlation Analysis
Temporal Analysis to Defeat Obfuscation
Time-and-Value Analysis
Trace an Intent-Based Bridge (NEAR Intents) via Its Public Explorer
Transaction Graph Analysis (TGA)
Value-and-Block-Window Candidate Search

Note
EVM Multi-Chain Tracing Essentials
Know When to Stop Tracing

Note
A Liquidity Pool Deposit Ends Asset Identity
Cross-Chain Correlation Edge Cases & Failure Modes
EVM Proxies: Read the Right Source
Vendor Risk Scores Disagree, and a Mixer Lowers Them

Note
THORChain Memo Grammar on Bitcoin