Forensic Engagement
Court-structured crypto forensics for high-stakes recoveries.
We trace, attribute, and document private-key thefts and cross-chain laundering with the same evidence chain used in the Bo Shen $40M case. AI-assisted, human-reviewed, independently verifiable.
How we engage
Two paths. Choose by case scope, not by ARR ambitions.
Court-Structured ForensicsEmail [email protected]
Forensic engagement
For victims, counsel, and law-enforcement-adjacent investigators.
$1,000/retainer
Engagement deposit · credited to final invoice
$30,000+/engagement
Full forensic investigation · 14-day delivery SLA
Court-structured evidentiary package — Tier 1A/1B/2 classification per finding
3-LLM cross-verification (protocol v4.2) on all material claims
Address registry with anti-hallucination guarantees
WORM-sealed evidence package with SHA-256 / SHA3-256 dual-hash
Bilingual (EN/CN) reports for cross-border legal proceedings
Self-Service SaaSSee SaaS pricing
Subscription intelligence
For crypto teams running ongoing compliance, monitoring, and triage.
Free
1–3 risk-score lookups per day
$299/mo
Lite tier. Starter $2,999/mo · Pro $4,999/mo
Address risk scoring across ETH, BTC, SOL, TRX, and major bridges
Multi-source enrichment (Arkham, MistTrack, Bitquery, internal labels)
Real-time monitoring with custom alerts and webhooks
Pay-per-query top-ups for on-demand higher volumes
Subscription credit applied to forensic engagements above
Why our reports stand up in court
Every claim is anchored to deterministic on-chain evidence plus third-party intelligence, with automated cross-verification by multiple independent LLMs.
3-LLM cross-verification (v4.2)Every non-trivial claim independently evaluated by 3 LLMs against raw API evidence. Bo Shen v4 result: 19/20 majority PASS, 1 contested (sourcing nuance only), 0 substantive errors.
WORM-sealed evidence chainEvery cited artifact sealed via SHA-256 URN into write-once-read-many storage with 90-day retention. Downstream verification of exact bytes is cryptographic, not narrative.
Two-stage verification pipelinePython precision layer (hash/balance/block match) plus LLM semantic layer. Public Bo Shen result: 84/0/0 (84 PASS / 0 FAIL / 0 WARN), re-verified 2026-05-04 with zero verdict drift.
Address anti-hallucination registryEvery address must be independently registered with source TX hash and source API, then re-verified to have live on-chain activity. Prevents fabricated-but-plausible addresses.
Multi-chain coverageETH, BTC, SOL, TRX, plus major cross-chain bridges (LayerZero, Wormhole, Stargate, cBridge, Across). Cross-chain theft is the modern norm; one-chain forensics is no longer enough.
Bilingual EN/CN reportsAll forensic outputs delivered in matched English + Chinese versions, formatted for cross-border subpoenas, freezes, and registrar preservation requests.
Public Case Study
Tracing a $40M Private-Key Theft
Bo Shen (Founder, Fenbushi Capital) — 16-minute private-key compromise on 2022-11-10. We mapped 82.3% ($33.48M) to destinations: $28.5M Tornado Cash, $3.25M across 4 exchanges (subpoena-addressable), $527K still freezable on-chain.
Public report: 653 lines · 48 addresses · 19 transactions · 84 automated checks PASSPublic case study · re-verified 2026-05-04 · 84/0/0 PASS
Forensic engagement FAQ
What is included in the $30,000 base engagement?
Up to 60 hours of expert investigation, custom WORM-sealed evidence chain, court-structured GPG-signed PDF, expert-witness preparation materials, and subpoena-ready evidence packages for relevant exchanges.
How long does an investigation take?
Initial scoping: 24-48 hours. Standard cases (under $10M): 7-14 business days. Complex multi-chain cases ($10M+): 3-12 weeks. The $40.68M Bo Shen case took 19 person-days.
Do you provide expert testimony?
Yes. Forensic experts (cybersecurity + financial fraud background) are available for affidavits, depositions, and court testimony, subject to availability and engagement letter.
Can you trace funds through Tornado Cash?
Partially. We support time-correlation analysis for entry/exit pairing. Full de-anonymization is not always possible due to mixer design, but we have demonstrated success on time-correlated cases.
Do you work directly with law enforcement?
We work with private clients (victims, exchanges, law firms) who engage with law enforcement. We provide subpoena-ready packages, expert affidavits, and direct communication with relevant LE units when authorized by the client.
What jurisdictions do you support?
Headquartered in Singapore (PDPA compliant). Cases supported in US, UK, Singapore, Hong Kong, and EU. Cross-border subpoena assistance via partner law firms.
How are cases above $30,000 quoted?
Custom quote based on chain count, asset value, complexity, and timeline. Fixed-fee or time-and-materials engagement letters available.
What happens if recovery is not possible?
The forensic engagement covers investigation and evidence delivery. Recovery depends on funds reaching custodians (exchanges, VASPs) that respond to subpoenas. We do not guarantee recovery; we deliver the evidence to maximize the probability of recovery.
Engage with us
Ready to scope your case?
Tell us the loss event, the chains involved, and your timeline. We respond to qualified inquiries within one business day.
5CIP does not perform legal filings or law-enforcement actions. The deliverable is a court-structured evidentiary package — engagement of counsel and pursuit of subpoenas are the client's responsibility.