[{"data":1,"prerenderedAt":1106},["ShallowReactive",2],{"$fg5C43Lm8FW29OKvL62b0UU3nMI7jsUj5RXBGlc_cwXA":3,"$fANBXRA5qL30ILKEJ9yf5YjnDopLtm9f9mk-Ss1FBpQk":526,"page:site-default:uri-blockchain-basics__what-is-blockchain-forensics":649,"articles:categories-crypto-crime:channel-blockchainBasics:limit-9:site-default":845,"article-formatted-default-150122":994,"faqs-default-crypto-crime-5":1105},{"globalSet":4},{"__typename":5,"dateUpdated":6,"headerLinks":7,"buttonLink":492,"buttonLink2":496,"buttonLinks":500,"externalLink":521,"plainText":523,"cardLink":524,"enabledSwitch":525},"header_GlobalSet","2026-08-06T10:19:11+01:00",[8,218,315,405],{"buttonLink":9,"headerDropdownVariant":15,"title":16,"primaryLinksSubDropdown":17,"primaryLinks":198,"minorLinks":199,"plainText":200,"buttonLink2":201,"plainText2":206,"asset":207},[10],{"title":11,"ariaLabel":11,"target":11,"linkUrl":12,"text":13,"__typename":14},null,"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002F","Solutions & Industries","buttonLink_Entry_LinkType","standard","Solutions for",[18,63,103,138,171],{"image":19,"buttonLink":23,"plainText":27,"title":11,"buttonLinks":28},[20],{"title":21,"url":22,"alt":11},"Icon Finance","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconFinance.svg",[24],{"title":11,"ariaLabel":11,"target":11,"linkUrl":25,"text":26,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002F","Banks and financial institutions","Manage crypto risk with confidence",[29,33,38,43,48,53,58],{"buttonLink":30},[31],{"title":11,"ariaLabel":11,"target":11,"linkUrl":25,"text":32,"__typename":14},"How we help financial institutions",{"buttonLink":34},[35],{"title":11,"ariaLabel":11,"target":11,"linkUrl":36,"text":37,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002Fscreening-and-monitoring\u002F","Screening and monitoring",{"buttonLink":39},[40],{"title":11,"ariaLabel":11,"target":11,"linkUrl":41,"text":42,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002Fregulatory-reporting\u002F","Regulatory reporting",{"buttonLink":44},[45],{"title":11,"ariaLabel":11,"target":11,"linkUrl":46,"text":47,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002Fentity-due-diligence\u002F","Entity due diligence",{"buttonLink":49},[50],{"title":11,"ariaLabel":11,"target":11,"linkUrl":51,"text":52,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002Fstablecoin-risk-management\u002F","Stablecoin risk management",{"buttonLink":54},[55],{"title":11,"ariaLabel":11,"target":11,"linkUrl":56,"text":57,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002Frisk-management\u002F","Risk Management",{"buttonLink":59},[60],{"title":11,"ariaLabel":11,"target":11,"linkUrl":61,"text":62,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002Finvestigations\u002F","Investigations",{"image":64,"buttonLink":68,"plainText":73,"title":11,"buttonLinks":74},[65],{"title":66,"url":67,"alt":11},"Icon Target","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconTarget.svg",[69],{"title":70,"ariaLabel":11,"target":11,"linkUrl":71,"text":72,"__typename":14},"Crypto Natives","https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fcrypto-companies\u002F","Crypto companies","Scale rapidly in digital assets",[75,79,83,88,92,97],{"buttonLink":76},[77],{"title":11,"ariaLabel":11,"target":11,"linkUrl":71,"text":78,"__typename":14},"How we help crypto companies",{"buttonLink":80},[81],{"title":11,"ariaLabel":11,"target":11,"linkUrl":82,"text":37,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fcrypto-companies\u002Fscreening-and-monitoring\u002F",{"buttonLink":84},[85],{"title":11,"ariaLabel":11,"target":11,"linkUrl":86,"text":87,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fcrypto-companies\u002Fblockchain-analytics\u002F","Blockchain analytics",{"buttonLink":89},[90],{"title":11,"ariaLabel":11,"target":11,"linkUrl":91,"text":62,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fcrypto-companies\u002Finvestigations\u002F",{"buttonLink":93},[94],{"title":11,"ariaLabel":11,"target":11,"linkUrl":95,"text":96,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fcrypto-companies\u002Fdata-and-intelligence\u002F","Data and intelligence",{"buttonLink":98},[99],{"title":11,"ariaLabel":11,"target":11,"linkUrl":100,"text":101,"__typename":102},"https:\u002F\u002Fdevelopers.elliptic.co\u002Freference\u002Fgetting-started","API Documentation","buttonLink_Url_LinkType",{"image":104,"buttonLink":108,"plainText":112,"title":11,"buttonLinks":113},[105],{"title":106,"url":107,"alt":11},"Icon Credit card","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconCredit-card.svg",[109],{"title":11,"ariaLabel":11,"target":11,"linkUrl":110,"text":111,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fpayment-service-providers\u002F","Payment service providers","Move money with trust and speed",[114,118,122,126,130,134],{"buttonLink":115},[116],{"title":11,"ariaLabel":11,"target":11,"linkUrl":110,"text":117,"__typename":14},"How we help payment service providers",{"buttonLink":119},[120],{"title":11,"ariaLabel":11,"target":11,"linkUrl":121,"text":37,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fpayment-service-providers\u002Fscreening-and-monitoring\u002F",{"buttonLink":123},[124],{"title":11,"ariaLabel":11,"target":11,"linkUrl":125,"text":62,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fpayment-service-providers\u002Finvestigations\u002F",{"buttonLink":127},[128],{"title":11,"ariaLabel":11,"target":11,"linkUrl":129,"text":96,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fpayment-service-providers\u002Fdata-and-intelligence\u002F",{"buttonLink":131},[132],{"title":11,"ariaLabel":11,"target":11,"linkUrl":133,"text":87,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fpayment-service-providers\u002Fblockchain-analytics\u002F",{"buttonLink":135},[136],{"title":11,"ariaLabel":11,"target":11,"linkUrl":137,"text":52,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fpayment-service-providers\u002Fstablecoin-risk-management\u002F",{"image":139,"buttonLink":143,"plainText":147,"title":11,"buttonLinks":148},[140],{"title":141,"url":142,"alt":11},"Icon Flag","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconFlag.svg",[144],{"title":11,"ariaLabel":11,"target":11,"linkUrl":145,"text":146,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fgovernments-regulators\u002F","Governments and regulators","Strengthen oversight of digital assets",[149,153,157,162,167],{"buttonLink":150},[151],{"title":11,"ariaLabel":11,"target":11,"linkUrl":145,"text":152,"__typename":14},"How we help governments and regulators",{"buttonLink":154},[155],{"title":11,"ariaLabel":11,"target":11,"linkUrl":156,"text":96,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fgovernments-regulators\u002Fdata-and-intelligence\u002F",{"buttonLink":158},[159],{"title":11,"ariaLabel":11,"target":11,"linkUrl":160,"text":161,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fgovernments-regulators\u002Fblockchain-analytics\u002F","Blockchain Analytics",{"buttonLink":163},[164],{"title":11,"ariaLabel":11,"target":11,"linkUrl":165,"text":166,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fgovernments-regulators\u002Fdue-diligence-dashboards\u002F","Due diligence dashboards",{"buttonLink":168},[169],{"title":11,"ariaLabel":11,"target":11,"linkUrl":170,"text":37,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fgovernments-regulators\u002Fscreening-and-monitoring\u002F",{"image":172,"buttonLink":176,"plainText":180,"title":11,"buttonLinks":181},[173],{"title":174,"url":175,"alt":11},"Icon Shield","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconShield.svg",[177],{"title":11,"ariaLabel":11,"target":11,"linkUrl":178,"text":179,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Flaw-enforcement\u002F","Law enforcement","Trace illicit activity and recover assets",[182,186,190,194],{"buttonLink":183},[184],{"title":11,"ariaLabel":11,"target":11,"linkUrl":178,"text":185,"__typename":14},"How we help law enforcement",{"buttonLink":187},[188],{"title":11,"ariaLabel":11,"target":11,"linkUrl":189,"text":87,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Flaw-enforcement\u002Fblockchain-analytics\u002F",{"buttonLink":191},[192],{"title":11,"ariaLabel":11,"target":11,"linkUrl":193,"text":37,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Flaw-enforcement\u002Fscreening-and-monitoring\u002F",{"buttonLink":195},[196],{"title":11,"ariaLabel":11,"target":11,"linkUrl":197,"text":62,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Flaw-enforcement\u002Finvestigations\u002F",[],[],"Spotlight",[202],{"title":11,"ariaLabel":11,"target":11,"linkUrl":203,"text":204,"__typename":205},"https:\u002F\u002Fwww.elliptic.co\u002Fnewsroom\u002Finside-operation-atlantic-how-blockchain-analytics-helped-disrupt-approval-phishing-at-scale\u002F","Operation Atlantic","buttonLink2_Entry_LinkType","How Elliptic helped trace $45M+ in stolen crypto",[208],{"__typename":209,"image":210,"mobileImage":217},"image_Entry",[211],{"title":212,"url":213,"alt":214,"width":215,"height":216},"Jeans ynxy F Id93 Ws unsplash 1","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Fjeans-ynxyFId93Ws-unsplash-1.jpg","A high-angle view of a modern staircase with curved glass railings and people walking below on the tiled floor.",760,800,[],{"buttonLink":219,"headerDropdownVariant":223,"title":222,"primaryLinksSubDropdown":224,"primaryLinks":225,"minorLinks":266,"plainText":300,"buttonLink2":301,"plainText2":305,"asset":306},[220],{"title":11,"ariaLabel":11,"target":11,"linkUrl":221,"text":222,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002F","Products","minorLinks",[],[226,236,246,256],{"image":227,"buttonLink":231,"plainText":235},[228],{"title":229,"url":230,"alt":11},"Icon Scan","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconScan.svg",[232],{"title":11,"ariaLabel":11,"target":11,"linkUrl":233,"text":234,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Flens\u002F","Lens","Real-time multi-asset wallet & transaction screening",{"image":237,"buttonLink":241,"plainText":245},[238],{"title":239,"url":240,"alt":11},"Icon Compass","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconCompass.svg",[242],{"title":11,"ariaLabel":11,"target":11,"linkUrl":243,"text":244,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Fdiscovery\u002F","Discovery","VASP screening & entity due diligence",{"image":247,"buttonLink":251,"plainText":255},[248],{"title":249,"url":250,"alt":11},"Icon Click","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconClick.svg",[252],{"title":11,"ariaLabel":11,"target":11,"linkUrl":253,"text":254,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Finvestigator\u002F","Investigator","Single-click cross-chain investigations",{"image":257,"buttonLink":261,"plainText":265},[258],{"title":259,"url":260,"alt":11},"Icon Graph","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconGraph.svg",[262],{"title":11,"ariaLabel":11,"target":11,"linkUrl":263,"text":264,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Fecosystem-monitoring\u002F","Ecosystem monitoring","Visualizations for crypto exposure trend analysis",[267],{"title":268,"buttonLinks":269},"Platform",[270,275,280,285,290,295],{"buttonLink":271},[272],{"title":11,"ariaLabel":11,"target":11,"linkUrl":273,"text":274,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Fplatform\u002F","The Elliptic difference",{"buttonLink":276},[277],{"title":11,"ariaLabel":11,"target":11,"linkUrl":278,"text":279,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Fissuer-due-diligence\u002F","Issuer due diligence",{"buttonLink":281},[282],{"title":11,"ariaLabel":11,"target":11,"linkUrl":283,"text":284,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Fasset-due-diligence\u002F","Asset due diligence",{"buttonLink":286},[287],{"title":11,"ariaLabel":11,"target":11,"linkUrl":288,"text":289,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Fdata-fabric\u002F","Data Fabric",{"buttonLink":291},[292],{"title":11,"ariaLabel":11,"target":11,"linkUrl":293,"text":294,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Felliptic-copilot\u002F","Elliptic’s copilot",{"buttonLink":296},[297],{"title":11,"ariaLabel":11,"target":298,"linkUrl":100,"text":299,"__typename":102},"_blank","API documentation","ROI",[302],{"title":11,"ariaLabel":11,"target":11,"linkUrl":303,"text":304,"__typename":205},"https:\u002F\u002Fwww.elliptic.co\u002Fcrypto-compliance-calculator\u002F","Compliance efficency calculator","See how much your business could save",[307],{"__typename":209,"image":308,"mobileImage":314},[309],{"title":310,"url":311,"alt":312,"width":215,"height":313},"Sj objio Ecxd9 F Eo2 Kk unsplash 1 1","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Fsj-objio-Ecxd9FEo2Kk-unsplash-1-1.jpg","Person wearing a brown blazer and white shirt sitting at a table with a laptop and a cup, holding a green pen, in low light.",680,[],{"buttonLink":316,"headerDropdownVariant":223,"title":320,"primaryLinksSubDropdown":321,"primaryLinks":346,"minorLinks":370,"plainText":390,"buttonLink2":391,"plainText2":395,"asset":396},[317],{"title":11,"ariaLabel":11,"target":11,"linkUrl":318,"text":319,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Ftraining-and-certifications\u002F","Training & Certifications","Courses",[322,330,338],{"image":323,"buttonLink":324,"plainText":328,"title":11,"buttonLinks":329},[],[325],{"title":11,"ariaLabel":11,"target":11,"linkUrl":326,"text":327,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Ftraining-and-certifications\u002Fcrypto-certification\u002F","Crypto certification","Turn your team into crypto experts",[],{"image":331,"buttonLink":332,"plainText":336,"title":11,"buttonLinks":337},[],[333],{"title":11,"ariaLabel":11,"target":11,"linkUrl":334,"text":335,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Ftraining-and-certifications\u002Fproduct-certifications\u002F","Product certifications","Master wallet screening, transaction monitoring and deep investigations",[],{"image":339,"buttonLink":340,"plainText":344,"title":11,"buttonLinks":345},[],[341],{"title":11,"ariaLabel":11,"target":11,"linkUrl":342,"text":343,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Ftraining-and-certifications\u002Fspotlight-series\u002F","On-demand courses","Self-paced compliance training",[],[347,354,362],{"image":348,"buttonLink":352,"plainText":336},[349],{"title":350,"url":351,"alt":11},"Icon Award C","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconAward-C.svg",[353],{"title":11,"ariaLabel":11,"target":11,"linkUrl":326,"text":327,"__typename":14},{"image":355,"buttonLink":359,"plainText":361},[356],{"title":357,"url":358,"alt":11},"Icon Award P","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconAward-P.svg",[360],{"title":11,"ariaLabel":11,"target":11,"linkUrl":334,"text":335,"__typename":14},"Turn your team into experts on Elliptic's blockchain analytics solutions",{"image":363,"buttonLink":367,"plainText":344},[364],{"title":365,"url":366,"alt":11},"Icon Laptop","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconLaptop.svg",[368],{"title":11,"ariaLabel":11,"target":11,"linkUrl":342,"text":369,"__typename":14},"Spotlight series",[371],{"title":372,"buttonLinks":373},"Fundamentals",[374,379,384],{"buttonLink":375},[376],{"title":11,"ariaLabel":11,"target":11,"linkUrl":377,"text":378,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fblockchain-basics\u002F","Blockchain basics",{"buttonLink":380},[381],{"title":11,"ariaLabel":11,"target":11,"linkUrl":382,"text":383,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fcountry-guides\u002F","Country guides",{"buttonLink":385},[386],{"title":11,"ariaLabel":11,"target":11,"linkUrl":387,"text":388,"__typename":389},"\u002Fglossary\u002F","Glossary","buttonLink_Custom_LinkType","Webinar",[392],{"title":11,"ariaLabel":11,"target":11,"linkUrl":393,"text":394,"__typename":205},"https:\u002F\u002Fwww.elliptic.co\u002Fwebinars\u002Fcrypto-regulation-in-2026-on-demand-webinar\u002F","Crypto regulation in 2026: How to prepare","Watch on demand",[397],{"__typename":209,"image":398,"mobileImage":404},[399],{"title":400,"url":401,"alt":402,"width":215,"height":403},"Sj objio Ecxd9 F Eo2 Kk unsplash 1","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Fsj-objio-Ecxd9FEo2Kk-unsplash-1.jpg","A close-up of a laptop screen displaying a video call interface with various participant windows and controls in a dark theme.",600,[],{"buttonLink":406,"headerDropdownVariant":223,"title":410,"primaryLinksSubDropdown":411,"primaryLinks":436,"minorLinks":459,"plainText":478,"buttonLink2":479,"plainText2":483,"asset":484},[407],{"title":408,"ariaLabel":11,"target":11,"linkUrl":409,"text":11,"__typename":389},"Insights & Community","","Resources",[412,420,428],{"image":413,"buttonLink":414,"plainText":418,"title":11,"buttonLinks":419},[],[415],{"title":11,"ariaLabel":11,"target":11,"linkUrl":416,"text":417,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002F","Insights and research","From quick guides to trend forecasting and deep analysis",[],{"image":421,"buttonLink":422,"plainText":426,"title":11,"buttonLinks":427},[],[423],{"title":11,"ariaLabel":11,"target":11,"linkUrl":424,"text":425,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fcustomer-stories\u002F","Customer stories","See how Elliptic has helped global leaders",[],{"image":429,"buttonLink":430,"plainText":434,"title":11,"buttonLinks":435},[],[431],{"title":11,"ariaLabel":11,"target":11,"linkUrl":432,"text":433,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Ffaqs\u002F","FAQs","All your questions, answered",[],[437,444,452],{"image":438,"buttonLink":442,"plainText":418},[439],{"title":440,"url":441,"alt":11},"Icon Bulb","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconBulb.svg",[443],{"title":11,"ariaLabel":11,"target":11,"linkUrl":416,"text":417,"__typename":14},{"image":445,"buttonLink":449,"plainText":451},[446],{"title":447,"url":448,"alt":11},"Icon Person","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconPerson.svg",[450],{"title":11,"ariaLabel":11,"target":11,"linkUrl":424,"text":425,"__typename":14},"Real results, big impact.",{"image":453,"buttonLink":457,"plainText":434},[454],{"title":455,"url":456,"alt":11},"Icon Question","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconQuestion.svg",[458],{"title":11,"ariaLabel":11,"target":11,"linkUrl":432,"text":433,"__typename":14},[460],{"title":461,"buttonLinks":462},"Community",[463,468,473],{"buttonLink":464},[465],{"title":11,"ariaLabel":11,"target":11,"linkUrl":466,"text":467,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fwebinars\u002F","Webinars",{"buttonLink":469},[470],{"title":11,"ariaLabel":11,"target":11,"linkUrl":471,"text":472,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fnewsroom\u002F","Newsroom",{"buttonLink":474},[475],{"title":11,"ariaLabel":11,"target":11,"linkUrl":476,"text":477,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fpartners\u002F","Partners","Success story",[480],{"title":11,"ariaLabel":11,"target":11,"linkUrl":481,"text":482,"__typename":205},"https:\u002F\u002Fwww.elliptic.co\u002Fcustomer-stories\u002Fglobal-crypto-exchange-realizes-31m-efficiency-gain-through-compliance-transformation-with-elliptic\u002F","Global crypto exchange realizes $3.1M efficiency gain with Elliptic","Uncover the story",[485],{"__typename":209,"image":486,"mobileImage":491},[487],{"title":488,"url":489,"alt":490,"width":215,"height":403},"Sj objio Ecxd9 F Eo2 Kk unsplash 1 2","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Fsj-objio-Ecxd9FEo2Kk-unsplash-1-2.jpg","Rows of dark green stadium seats arranged in a pattern, set against a dim background, creating a sense of depth and emptiness.",[],[493],{"title":11,"ariaLabel":11,"target":11,"linkUrl":494,"text":495,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fget-started\u002F","Get a demo",[497],{"title":498,"ariaLabel":11,"target":11,"linkUrl":409,"text":11,"__typename":499},"Company & Careers","buttonLink2_Custom_LinkType",[501,506,511,516],{"buttonLink":502},[503],{"title":11,"ariaLabel":11,"target":11,"linkUrl":504,"text":505,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fabout-elliptic\u002F","About Elliptic",{"buttonLink":507},[508],{"title":11,"ariaLabel":11,"target":11,"linkUrl":509,"text":510,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Ftrust\u002F","Security & Trust",{"buttonLink":512},[513],{"title":11,"ariaLabel":11,"target":11,"linkUrl":514,"text":515,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fcareers\u002F","Careers",{"buttonLink":517},[518],{"title":11,"ariaLabel":11,"target":11,"linkUrl":519,"text":520,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fcontact\u002F","Contact",{"url":522},"https:\u002F\u002Fapp.elliptic.co\u002F?_gl=1*7ha9nv*_gcl_aw*R0NMLjE3ODE2OTM0OTcuQ2owS0NRandpOG5SQmhEaEFSSXNBSFpmX3BiZDZ3X1N5dlRaWEw0Y0x4Njd2YXBDelZrYzZwYjRqYnZFWGFvYVlGSExKdUNUMlVad01qWWFBZ3VSRUFMd193Y0I.*_gcl_au*MTMzNjMwMTA3MC4xNzgxNjkzNDk3","We’re hiring! Join us and make a move that matters",{"url":514,"target":11},true,{"globalSet":527},{"__typename":528,"dateUpdated":529,"footerLinks":530,"buttonLinks":638,"plainText":644,"plainText2":645,"entry":646},"footer_GlobalSet","2026-07-29T12:38:35+01:00",[531,550,583,599,618],{"buttonLink":532,"buttonLinks":534},[533],{"title":11,"ariaLabel":11,"target":11,"linkUrl":12,"text":13,"__typename":14},[535,538,541,544,547],{"buttonLink":536},[537],{"title":11,"ariaLabel":11,"target":11,"linkUrl":25,"text":26,"__typename":14},{"buttonLink":539},[540],{"title":11,"ariaLabel":11,"target":11,"linkUrl":71,"text":72,"__typename":14},{"buttonLink":542},[543],{"title":11,"ariaLabel":11,"target":11,"linkUrl":145,"text":146,"__typename":14},{"buttonLink":545},[546],{"title":11,"ariaLabel":11,"target":11,"linkUrl":178,"text":179,"__typename":14},{"buttonLink":548},[549],{"title":11,"ariaLabel":11,"target":11,"linkUrl":110,"text":111,"__typename":14},{"buttonLink":551,"buttonLinks":553},[552],{"title":11,"ariaLabel":11,"target":11,"linkUrl":221,"text":222,"__typename":14},[554,557,560,563,566,569,572,575,578],{"buttonLink":555},[556],{"title":11,"ariaLabel":11,"target":11,"linkUrl":243,"text":244,"__typename":14},{"buttonLink":558},[559],{"title":11,"ariaLabel":11,"target":11,"linkUrl":233,"text":234,"__typename":14},{"buttonLink":561},[562],{"title":11,"ariaLabel":11,"target":11,"linkUrl":253,"text":254,"__typename":14},{"buttonLink":564},[565],{"title":11,"ariaLabel":11,"target":11,"linkUrl":263,"text":264,"__typename":14},{"buttonLink":567},[568],{"title":11,"ariaLabel":11,"target":11,"linkUrl":288,"text":289,"__typename":14},{"buttonLink":570},[571],{"title":11,"ariaLabel":11,"target":11,"linkUrl":293,"text":294,"__typename":14},{"buttonLink":573},[574],{"title":11,"ariaLabel":11,"target":11,"linkUrl":273,"text":274,"__typename":14},{"buttonLink":576},[577],{"title":11,"ariaLabel":11,"target":298,"linkUrl":100,"text":101,"__typename":102},{"buttonLink":579},[580],{"title":11,"ariaLabel":11,"target":298,"linkUrl":581,"text":582,"__typename":102},"https:\u002F\u002Fstatus.elliptic.co\u002F","Service Status",{"buttonLink":584,"buttonLinks":586},[585],{"title":11,"ariaLabel":11,"target":11,"linkUrl":318,"text":319,"__typename":14},[587,590,593,596],{"buttonLink":588},[589],{"title":11,"ariaLabel":11,"target":11,"linkUrl":326,"text":327,"__typename":14},{"buttonLink":591},[592],{"title":11,"ariaLabel":11,"target":11,"linkUrl":334,"text":335,"__typename":14},{"buttonLink":594},[595],{"title":11,"ariaLabel":11,"target":11,"linkUrl":377,"text":378,"__typename":14},{"buttonLink":597},[598],{"title":11,"ariaLabel":11,"target":11,"linkUrl":342,"text":369,"__typename":14},{"buttonLink":600,"buttonLinks":602},[601],{"title":408,"ariaLabel":11,"target":11,"linkUrl":409,"text":11,"__typename":389},[603,606,609,612,615],{"buttonLink":604},[605],{"title":11,"ariaLabel":11,"target":11,"linkUrl":416,"text":417,"__typename":14},{"buttonLink":607},[608],{"title":11,"ariaLabel":11,"target":11,"linkUrl":424,"text":425,"__typename":14},{"buttonLink":610},[611],{"title":11,"ariaLabel":11,"target":11,"linkUrl":432,"text":433,"__typename":14},{"buttonLink":613},[614],{"title":11,"ariaLabel":11,"target":11,"linkUrl":466,"text":467,"__typename":14},{"buttonLink":616},[617],{"title":11,"ariaLabel":11,"target":11,"linkUrl":471,"text":472,"__typename":14},{"buttonLink":619,"buttonLinks":622},[620],{"title":621,"ariaLabel":11,"target":11,"linkUrl":409,"text":11,"__typename":389},"Company",[623,626,629,632,635],{"buttonLink":624},[625],{"title":11,"ariaLabel":11,"target":11,"linkUrl":504,"text":505,"__typename":14},{"buttonLink":627},[628],{"title":11,"ariaLabel":11,"target":11,"linkUrl":509,"text":510,"__typename":14},{"buttonLink":630},[631],{"title":11,"ariaLabel":11,"target":11,"linkUrl":476,"text":477,"__typename":14},{"buttonLink":633},[634],{"title":11,"ariaLabel":11,"target":11,"linkUrl":514,"text":515,"__typename":14},{"buttonLink":636},[637],{"title":11,"ariaLabel":11,"target":11,"linkUrl":519,"text":520,"__typename":14},[639],{"buttonLink":640},[641],{"title":11,"ariaLabel":11,"target":11,"linkUrl":642,"text":643,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fprivacy-notice\u002F","Privacy Notice","Elliptic Enterprises Limited. Registered in England and Wales (number 8458210). VAT registration number 171021261.","Stay ahead with expert insights",[647],{"uri":648},"newsletter",{"__typename":650,"siteName":651,"uri":652,"id":653,"title":654,"url":655,"postDate":656,"dateUpdated":657,"slug":658,"sectionHandle":659,"ancestors":660,"authorSelect":661,"asset":662,"categoryTopics":672,"categoryNewsTypes":676,"categoryIndustries":677,"categoryRegions":678,"seo":679,"articleContentArea":688,"faqs":714,"articleSelect":715,"plainText":11,"plainText2":11,"buttonLink":842},"article_Entry","Elliptic","blockchain-basics\u002Fwhat-is-blockchain-forensics","150122","What is blockchain forensics?","https:\u002F\u002Fwww.elliptic.co\u002Fblockchain-basics\u002Fwhat-is-blockchain-forensics\u002F","2026-08-25T13:56:23+01:00","2026-08-25T11:07:28+01:00","what-is-blockchain-forensics","blockchainBasics",[],[],[663],{"__typename":209,"image":664,"mobileImage":671},[665],{"title":666,"url":667,"alt":668,"width":669,"height":670},"Blockchain forensics","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002FHero-bb-blockchain-forensics.png","Colorful nodes connecting",4000,2250,[],[673],{"title":674,"slug":675},"Crypto Crime","crypto-crime",[],[],[],{"title":680,"description":681,"advanced":682,"keywords":684,"social":685},"What is blockchain forensics? | Elliptic","Blockchain forensics is the practice of tracing funds across public blockchains and documenting the result in a form that investigators, regulators and courts can rely on.",{"canonical":409,"robots":683},[],[],{"facebook":686,"twitter":687},{"description":681,"title":680},{"description":681,"title":680},[689],{"articleContentAreaBlocks":690},[691,697,709],{"__typename":692,"textBlock":693},"textBlock_Entry",{"html":694,"rawHtml":694,"markdown":695,"plainText":696},"\u003Cp>Blockchain forensics is the practice of tracing funds across public blockchains, attributing wallet addresses to real-world entities and packaging the result as evidence for enforcement action or compliance decisions.\u003C\u002Fp>\u003Cp>Law enforcement agencies and government analysts use blockchain forensics to investigate illicit activity on blockchains, which can include \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fdrift-protocol-exploited-for-286-million-in-suspected-dprk-linked-attack\u002F\">state-sponsored theft\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Firan-has-acquired-us-dollar-stablecoins-worth-at-least-half-a-billion-dollars\u002F\">sanctions evasion\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fuk-sanctions-xinbi-marketplace-and-entities-connected-to-8-park-in-latest-crackdown-on-illicit-cryptoassets\u002F\">illicit marketplaces\u003C\u002Fa> and more. Compliance teams use it to resolve escalations and \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fhigh-quality-crypto-sar\u002F\">file suspicious activity reports\u003C\u002Fa> (SARs).\u003C\u002Fp>\u003Cp>Blockchain forensics is distinct from cryptoasset screening. Screening is the automated check that runs on addresses and transactions as they arrive, flagging anything carrying known risk. Forensics is analyst-led. It takes a single case and reconstructs what happened, where the funds came from, where they went and what that means for a decision.\u003C\u002Fp>\u003Ch2>How does blockchain forensics work?\u003C\u002Fh2>\u003Cp>Blockchain forensics splits across two parties: A \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Fblockchain-basics\u002Fwhat-is-blockchain-analytics\u002F\">blockchain analytics\u003C\u002Fa> provider builds and maintains the on-chain dataset, and the investigator or compliance analyst who works on top of that dataset. Knowing which steps belong to which party will help understand what blockchain forensics actually involves.\u003C\u002Fp>\u003Ch3>Step 1: Identify the starting point\u003C\u002Fh3>\u003Cp>Every investigation begins with an on-chain data point. For law enforcement, the starting point might be a payment address supplied by a ransomware victim or negotiator, wallet data recovered from a seized device, an address named in a victim report or a tip-off from a partner agency. \u003C\u002Fp>\u003Cp>For compliance teams, the trigger is more often internal: an alert raised during routine screening that an analyst has escalated, meaning the case starts from a risk signal rather than a known crime.\u003C\u002Fp>\u003Cp>What happens next depends on what you’re trying to solve. You can trace funds backwards to establish where they came from, which is what a compliance team needs to assess a deposit. You can trace forwards to establish where funds went, which is what an investigation needs to locate assets for seizure or \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fblockchain-intelligence-is-the-highway\u002F\">identify a cash-out point\u003C\u002Fa>.\u003C\u002Fp>\u003Cp>Scoping matters here, because the transaction graph is effectively unbounded. An investigator has to decide at the outset what question the investigation wants to answer and how far from the starting point it needs to go for that.\u003C\u002Fp>\u003Ch3>Step 2: Work from attributed data\u003C\u002Fh3>\u003Cp>Blockchain forensics depends on knowing which addresses belong to whom. That knowledge is not inherently on the blockchain. It has to be built, and that’s what blockchain analytics providers like Elliptic do continuously. They group addresses that share an owner, a process called address clustering, and attach labels identifying those owners, a process called attribution.\u003C\u002Fp>\u003Cp>Some of that clustering and attribution comes from investigators at the analytics provider confirming addresses directly, by transacting with a service or documenting the addresses it publishes. Some comes from scripts \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fhow-elliptic-scales-intelligence\u002F\">recognizing known patterns\u003C\u002Fa> in how wallets behave. \u003C\u002Fp>\u003Cp>The result is a version of the blockchain in which addresses and transactions are clustered and attributed. Investigators and analysts then use that to investigate cases, which is why the quality of a provider’s data and intelligence is so important. \u003C\u002Fp>\u003Ch3>Step 3: Trace the flow of funds\u003C\u002Fh3>\u003Cp>With addresses and transactions labeled and clustered, an investigator can follow funds and identify which attributed entities it moved through along the way. This is harder than it seems, because funds rarely move in clean separate parcels. A single transaction can draw money from several sources and pay it out to several destinations at once. \u003C\u002Fp>\u003Cp>Tracing therefore involves a methodological choice. For example, once stolen funds are pooled with unrelated funds, a rule has to determine which onward payments still carry the traced funds, and there is more than one reasonable rule. That rule is what an investigator is relying on at every hop where funds mix. It is why the same trace has to be reproducible: another analyst following the same path under the same rule should arrive at the same conclusion.\u003C\u002Fp>\u003Cp>Distance matters as well. Funds one transfer away from a sanctioned exchange mean something quite different from funds eight transfers away, and compliance teams set their own thresholds for how far out they treat exposure as material.\u003C\u002Fp>\u003Ch3>Step 4: Follow the funds across blockchains\u003C\u002Fh3>\u003Cp>Moving money between blockchains has become \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fchain-hopping-defining-money-laundering-method-of-2025\u002F\">a common laundering technique\u003C\u002Fa>. Services exist specifically to make it easy: stolen Bitcoin arrives at a swap service and leaves as a stablecoin on a different network. From there a bridge moves it somewhere else again. Sophisticated operations repeat this many times in quick succession, across half a dozen networks.\u003C\u002Fp>\u003Cp>They do so to make the trail significantly harder to follow. When funds enter a service on one blockchain and leave on another, there is often no transparent link between the two events. Each blockchain holds a complete record of its own half and knows nothing of the other. An investigator watching the first one sees money arrive at a service, but does not see how it exists.\u003C\u002Fp>\u003Cp>This is again where blockchain analytics steps in. Elliptic developed Holistic technology to automatically follow funds across blockchains. A trail that crosses several blockchains can be followed as a single continuous path versus a path that has to be reconstructed with every chain-hop.\u003C\u002Fp>","Blockchain forensics is the practice of tracing funds across public blockchains, attributing wallet addresses to real-world entities and packaging the result as evidence for enforcement action or compliance decisions.\n\nLaw enforcement agencies and government analysts use blockchain forensics to investigate illicit activity on blockchains, which can include [state-sponsored theft](https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fdrift-protocol-exploited-for-286-million-in-suspected-dprk-linked-attack\u002F), [sanctions evasion](https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Firan-has-acquired-us-dollar-stablecoins-worth-at-least-half-a-billion-dollars\u002F), [illicit marketplaces](https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fuk-sanctions-xinbi-marketplace-and-entities-connected-to-8-park-in-latest-crackdown-on-illicit-cryptoassets\u002F) and more. Compliance teams use it to resolve escalations and [file suspicious activity reports](https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fhigh-quality-crypto-sar\u002F) (SARs).\n\nBlockchain forensics is distinct from cryptoasset screening. Screening is the automated check that runs on addresses and transactions as they arrive, flagging anything carrying known risk. Forensics is analyst-led. It takes a single case and reconstructs what happened, where the funds came from, where they went and what that means for a decision.\n\n## How does blockchain forensics work?\n\nBlockchain forensics splits across two parties: A [blockchain analytics](https:\u002F\u002Fwww.elliptic.co\u002Fblockchain-basics\u002Fwhat-is-blockchain-analytics\u002F) provider builds and maintains the on-chain dataset, and the investigator or compliance analyst who works on top of that dataset. Knowing which steps belong to which party will help understand what blockchain forensics actually involves.\n\n### Step 1: Identify the starting point\n\nEvery investigation begins with an on-chain data point. For law enforcement, the starting point might be a payment address supplied by a ransomware victim or negotiator, wallet data recovered from a seized device, an address named in a victim report or a tip-off from a partner agency.\n\nFor compliance teams, the trigger is more often internal: an alert raised during routine screening that an analyst has escalated, meaning the case starts from a risk signal rather than a known crime.\n\nWhat happens next depends on what you’re trying to solve. You can trace funds backwards to establish where they came from, which is what a compliance team needs to assess a deposit. You can trace forwards to establish where funds went, which is what an investigation needs to locate assets for seizure or [identify a cash-out point](https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fblockchain-intelligence-is-the-highway\u002F).\n\nScoping matters here, because the transaction graph is effectively unbounded. An investigator has to decide at the outset what question the investigation wants to answer and how far from the starting point it needs to go for that.\n\n### Step 2: Work from attributed data\n\nBlockchain forensics depends on knowing which addresses belong to whom. That knowledge is not inherently on the blockchain. It has to be built, and that’s what blockchain analytics providers like Elliptic do continuously. They group addresses that share an owner, a process called address clustering, and attach labels identifying those owners, a process called attribution.\n\nSome of that clustering and attribution comes from investigators at the analytics provider confirming addresses directly, by transacting with a service or documenting the addresses it publishes. Some comes from scripts [recognizing known patterns](https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fhow-elliptic-scales-intelligence\u002F) in how wallets behave.\n\nThe result is a version of the blockchain in which addresses and transactions are clustered and attributed. Investigators and analysts then use that to investigate cases, which is why the quality of a provider’s data and intelligence is so important.\n\n### Step 3: Trace the flow of funds\n\nWith addresses and transactions labeled and clustered, an investigator can follow funds and identify which attributed entities it moved through along the way. This is harder than it seems, because funds rarely move in clean separate parcels. A single transaction can draw money from several sources and pay it out to several destinations at once.\n\nTracing therefore involves a methodological choice. For example, once stolen funds are pooled with unrelated funds, a rule has to determine which onward payments still carry the traced funds, and there is more than one reasonable rule. That rule is what an investigator is relying on at every hop where funds mix. It is why the same trace has to be reproducible: another analyst following the same path under the same rule should arrive at the same conclusion.\n\nDistance matters as well. Funds one transfer away from a sanctioned exchange mean something quite different from funds eight transfers away, and compliance teams set their own thresholds for how far out they treat exposure as material.\n\n### Step 4: Follow the funds across blockchains\n\nMoving money between blockchains has become [a common laundering technique](https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fchain-hopping-defining-money-laundering-method-of-2025\u002F). Services exist specifically to make it easy: stolen Bitcoin arrives at a swap service and leaves as a stablecoin on a different network. From there a bridge moves it somewhere else again. Sophisticated operations repeat this many times in quick succession, across half a dozen networks.\n\nThey do so to make the trail significantly harder to follow. When funds enter a service on one blockchain and leave on another, there is often no transparent link between the two events. Each blockchain holds a complete record of its own half and knows nothing of the other. An investigator watching the first one sees money arrive at a service, but does not see how it exists.\n\nThis is again where blockchain analytics steps in. Elliptic developed Holistic technology to automatically follow funds across blockchains. A trail that crosses several blockchains can be followed as a single continuous path versus a path that has to be reconstructed with every chain-hop.","Blockchain forensics is the practice of tracing funds across public blockchains, attributing wallet addresses to real-world entities and packaging the result as evidence for enforcement action or compliance decisions.\n\nLaw enforcement agencies and government analysts use blockchain forensics to investigate illicit activity on blockchains, which can include state-sponsored theft, sanctions evasion, illicit marketplaces and more. Compliance teams use it to resolve escalations and file suspicious activity reports (SARs).\n\nBlockchain forensics is distinct from cryptoasset screening. Screening is the automated check that runs on addresses and transactions as they arrive, flagging anything carrying known risk. Forensics is analyst-led. It takes a single case and reconstructs what happened, where the funds came from, where they went and what that means for a decision.\n\nHow does blockchain forensics work?\n\nBlockchain forensics splits across two parties: A blockchain analytics provider builds and maintains the on-chain dataset, and the investigator or compliance analyst who works on top of that dataset. Knowing which steps belong to which party will help understand what blockchain forensics actually involves.\n\nStep 1: Identify the starting point\n\nEvery investigation begins with an on-chain data point. For law enforcement, the starting point might be a payment address supplied by a ransomware victim or negotiator, wallet data recovered from a seized device, an address named in a victim report or a tip-off from a partner agency.\n\nFor compliance teams, the trigger is more often internal: an alert raised during routine screening that an analyst has escalated, meaning the case starts from a risk signal rather than a known crime.\n\nWhat happens next depends on what you’re trying to solve. You can trace funds backwards to establish where they came from, which is what a compliance team needs to assess a deposit. You can trace forwards to establish where funds went, which is what an investigation needs to locate assets for seizure or identify a cash-out point.\n\nScoping matters here, because the transaction graph is effectively unbounded. An investigator has to decide at the outset what question the investigation wants to answer and how far from the starting point it needs to go for that.\n\nStep 2: Work from attributed data\n\nBlockchain forensics depends on knowing which addresses belong to whom. That knowledge is not inherently on the blockchain. It has to be built, and that’s what blockchain analytics providers like Elliptic do continuously. They group addresses that share an owner, a process called address clustering, and attach labels identifying those owners, a process called attribution.\n\nSome of that clustering and attribution comes from investigators at the analytics provider confirming addresses directly, by transacting with a service or documenting the addresses it publishes. Some comes from scripts recognizing known patterns in how wallets behave.\n\nThe result is a version of the blockchain in which addresses and transactions are clustered and attributed. Investigators and analysts then use that to investigate cases, which is why the quality of a provider’s data and intelligence is so important.\n\nStep 3: Trace the flow of funds\n\nWith addresses and transactions labeled and clustered, an investigator can follow funds and identify which attributed entities it moved through along the way. This is harder than it seems, because funds rarely move in clean separate parcels. A single transaction can draw money from several sources and pay it out to several destinations at once.\n\nTracing therefore involves a methodological choice. For example, once stolen funds are pooled with unrelated funds, a rule has to determine which onward payments still carry the traced funds, and there is more than one reasonable rule. That rule is what an investigator is relying on at every hop where funds mix. It is why the same trace has to be reproducible: another analyst following the same path under the same rule should arrive at the same conclusion.\n\nDistance matters as well. Funds one transfer away from a sanctioned exchange mean something quite different from funds eight transfers away, and compliance teams set their own thresholds for how far out they treat exposure as material.\n\nStep 4: Follow the funds across blockchains\n\nMoving money between blockchains has become a common laundering technique. Services exist specifically to make it easy: stolen Bitcoin arrives at a swap service and leaves as a stablecoin on a different network. From there a bridge moves it somewhere else again. Sophisticated operations repeat this many times in quick succession, across half a dozen networks.\n\nThey do so to make the trail significantly harder to follow. When funds enter a service on one blockchain and leave on another, there is often no transparent link between the two events. Each blockchain holds a complete record of its own half and knows nothing of the other. An investigator watching the first one sees money arrive at a service, but does not see how it exists.\n\nThis is again where blockchain analytics steps in. Elliptic developed Holistic technology to automatically follow funds across blockchains. A trail that crosses several blockchains can be followed as a single continuous path versus a path that has to be reconstructed with every chain-hop.",{"__typename":698,"asset":699},"assetBlock_Entry",[700],{"__typename":209,"image":701,"mobileImage":708},[702],{"title":703,"url":704,"alt":705,"width":706,"height":707},"Shelbit Investigator","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002FShelbit-Investigator.png","The multi-stage route taken by a portion of the Central Bank of Iran funds.",1920,912,[],{"__typename":692,"textBlock":710},{"html":711,"rawHtml":711,"markdown":712,"plainText":713},"\u003Cp>\u003Ci>The \u003C\u002Fi>\u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fofac-sanctions-shelbit-and-other-entities-associated-with-iranian-regime\u002F\">\u003Ci>multi-stage route\u003C\u002Fi>\u003C\u002Fa>\u003Ci> taken by a portion of the Central Bank of Iran funds, across several blockchains.\u003C\u002Fi>\u003C\u002Fp>\u003Ch3>Step 5: Get the information held off-chain\u003C\u002Fh3>\u003Cp>Attribution identifies whoever controls an address. But sometimes that’s a centralized exchange holding funds for millions of customers, not the individual you’re after. Attributions can also be collective rather than individual, naming a ransomware operation or a darknet market when the investigation wants a particular affiliate or the person running it. And some addresses are not attributed at all, as is often the case with \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fhosted-vs-unhosted-wallets\u002F\">unhosted wallets\u003C\u002Fa>.\u003C\u002Fp>\u003Cp>To continue from those points, an investigator needs off-chain information. An exchange operating under anti-money laundering rules has to identify its customers, so it holds names, documents and often bank details that appear nowhere on the blockchain. \u003C\u002Fp>\u003Cp>The investigator looks for the point where funds entered one of those exchanges, because illicit actors may use them to turn cryptoassets into fiat, in which case the exchange could have information about their identity. Even a self-custody wallet may touch a regulated business eventually, and that transaction becomes the link investigators look for.\u003C\u002Fp>\u003Cp>Access to those records then requires a legal process. This can be a court order or subpoena when it falls under the investigating agency's own jurisdiction, a request through a mutual legal assistance treaty (MLAT) when it does not. Many exchanges also cooperate voluntarily, within what their data protection obligations permit. \u003C\u002Fp>\u003Cp>But the business may sit somewhere that will not assist or may not collect identity information in the first place (which is why launderers prefer such services). Even in those cases, the investigation still has a documented trail ending at an attributed destination, which may be sufficient to support a seizure, a sanctions designation or a disruption operation with no name attached.\u003C\u002Fp>\u003Ch3>Step 6: Package the evidence\u003C\u002Fh3>\u003Cp>The final step turns a completed trace into something a court, a regulator or an auditor will accept. Reproducibility is the test that governs it. Another analyst given the same data should be able to follow the same path and reach the same conclusion, which means the reasoning has to be recorded as the work: which addresses were followed, why each attribution was relied on and where the trail was judged to end. \u003C\u002Fp>\u003Cp>For law enforcement, the output is built for a case file: visualizations tracking funds from a starting address to a cash-out point, attributions documented with the evidence behind them and transaction trails complete enough to serve as exhibits. The sophistication of the analysis matters, but so does the ability for a non-specialist to follow it. \u003C\u002Fp>\u003Cp>For compliance teams, the output is an audit trail and potentially a SAR filing. A SAR has to show why the analyst reached a particular view. The person who signs the filing is usually not the person who ran the trace, so the record also has to make sense to somebody reading it cold.\u003C\u002Fp>\u003Cp>Preservation matters as well. Services shut down and evidence available during an investigation may be gone by the time a case reaches court years later. Screenshots, links to sources and timestamps captured at the time are what survive. It is also why the note made at the start of the investigation matters: it establishes what was known when a decision was taken, rather than what the dataset shows today.\u003C\u002Fp>\u003Ch2>What makes a blockchain forensic solution effective?\u003C\u002Fh2>\u003Cp>Every step above depends on the dataset an investigator or analyst relies on, which is why choosing a blockchain analytics vendor is both important and hard. You need to understand how they source and validate their threat intelligence, how quickly they add sanctions designations, what the platform automatically produces that’s valuable for an auditor, and more.\u003C\u002Fp>\u003Cp>This is why we created our guide on \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fquestions-to-ask-your-blockchain-analytics-provider\u002F\">20 questions to ask a blockchain analytics provider\u003C\u002Fa>, with strong answers and red flags for each question. Whether you are running a first procurement or reviewing a provider you already use, it is the list we would want to be held to.\u003C\u002Fp>","*The* [*multi-stage route*](https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fofac-sanctions-shelbit-and-other-entities-associated-with-iranian-regime\u002F) *taken by a portion of the Central Bank of Iran funds, across several blockchains.*\n\n### Step 5: Get the information held off-chain\n\nAttribution identifies whoever controls an address. But sometimes that’s a centralized exchange holding funds for millions of customers, not the individual you’re after. Attributions can also be collective rather than individual, naming a ransomware operation or a darknet market when the investigation wants a particular affiliate or the person running it. And some addresses are not attributed at all, as is often the case with [unhosted wallets](https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fhosted-vs-unhosted-wallets\u002F).\n\nTo continue from those points, an investigator needs off-chain information. An exchange operating under anti-money laundering rules has to identify its customers, so it holds names, documents and often bank details that appear nowhere on the blockchain.\n\nThe investigator looks for the point where funds entered one of those exchanges, because illicit actors may use them to turn cryptoassets into fiat, in which case the exchange could have information about their identity. Even a self-custody wallet may touch a regulated business eventually, and that transaction becomes the link investigators look for.\n\nAccess to those records then requires a legal process. This can be a court order or subpoena when it falls under the investigating agency's own jurisdiction, a request through a mutual legal assistance treaty (MLAT) when it does not. Many exchanges also cooperate voluntarily, within what their data protection obligations permit.\n\nBut the business may sit somewhere that will not assist or may not collect identity information in the first place (which is why launderers prefer such services). Even in those cases, the investigation still has a documented trail ending at an attributed destination, which may be sufficient to support a seizure, a sanctions designation or a disruption operation with no name attached.\n\n### Step 6: Package the evidence\n\nThe final step turns a completed trace into something a court, a regulator or an auditor will accept. Reproducibility is the test that governs it. Another analyst given the same data should be able to follow the same path and reach the same conclusion, which means the reasoning has to be recorded as the work: which addresses were followed, why each attribution was relied on and where the trail was judged to end.\n\nFor law enforcement, the output is built for a case file: visualizations tracking funds from a starting address to a cash-out point, attributions documented with the evidence behind them and transaction trails complete enough to serve as exhibits. The sophistication of the analysis matters, but so does the ability for a non-specialist to follow it.\n\nFor compliance teams, the output is an audit trail and potentially a SAR filing. A SAR has to show why the analyst reached a particular view. The person who signs the filing is usually not the person who ran the trace, so the record also has to make sense to somebody reading it cold.\n\nPreservation matters as well. Services shut down and evidence available during an investigation may be gone by the time a case reaches court years later. Screenshots, links to sources and timestamps captured at the time are what survive. It is also why the note made at the start of the investigation matters: it establishes what was known when a decision was taken, rather than what the dataset shows today.\n\n## What makes a blockchain forensic solution effective?\n\nEvery step above depends on the dataset an investigator or analyst relies on, which is why choosing a blockchain analytics vendor is both important and hard. You need to understand how they source and validate their threat intelligence, how quickly they add sanctions designations, what the platform automatically produces that’s valuable for an auditor, and more.\n\nThis is why we created our guide on [20 questions to ask a blockchain analytics provider](https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002Fquestions-to-ask-your-blockchain-analytics-provider\u002F), with strong answers and red flags for each question. Whether you are running a first procurement or reviewing a provider you already use, it is the list we would want to be held to.","The *multi-stage route* taken by a portion of the Central Bank of Iran funds, across several blockchains.\n\nStep 5: Get the information held off-chain\n\nAttribution identifies whoever controls an address. But sometimes that’s a centralized exchange holding funds for millions of customers, not the individual you’re after. Attributions can also be collective rather than individual, naming a ransomware operation or a darknet market when the investigation wants a particular affiliate or the person running it. And some addresses are not attributed at all, as is often the case with unhosted wallets.\n\nTo continue from those points, an investigator needs off-chain information. An exchange operating under anti-money laundering rules has to identify its customers, so it holds names, documents and often bank details that appear nowhere on the blockchain.\n\nThe investigator looks for the point where funds entered one of those exchanges, because illicit actors may use them to turn cryptoassets into fiat, in which case the exchange could have information about their identity. Even a self-custody wallet may touch a regulated business eventually, and that transaction becomes the link investigators look for.\n\nAccess to those records then requires a legal process. This can be a court order or subpoena when it falls under the investigating agency's own jurisdiction, a request through a mutual legal assistance treaty (MLAT) when it does not. Many exchanges also cooperate voluntarily, within what their data protection obligations permit.\n\nBut the business may sit somewhere that will not assist or may not collect identity information in the first place (which is why launderers prefer such services). Even in those cases, the investigation still has a documented trail ending at an attributed destination, which may be sufficient to support a seizure, a sanctions designation or a disruption operation with no name attached.\n\nStep 6: Package the evidence\n\nThe final step turns a completed trace into something a court, a regulator or an auditor will accept. Reproducibility is the test that governs it. Another analyst given the same data should be able to follow the same path and reach the same conclusion, which means the reasoning has to be recorded as the work: which addresses were followed, why each attribution was relied on and where the trail was judged to end.\n\nFor law enforcement, the output is built for a case file: visualizations tracking funds from a starting address to a cash-out point, attributions documented with the evidence behind them and transaction trails complete enough to serve as exhibits. The sophistication of the analysis matters, but so does the ability for a non-specialist to follow it.\n\nFor compliance teams, the output is an audit trail and potentially a SAR filing. A SAR has to show why the analyst reached a particular view. The person who signs the filing is usually not the person who ran the trace, so the record also has to make sense to somebody reading it cold.\n\nPreservation matters as well. Services shut down and evidence available during an investigation may be gone by the time a case reaches court years later. Screenshots, links to sources and timestamps captured at the time are what survive. It is also why the note made at the start of the investigation matters: it establishes what was known when a decision was taken, rather than what the dataset shows today.\n\nWhat makes a blockchain forensic solution effective?\n\nEvery step above depends on the dataset an investigator or analyst relies on, which is why choosing a blockchain analytics vendor is both important and hard. You need to understand how they source and validate their threat intelligence, how quickly they add sanctions designations, what the platform automatically produces that’s valuable for an auditor, and more.\n\nThis is why we created our guide on 20 questions to ask a blockchain analytics provider, with strong answers and red flags for each question. Whether you are running a first procurement or reviewing a provider you already use, it is the list we would want to be held to.",[],[716,764,804],{"__typename":650,"siteName":651,"uri":717,"id":718,"title":719,"url":720,"postDate":721,"dateUpdated":722,"slug":723,"sectionHandle":659,"siteHandle":724,"ancestors":725,"authorSelect":726,"asset":740,"categoryTopics":750,"categoryNewsTypes":752,"categoryIndustries":753,"categoryRegions":754,"seo":755},"blockchain-basics\u002Fwhat-is-address-poisoning","146272","What is address poisoning?","https:\u002F\u002Fwww.elliptic.co\u002Fblockchain-basics\u002Fwhat-is-address-poisoning\u002F","2026-08-11T10:56:05+01:00","2026-08-11T10:54:56+01:00","what-is-address-poisoning","default",[],[727],{"title":651,"uri":728,"plainText":11,"textBlock":729,"image":731,"externalLink":11,"plainText2":737,"entry":738},"authors\u002Felliptic",{"rawHtml":730},"\u003Cp>Here we discuss cryptoasset compliance, blockchain analysis, financial crime, sanctions regulation, and how Elliptic supports our crypto business and financial services customers with solutions.\u003C\u002Fp>",[732],{"title":733,"url":734,"alt":735,"width":736,"height":736},"Apple touch icon","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Fapple-touch-icon.png","Stylized letter \"E\" in a 3D effect, set against a gradient green background.",180,"Stay ahead with exclusive insight from our experts.",[739],{"uri":648},[741],{"__typename":209,"image":742,"mobileImage":749},[743],{"title":744,"url":745,"alt":746,"width":747,"height":748},"What is address poisoning","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002F2026-July-What-is-address-poisoning.png","A wallet moving funds to another wallet",1501,793,[],[751],{"title":674,"slug":675},[],[],[],{"title":756,"description":757,"advanced":758,"keywords":760,"social":761},"What is address poisoning? | Elliptic","Address poisoning tricks users into sending funds to a lookalike wallet address. Learn how the attack works, its variants and how you can detect it.",{"canonical":409,"robots":759},[],[],{"facebook":762,"twitter":763},{"description":757,"title":756},{"description":757,"title":756},{"__typename":650,"siteName":651,"uri":765,"id":766,"title":767,"url":768,"postDate":769,"dateUpdated":770,"slug":771,"sectionHandle":659,"siteHandle":724,"ancestors":772,"authorSelect":773,"asset":780,"categoryTopics":790,"categoryNewsTypes":792,"categoryIndustries":793,"categoryRegions":794,"seo":795},"blockchain-basics\u002Fwhat-is-a-crypto-exploit","11554","What is a crypto exploit?","https:\u002F\u002Fwww.elliptic.co\u002Fblockchain-basics\u002Fwhat-is-a-crypto-exploit\u002F","2026-05-20T11:25:10+01:00","2026-07-14T17:18:31+01:00","what-is-a-crypto-exploit",[],[774],{"title":651,"uri":728,"plainText":11,"textBlock":775,"image":776,"externalLink":11,"plainText2":737,"entry":778},{"rawHtml":730},[777],{"title":733,"url":734,"alt":735,"width":736,"height":736},[779],{"uri":648},[781],{"__typename":209,"image":782,"mobileImage":789},[783],{"title":784,"url":785,"alt":786,"width":787,"height":788},"16 Bybit exploit 12 months on 720x380","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Farticle-images\u002F16_Bybit-exploit-12-months-on_720x380_2026-07-14-161829_rurg.png","Abstract digital illustration featuring a bug icon at the center with binary code, lightning bolts, and warning symbols surrounding it.",3000,1584,[],[791],{"title":674,"slug":675},[],[],[],{"title":796,"description":797,"advanced":798,"keywords":800,"social":801},"What is a crypto exploit? | Elliptic","A crypto exploit targets flaws in code, infrastructure or access controls to steal cryptoassets. Learn how the main types work and how to stop them.",{"canonical":11,"robots":799},[],[],{"facebook":802,"twitter":803},{"description":797,"title":796},{"description":797,"title":796},{"__typename":650,"siteName":651,"uri":805,"id":806,"title":807,"url":808,"postDate":809,"dateUpdated":810,"slug":811,"sectionHandle":659,"siteHandle":724,"ancestors":812,"authorSelect":813,"asset":820,"categoryTopics":828,"categoryNewsTypes":830,"categoryIndustries":831,"categoryRegions":832,"seo":833},"blockchain-basics\u002Fwhat-is-crypto-wallet-screening","15963","What is crypto wallet screening?","https:\u002F\u002Fwww.elliptic.co\u002Fblockchain-basics\u002Fwhat-is-crypto-wallet-screening\u002F","2026-01-14T15:14:49+00:00","2026-07-23T11:46:04+01:00","what-is-crypto-wallet-screening",[],[814],{"title":651,"uri":728,"plainText":11,"textBlock":815,"image":816,"externalLink":11,"plainText2":737,"entry":818},{"rawHtml":730},[817],{"title":733,"url":734,"alt":735,"width":736,"height":736},[819],{"uri":648},[821],{"__typename":209,"image":822,"mobileImage":827},[823],{"title":824,"url":825,"alt":826,"width":787,"height":788},"What is crypto wallet screening blog 720x380","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Farticle-images\u002FWhat-is-crypto-wallet-screening_blog_720x380_2026-07-14-162732_fnoh.png","Digital wallet graphic with binary code and cryptocurrency symbols, illustrating secure transactions and financial technology.",[],[829],{"title":674,"slug":675},[],[],[],{"title":834,"description":835,"advanced":836,"keywords":838,"social":839},"What is crypto wallet screening? | Elliptic","How do you know if a wallet is linked to sanctions, ransomware or darknet markets? Crypto wallet screening reveals risks hidden in blockchain transaction history.",{"canonical":11,"robots":837},[],[],{"facebook":840,"twitter":841},{"description":835,"title":834},{"description":835,"title":834},[843],{"title":11,"ariaLabel":11,"target":11,"linkUrl":377,"text":844,"__typename":14},"Learn the fundamentals in our blockchain basics series",[846,858,876,903,921,949,967],{"id":653,"uri":652,"title":654,"postDate":656,"__typename":650,"asset":847,"categoryTopics":852,"categoryNewsTypes":854,"categoryIndustries":855,"categoryRegions":856,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":857,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},[848],{"__typename":209,"image":849,"mobileImage":851},[850],{"title":666,"url":667,"alt":668,"width":669,"height":670},[],[853],{"title":674,"slug":675},[],[],[],[],{"id":718,"uri":717,"title":719,"postDate":721,"__typename":650,"asset":859,"categoryTopics":864,"categoryNewsTypes":866,"categoryIndustries":867,"categoryRegions":868,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":869,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},[860],{"__typename":209,"image":861,"mobileImage":863},[862],{"title":744,"url":745,"alt":746,"width":747,"height":748},[],[865],{"title":674,"slug":675},[],[],[],[870],{"title":651,"uri":728,"plainText":11,"textBlock":871,"image":872,"externalLink":11,"plainText2":737,"entry":874},{"rawHtml":730},[873],{"title":733,"url":734,"alt":735,"width":736,"height":736},[875],{"uri":648},{"id":877,"uri":878,"title":879,"postDate":880,"__typename":650,"asset":881,"categoryTopics":891,"categoryNewsTypes":893,"categoryIndustries":894,"categoryRegions":895,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":896,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},"108381","blockchain-basics\u002Fwhat-is-a-crypto-money-mule","What is a crypto money mule","2026-07-10T16:26:00+01:00",[882],{"__typename":209,"image":883,"mobileImage":890},[884],{"title":885,"url":886,"alt":887,"width":888,"height":889},"What is a crypto mule 720x380","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002FWhat-is-a-crypto-mule_720x380.webp","Digital representation of data with binary code and cryptocurrency icons illustrating a flow from traditional currency to various cryptocurrencies.",1000,528,[],[892],{"title":674,"slug":675},[],[],[],[897],{"title":651,"uri":728,"plainText":11,"textBlock":898,"image":899,"externalLink":11,"plainText2":737,"entry":901},{"rawHtml":730},[900],{"title":733,"url":734,"alt":735,"width":736,"height":736},[902],{"uri":648},{"id":766,"uri":765,"title":767,"postDate":769,"__typename":650,"asset":904,"categoryTopics":909,"categoryNewsTypes":911,"categoryIndustries":912,"categoryRegions":913,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":914,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},[905],{"__typename":209,"image":906,"mobileImage":908},[907],{"title":784,"url":785,"alt":786,"width":787,"height":788},[],[910],{"title":674,"slug":675},[],[],[],[915],{"title":651,"uri":728,"plainText":11,"textBlock":916,"image":917,"externalLink":11,"plainText2":737,"entry":919},{"rawHtml":730},[918],{"title":733,"url":734,"alt":735,"width":736,"height":736},[920],{"uri":648},{"id":922,"uri":923,"title":924,"postDate":925,"__typename":650,"asset":926,"categoryTopics":934,"categoryNewsTypes":939,"categoryIndustries":940,"categoryRegions":941,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":942,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},"15464","blockchain-basics\u002Fwhat-are-ofac-crypto-sanctions","What are OFAC crypto sanctions?","2026-01-22T09:04:03+00:00",[927],{"__typename":209,"image":928,"mobileImage":933},[929],{"title":930,"url":931,"alt":932,"width":787,"height":788},"What are OFAC crypto sanctions 720x380 01","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Farticle-images\u002FWhat-are-OFAC-crypto-sanctions__720x380_01_2026-07-14-162634_vitf.png","A digital globe surrounded by icons, representing finance, regulation, security, and alerts, with binary code overlay.",[],[935,938],{"title":936,"slug":937},"Regulation","regulation",{"title":674,"slug":675},[],[],[],[943],{"title":651,"uri":728,"plainText":11,"textBlock":944,"image":945,"externalLink":11,"plainText2":737,"entry":947},{"rawHtml":730},[946],{"title":733,"url":734,"alt":735,"width":736,"height":736},[948],{"uri":648},{"id":806,"uri":805,"title":807,"postDate":809,"__typename":650,"asset":950,"categoryTopics":955,"categoryNewsTypes":957,"categoryIndustries":958,"categoryRegions":959,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":960,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},[951],{"__typename":209,"image":952,"mobileImage":954},[953],{"title":824,"url":825,"alt":826,"width":787,"height":788},[],[956],{"title":674,"slug":675},[],[],[],[961],{"title":651,"uri":728,"plainText":11,"textBlock":962,"image":963,"externalLink":11,"plainText2":737,"entry":965},{"rawHtml":730},[964],{"title":733,"url":734,"alt":735,"width":736,"height":736},[966],{"uri":648},{"id":968,"uri":969,"title":970,"postDate":971,"__typename":650,"asset":972,"categoryTopics":982,"categoryNewsTypes":984,"categoryIndustries":985,"categoryRegions":986,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":987,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},"20470","blockchain-basics\u002Fwhat-is-an-exploit","What is an exploit?","2024-08-23T12:43:15+01:00",[973],{"__typename":209,"image":974,"mobileImage":981},[975],{"title":976,"url":977,"alt":978,"width":979,"height":980},"LI Blog Typologies 24 Exploit 02 1","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Farticle-images\u002FLI_Blog_Typologies_24_Exploit-02-1_2026-07-14-163716_aybo.png","A stylized illustration of a figure reaching out from a smartphone, with a backdrop of light blue and the word \"ELLIPTIC\" in the corner.",2500,1307,[],[983],{"title":674,"slug":675},[],[],[],[988],{"title":651,"uri":728,"plainText":11,"textBlock":989,"image":990,"externalLink":11,"plainText2":737,"entry":992},{"rawHtml":730},[991],{"title":733,"url":734,"alt":735,"width":736,"height":736},[993],{"uri":648},{"id":653,"categoryTopics":995,"sectionHandle":659,"backLink":997,"header":1000,"asset":1008,"contentArea":1012,"articleCtaCard":1022,"shareBlock":1033,"articleSelect":1035},[996],{"title":674,"slug":675},{"link":998,"text":378},{"url":999},"\u002Fblockchain-basics\u002F",{"articleTags":1001,"heading":654},{"tagsBlock":1002},{"tags":1003},[1004],{"text":674,"style":1005,"link":1006},"green",{"url":1007},"\u002Fblockchain-basics\u002F?category=crypto-crime",{"type":1009,"picture":1010},"image",{"source":1011},{"src":667,"alt":668,"width":669,"height":670},{"blocks":1013},[1014,1016,1021],{"type":1015,"textBlock":694},"textBlock",{"type":1017,"asset":1018},"assetBlock",{"type":1009,"picture":1019},{"source":1020},{"src":704,"alt":705,"width":706,"height":707},{"type":1015,"textBlock":711},{"tag":1023,"heading":1024,"buttonBlock":1026},{"text":409},{"type":1025,"style":1025,"text":844},"h3",[1027],{"type":1028,"text":1029,"link":1030},"tertiary","Explore",{"url":377,"type":1031,"target":1032},"internal","_self",{"heading":1034},"Share",[1036,1055,1073,1091],{"__typename":650,"siteName":651,"uri":717,"id":718,"title":719,"url":720,"postDate":721,"dateUpdated":722,"slug":723,"sectionHandle":659,"siteHandle":724,"authorSelect":1037,"asset":1044,"categoryTopics":1048,"seo":1050},[1038],{"title":651,"uri":728,"textBlock":1039,"image":1040,"plainText2":737,"entry":1042},{"rawHtml":730},[1041],{"title":733,"url":734,"alt":735,"width":736,"height":736},[1043],{"uri":648},[1045],{"__typename":209,"image":1046},[1047],{"title":744,"url":745,"alt":746,"width":747,"height":748},[1049],{"title":674,"slug":675},{"title":756,"description":757,"advanced":1051,"social":1052},{"canonical":409},{"facebook":1053,"twitter":1054},{"description":757,"title":756},{"description":757,"title":756},{"__typename":650,"siteName":651,"uri":765,"id":766,"title":767,"url":768,"postDate":769,"dateUpdated":770,"slug":771,"sectionHandle":659,"siteHandle":724,"authorSelect":1056,"asset":1063,"categoryTopics":1067,"seo":1069},[1057],{"title":651,"uri":728,"textBlock":1058,"image":1059,"plainText2":737,"entry":1061},{"rawHtml":730},[1060],{"title":733,"url":734,"alt":735,"width":736,"height":736},[1062],{"uri":648},[1064],{"__typename":209,"image":1065},[1066],{"title":784,"url":785,"alt":786,"width":787,"height":788},[1068],{"title":674,"slug":675},{"title":796,"description":797,"social":1070},{"facebook":1071,"twitter":1072},{"description":797,"title":796},{"description":797,"title":796},{"__typename":650,"siteName":651,"uri":805,"id":806,"title":807,"url":808,"postDate":809,"dateUpdated":810,"slug":811,"sectionHandle":659,"siteHandle":724,"authorSelect":1074,"asset":1081,"categoryTopics":1085,"seo":1087},[1075],{"title":651,"uri":728,"textBlock":1076,"image":1077,"plainText2":737,"entry":1079},{"rawHtml":730},[1078],{"title":733,"url":734,"alt":735,"width":736,"height":736},[1080],{"uri":648},[1082],{"__typename":209,"image":1083},[1084],{"title":824,"url":825,"alt":826,"width":787,"height":788},[1086],{"title":674,"slug":675},{"title":834,"description":835,"social":1088},{"facebook":1089,"twitter":1090},{"description":835,"title":834},{"description":835,"title":834},{"id":877,"uri":878,"title":879,"postDate":880,"__typename":650,"asset":1092,"categoryTopics":1096,"authorSelect":1098},[1093],{"__typename":209,"image":1094},[1095],{"title":885,"url":886,"alt":887,"width":888,"height":889},[1097],{"title":674,"slug":675},[1099],{"title":651,"uri":728,"textBlock":1100,"image":1101,"plainText2":737,"entry":1103},{"rawHtml":730},[1102],{"title":733,"url":734,"alt":735,"width":736,"height":736},[1104],{"uri":648},[],1788434082566]