Our analysts have investigated every major class of DeFi exploit. We know how they work, how funds move after the fact, and which recovery paths are viable for each type.
Uncollateralised loans used to manipulate oracle prices within a single transaction block. We reconstruct the full attack sequence and identify the attacker's profit-extraction wallet.
Smart contract vulnerabilities that allow recursive calls before state updates. We trace the recursive call tree, quantify losses per affected address, and identify fund destinations.
Attacks that distort on-chain price feeds to drain liquidity pools or lending protocols. We analyse the manipulation mechanism and trace profit flows.
Cross-chain bridge vulnerabilities are responsible for some of the largest DeFi losses. We specialise in tracing funds that cross multiple bridges and settle on different networks.
Malicious proposals that pass through a governance mechanism to drain a treasury or alter protocol parameters. We document the vote manipulation and identify controlling wallets.
Premeditated fund extraction by project insiders. We trace liquidity removal events, link deployer wallets to KYC'd exchange accounts, and produce reports for law enforcement.
We replay the attack transaction by transaction, reconstructing the attacker's methodology from raw calldata and event logs.
We calculate the exact funds extracted, broken down by asset, affected address, and transaction block.
We trace the deployer address backward to identify funding sources, prior activity, and any exchange deposits that can be linked to the attacker.
We follow extracted funds across chains, through DEX swaps, bridges, and into centralised exchanges where freezes can be requested.
We produce a technical report documenting the vulnerability, attack vector, and security recommendations — suitable for protocol post-mortems and insurance claims.
Our analysts include former engineers from Uniswap Labs, Aave, and leading security audit firms. This gives us first-principles understanding of the protocols we investigate — not just surface-level tracing.
We cover 35+ DeFi categories. If your protocol is not listed, contact us — our team will assess it and bring in specialist expertise as needed.