Recovery Doctrine: Chain-of-custody · Verifiable on-chain trail · Regulator-ready packets
12 cases under review
12409 wallet routes mapped this month
Free Case Evaluation →
Recovery Doctrine: chain-of-custody · verifiable on-chain trail · regulator-ready packets verification chain: Etherscan · SlowMist · CertiK
12claims under active investigation 12409wallet routes mapped this month Open a Free Case Evaluation →
+1 (872) 216-6337

// wallet risk classifier

Check a wallet before you send to it

A free, instant on-chain reputation check against known scam clusters, drainer signatures, mixer exits, and sanctioned addresses. Paste an EVM (0x…) or Bitcoin address and get a CRITICAL / SUSPICIOUS / CLEAN read in seconds.

  • Free — 5 lookups per IP per hour
  • Runs against live abuse feeds + our own cluster index
  • No wallet connection — just the address
Digital Asset Den case-review boardroom — where wallet evidence is examined

// run the check

Risk classifier

Drop in an address. We will return the risk tier and a one-line reason.

// Wallet Risk Check

Run an address through the forensic risk classifier

Enter an EVM (0x…) or Bitcoin address. This checks our local exploit-cluster index and known mixer pools. 5 free checks per hour per visitor.

// what we screen against

Seven things the classifier checks

🌀

Tornado Cash entry / exit

All known Tornado pool contracts across versions and forks — Ethereum, Arbitrum, Optimism, BSC.

🏴

Lazarus & nation-state clusters

Address sets attributed by Chainalysis, TRM Labs, and Elliptic across DPRK, Russia, Iran-linked wallets.

💸

FTX exploiter wallets

The November 2022 exfiltration set and three layers of downstream hops, plus identified mule wallets.

🌉

Multichain hack receivers

July 2023 cross-chain bridge drain attribution, including the secondary swap addresses.

💢

Drainer kit signatures

Inferno, Pink, Pussy, Venom, and Angel drainer signature contracts — the wallets behind one-click approval theft.

🚫

OFAC sanctioned addresses

The live US Treasury SDN list, plus EU and UK financial sanctions where they have on-chain attribution.

Fresh-funded mule profile

Wallets created in the last 24h with high outbound volume and no inbound history — the classic burner mule.

What "CLEAN" means

The address has no current attribution against any of the above. It is not a recommendation to send funds. Absence of bad data is not proof of safety — only proof we have nothing on it today.

Already lost funds?

The classifier is for funds you have not sent yet. If the loss has already happened, the next step is a forensic trace — we follow the route from your wallet to wherever the funds landed.

Speak with our recovery team+1 (872) 216-6337