Guides

What to do after a theft, how tracing works, and how to check an address before you send. Each guide walks through a real case the site traced, and says what it cannot show.

• Address poisoning: how the look-alike address scam works, and how to check before you send (3 min)
  How scammers plant a look-alike address in your transaction history so you copy it by mistake, why the first and last characters match, and the two checks that stop it. Based on KT-20, where a victim sent $50,000 in USDT to a poisoned address on Ethereum.
• Is this crypto address safe? How to check an address before you send (3 min)
  What an address check can and cannot tell you, what "linked to stolen funds" means, how to read each result, and how wallets can run the same check through a free API. With live examples from the Binance hack and the KT-20 address poisoning case.
• Tracing stolen crypto across chains and bridges (4 min)
  How stolen funds hop between blockchains through bridges, how a trace matches a deposit on one chain to its landing on another, why the same address on two chains is two different wallets, and where the trail can break. Based on the Binance hack, traced across eight networks.
• Stolen crypto sent to an exchange: deposits, freezes and how to ask (4 min)
  What it means when a trace ends at an exchange deposit address, why a deposit is not a freeze, and how to write a freeze request the exchange can act on. Based on KT-7, the WAX bridge exploit, where $38,116 of the stolen funds were deposited to HitBTC.
• How to trace stolen crypto, hop by hop (4 min)
  How tracing works on a public blockchain: start from the drained address, follow each outgoing transfer, read swaps and splits, and know when a trail goes cold. Walked through on the x100global exploit, where about $4.75M was taken and most of it went into Tornado Cash.
• How to trace stolen USDT and TRX on TRON (3 min)
  Why so much stolen money passes through TRON, how USDT transfers work there, how to read them on Tronscan, and what to do while the USDT can still be frozen. Based on the TRON side of the Binance hack, cases KT-18 and KT-19.
• Can Tether freeze stolen USDT? How issuer freezes work, and how to read one (4 min)
  How Tether freezes USDT at the token level, how to read a freeze from the contract yourself, and what a freeze does and does not prove. Based on Tether's freeze of $312.7M USDT on TRON on October 29, 2026, at an address in the Binance hack.
• What to do in the first hour after your crypto is stolen (4 min)
  A checklist for the first hour after a wallet is drained: stop further loss, keep the evidence, tell the exchanges, and get the funds watched. Built on a real case, KT-10, where about $1.58M left one Ethereum wallet.