CRYPTODAC
A clear process from enquiry to next steps
Understand the incident, define the work, investigate the evidence and develop a practical route forward.
1. Initial enquiry
Tell us briefly what happened, when it happened and how to contact you. If helpful, identify the network or platform involved. Keep sensitive documents and wallet secrets out of the initial form. The enquiry helps establish whether a more detailed discussion is appropriate.
2. Scope and terms
Before chargeable work begins, confirm the questions to be investigated, the relevant networks and records, deliverables, fees and any agreed schedule. A clear scope avoids treating every possible avenue as a promised service.
3. Investigation and evidence
Relevant transaction activity and supporting records are examined within the agreed scope. Findings should separate direct observations, analytical inferences and unanswered questions. An evidence index and chronology help keep the record understandable.
4. Recovery strategy
The findings inform the next steps. Depending on the circumstances, these may include exchange reporting, evidence preparation for independent counsel, or information for relevant authorities. Each route has its own requirements and decision makers.
5. Review and protection
Discuss remaining questions and any further work separately. Practical account and wallet guidance can help reduce additional exposure, especially where an incident is followed by further approaches from supposed recovery providers.
Start with a case assessment
