The case pipeline

How a case works

You always know what happens next. We settle the terms, fix the price, and keep you updated step by step.
$ sigbot case <incident> --flow

Submit incident + free pre-review

You tell us the wallet/address and the incident (a specific event where funds left your control). We check what the public ledger shows before you commit. No obligation, no payment yet.

Sign contract, pay 50% upfront

We settle a digital contract electronically (email-based, no KYC wall). The flat fee is fixed. 50% is due upfront to start, signed via the contract, defended by our read-only-access guarantee: we never ask for keys or seed phrases.

We trace the funds

Starting at the incident, we map every hop over the public ledger: deposit, swaps, mixers, bridges, privacy pools, peel chains — down to exchange hot-wallet entries. Your tier decides depth and chain coverage.

Delivery + final 50%

We deliver the case file (PDF + CSV) with a readable timeline, a flow graph and a prosecutor-friendly summary. We release the file at payment of the remaining 50%. Milestones: 48h first-delivery on DEEP INVESTIGATION.

Hand-off to authorities

The file is structured to support a legal process: a timeline a prosecutor can follow, on-chain evidence each step of the way, and no claims about the identity of wallet owners — that decision belongs to authorities.

Follow-up questions, free for 30 days

Questions about your case file — how to present it, what the "mixer entry" line means — are answered for free for 30 days after delivery.

The tiers, again

FLOW MAP (300 USDC) maps a single-chain flow. CASE FILE (1000 USDC) adds cross-chain tracing, a behavioral profile of receiving wallets and a narrative report. DEEP INVESTIGATION (1500 USD) handles high-volume cases with countermeasures mapping, dedicated analyst access and a 48-hour first-delivery milestone.

All tiers include a written hand-off section, plain-English flow diagrams and a CSV export. All tiers are read-only: we never ask for private keys or seed phrases.

What we never do

We trace movement, not people. We never claim to identify the real-world person behind a wallet, never claim recovery of funds, and never promise guaranteed results. We produce evidence of flow: readable, structured, verifiable from the public ledger. Identity and recovery are authority decisions.

Countermeasure types (mixers, bridges, privacy pools, peel chains) are identified as observable ledger facts — never as a claim about who chose them.