Follow the money to the end of the chain.
CHAINJACKAL traces the flow of funds across every chain, scores the risk, and proves each finding with the on-chain evidence — and the plain-English reasoning — a regulator or a court will accept.
Illicit value doesn't vanish. It hides.
Stolen funds get split, mixed, peeled and bridged across chains until the trail reads like noise. Every hop is engineered to break the link to the one before it. Tap each hop to see the move it makes.
An explorer shows you transactions. It never shows you the truth.
A block explorer lists raw movements between anonymous strings. It won't tell you whose wallet that is, that two of them are one hand, or that the money came from a mixer. Flip the same five transactions between the two views.
Trace. Cluster. Score. Prove.
One subject address goes in. A defensible verdict comes out. Four engines carry the case from first lookup to court-ready record — and every step is logged.
Trace the funds
Follow value across wallets, chains and bridges — through the obfuscation, not just the direct hops. Upstream to the source, downstream to the cash-out.
MODULE — TRACECluster the wallets
Group the addresses controlled by one hand using common-input, change and behavioural heuristics. Every merge is explained and reversible.
MODULE — CLUSTERScore the risk
A single 0–100 score and a clear verdict, decomposed into named, evidenced findings — with the benign reading it could otherwise be.
MODULE — EXPOSUREProve the finding
A hash-chained forensic record: every verdict tied to verbatim on-chain evidence and a chain of custody a reviewer can replay.
MODULE — CASETwo more engines — SOURCE (source-of-funds) and TAG (attribution) — run underneath. The full set follows.
Forensic intelligence. Never a custodian.
CHAINJACKAL reads public chain data and reasons about it. It never holds, moves, or touches a single satoshi — which is exactly why its evidence holds up.
✓ What the platform does
- ✓Traces funds across BTC, the EVM family, Tron and Solana in a single case.
- ✓Clusters wallets with reversible, explained merges — you can dispute any one.
- ✓Scores risk with verbatim on-chain evidence and a could-be-legitimate counter-read.
- ✓Reconstructs source-of-funds back to the origin, hop by hop.
- ✓Writes a court-ready, hash-chained record with full chain of custody.
✕ What it never does
- ✕Never holds keys, signs, or moves funds — there is no transaction risk.
- ✕Never trades, brokers, or touches value of any kind.
- ✕Never flags a wallet without on-chain evidence behind it.
- ✕Never inflates a score — borderline calls are only ever revised down.
- ✕Never sends your case to a vendor cloud. Local-first by default.
Paste an address. Watch the money move.
CHAINJACKAL pulls the wallet's full history and walks the fund flow hop by hop — upstream toward the source, through every mixer and bridge in between. Here it traces the subject deposit back to where the money was born dirty.
How we know two wallets are one hand.
Attribution is the incumbents' real moat — and clustering is how you earn it. CHAINJACKAL groups the addresses one entity controls, and unlike a black box, it shows the exact reason for every merge — so you can dispute and reverse any one. Pick a heuristic.
A number you can defend.
Risk is one 0–100 score with a clear verdict — but every point decomposes into named, weighted findings, each tied to evidence. Dispositive offences (sanctions, mixers, illicit origin) are kept separate from ordinary behaviour, so a busy exchange is never mistaken for a launderer.
| Finding | Severity | Weight | Verdict |
|---|---|---|---|
| Sanctions match — traces to OFAC SDN cluster | critical | ×40 | High |
| Mixer interaction — Tornado-class pool | high | ×25 | High |
| Peeling chain — 4 hops | high | ×20 | Risky |
| Convergence point — laundering hub | high | ×18 | Risky |
| Coordinated fan-out — 50 burst wallets | high | ×15 | Risky |
| Bridge interaction — THORChain | medium | ×12 | Accept. |
| Exchange interaction — legitimacy offset | info | −5 | Clean |
▪ Predicate-gated: no behavioural signal alone can drive HIGH — only a dispositive offence can. Score capped & adversarially re-checked.
We don't lose the trail at the mixer.
A mixer's whole job is to cut the on-chain edge between a deposit and a withdrawal. CHAINJACKAL re-derives the probable link from what the mixer can't hide — timing and amount — and surfaces it as a lead with a confidence, never as proof.
From 0x9d3f to a name.
A string of hex means nothing to a court. TAG resolves addresses to named entities — and unlike the incumbents, it ships the provenance and a confidence with every label, not just the tag. Hover a wallet from the case to attribute it.
Every pattern has a detector.
Six engines do the work no analyst should do on trust. Each owns one way money tries to disappear. Hover a module to see what it is and the move it kills.
Written once. Court-grade.
Every step of the investigation is written to a single append-only ledger — each entry hash-chained to the one before it. Nothing can be edited or deleted. Try to alter a finding and watch what happens.
Built for the people who have to be right.
When the answer to "where did the money go?" has to survive a regulator, a court, or a defence lawyer — the finding has to be provable, not just plausible.