← All programs
ACF-301Advanced42h · 5 weeks (self-paced)
Advanced Crypto Forensics & Tracing
A rigorous course in on-chain investigation. Designed with practitioners from exchanges, law enforcement liaisons, and recovery firms. Covers attribution heuristics, cross-chain tracing, evidence handling, and the legal caveats that matter.
01 · Outcomes
What you will be able to do.
- 01Build graph views of wallet clusters with confidence scores
- 02Trace value across bridges, CEX hand-offs, and mixers
- 03Draft preservation notes and chain-of-custody records
- 04Collaborate effectively with exchanges on freezes
- 05Avoid the classic attribution pitfalls and false positives
02 · Syllabus
What you will cover.
Week 1
Attribution Fundamentals
- →Common-input-ownership heuristic and its failure modes
- →Change detection in UTXO and account models
- →Labelling strategies and confidence scoring
Week 2
Cross-Chain & Bridges
- →Native bridges, LayerZero, Wormhole, Axelar patterns
- →Tracking liquidity through DEX aggregators
- →MEV and sandwich-attack noise in traces
Week 3
Mixers & Privacy Tooling
- →Tornado Cash, Railgun, and mixer exit heuristics
- →Timing and amount correlation
- →Legal boundaries when working with mixed funds
Week 4
Evidence & Legal
- →Chain of custody for on-chain evidence
- →Preservation letters and exchange cooperation
- →Working with LEA and recovery counsel
Week 5
Case Simulation
- →End-to-end investigation of a composite case
- →Reporting pack: executive summary, graph, timeline
- →Courtroom-ready narrative construction
Tools
- • Chainalysis Reactor
- • Arkham
- • Breadcrumbs
- • Dune
- • Etherscan
Who it's for
- Compliance and fraud teams at exchanges and custodians
- Recovery firms and incident responders
- Security researchers investigating protocol attacks
Prerequisites
- Completion of CSF or equivalent wallet-level knowledge
- Comfort reading block explorers and JSON-RPC traces
Ready?