01
Scope
Paste a wallet or transaction hash and pick the network. We index outbound transfers, NFT moves, and native sends from public explorer data — scoped to the incident day or anchor tx.
Trace funds on-chain · fund flow intelligence
Wallet drained? Trace funds and see where your crypto went
Wallet drains, single transactions, outbound traces, and pre-send screens — built from public chain data. No wallet connect. Verify before you share.
1–2 min
full incident report
No connect
public data only
Verify
before you share
Live on
From $5 per scan · drains · single tx · free incident guides · tracing glossary · sample case
Sample case file#ETH-2847
Fund trace summary
Monitoring57% of stolen funds traced · 2.41 ETHExample at finding 05 · drain case
Your wallet
Bridge
CEX pattern
Likely
Step 04
1.38 ETH matched a possible exchange deposit pattern.
Product overview
Headline, metrics, and a sample case file — the full Tracefunds entry point.
See before you pay
Walk through a real case file
Interactive drain walkthrough: fund-flow graph, labeled recipients, verification checklist, and victim-safe brief — about two minutes, no API keys.
How it works
Scope → Trace → Verify
One paid report, three stages — built for incident response under pressure, from paste to share-ready evidence. Full walkthrough →
02
Trace
Follow funds across hops, bridges, and clusters — rendered as a plain-language timeline and fund-flow graph, with CEX, bridge, and mixer labels when public data matches.
03
Verify & act
Clear the verification checklist, then forward a victim-safe brief or exchange abuse pack — a report counsel and abuse desks can read, not a raw explorer dump.
Research services
Fund flow intelligence, end to end
From wallet drains to single-transaction decode, outbound tracing, and exchange filings — deterministic labels first, AI narrative second.
Live
Drain
NFT or token outflows from a compromised wallet — incident report, verification checklist, victim-safe brief.
LiveSingle tx
Decode one transaction — what moved, labeled counterparties, plain-English step summary.
templateSOL swap
Public PUMP AMM swap signature — scoped single-tx demo, not a drain verdict.
LiveOutbound
Follow where assets left a wallet — investigator-style, outgoing transfers only.
LiveScreen
Quick label lookup and recent public activity before you transfer assets or sign approvals.
templateCEX trace
Follow outbound flow to a labeled exchange recipient — abuse pack copy for platform filings.
LiveAbuse pack
Copy template for labeled CEX deposits — txs and explorer links included.
LiveDeep trace
Second-hop enrichment on the busiest NFT recipient (~30–60s, beta).
LiveVerify
Automated checks before you copy or share externally.
Use cases
More than wallet drains
Wallet drains, NFT drainer sweeps, CEX deposit traces, single-tx decode, treasury outbound, and pre-send screens — one hub, deterministic labels first. All use cases →
Victim incidents
incident
Wallet drain / hack
NFT or token outflows from a compromised wallet — incident report, verification checklist, victim-safe brief.
Try example →incidentDrain — one UTC day only
Same wallet scoped to the busiest drain day — faster index, tighter counts.
Try example →incidentWallet drain (Ethereum)
Mainnet outbound NFT/token activity — ETH pipeline demo.
Try example →incidentSolana wallet activity sample
Public swap/NFT-active wallet for Solana incident pipeline demo.
Try example →incidentSolana NFT drain sample
Public NFT-active wallet for Solana incident / NFT outbound demo.
Try example →incidentNFT approval / drainer sweep
Bulk NFT outflows in a short window — consistent with approval abuse or automated drainer execution.
Try example →incidentPhishing / approval setup
Zero-value native txs and approval patterns — review before reusing the wallet; revoke stale approvals.
Try example →incidentTrace to exchange deposit
Follow outbound flow to a labeled exchange recipient — abuse pack copy for platform filings.
Try example →incidentMixer / privacy pool touch
Honest limits when funds hit a mixer — onward tracing is often not possible on-chain.
Try example →incidentBridge in outbound path
Bridge contract in the flow — check the destination chain for the same wallet or labeled entity.
Try example →Transactions
single tx
Single transaction explanation
Decode one transaction — what moved, labeled counterparties, plain-English step summary.
Try example →single txSolana swap decode (PUMP AMM)
Public PUMP AMM swap signature — scoped single-tx demo, not a drain verdict.
Try example →single txConfirm a payment landed
Did your transfer succeed? Who received tokens or native gas?
Try example →Investigator & treasury
outbound trace
Trace outbound funds
Follow where assets left a wallet — investigator-style, outgoing transfers only.
Try example →wallet surveyWallet activity survey
Recent inbound and outbound activity — what has this address been doing, without assuming a drain.
Try example →address screenSolana NFT wallet sample
NFT transfers and marketplace listings on a public sample wallet — address screen demo.
Try example →outbound traceTreasury / insider outbound
Investigator-style outbound trace from a treasury or hot wallet — no victim-drain assumptions.
Try example →Prevention & screening
address screen
Screen address before send
Quick label lookup and recent public activity before you transfer assets or sign approvals.
Try example →approval auditApproval & allowance audit
Find the contracts that can still move your tokens and NFTs — risk-ranked, with one-click revoke links.
Try example →approval auditSolana SPL delegate audit
Scan active SPL token-account delegates — prevention and post-scare cleanup.
Try example →address screenRug / scam counterparty check
Screen a counterparty or decode the payment tx before you send more funds.
Try example →Coming soon
Coming soon
Protocol / contract exploit
One transaction, many victims — decode exploit-scale outflows (uses single-tx pipeline today).
On roadmapComing soon
Exchange hack — victim deposit trace
Trace victim deposits toward labeled hot wallets — emphasis on CEX path and abuse filings.
On roadmapLive case excerpt
Incident #ETH-2847 — trace in four findings
Illustrative drain case for the sample walkthrough. Traceability grows as each hop is documented — same data as the interactive case file.
What teams say
Built for forwarding under pressure
Illustrative quotes from early beta feedback — not verified endorsements.
“We finally had a timeline our legal team could read without opening Etherscan. The export alone saved us hours.”
“After a wallet drain, plain-language alerts helped us decide when to contact an exchange abuse desk — with evidence attached.”
Pricing
Pay for the depth you need
Three scan tiers by workload — from one transaction to a full defensible case file. Pro for teams running continuous casework.
FAQ
Common questions
Get started
Run your own incident report
Enter a victim wallet on Ethereum, Solana, Arbitrum, HyperEVM, or Monad. We index outbound transfers, map recipients, and show a verification checklist before you share results.
Prefer a guided walkthrough?
The sample case uses preloaded data with animated flows and alerts — about two minutes, no API keys required.