Digital Forensics

With a proprietary, internally developed tool, the Audithor team can reveal or prove the identity behind a given cryptocurrency to a reasonable degree of certainty.

The Audithor digital forensics tool is currently in BETA and a new public-facing version is in development, planned for release in Q2 2019. We are accepting investments for further development of this public-facing SaaS version. Let us know if you're interested in investing.

The planned SaaS version will let each client build their own database on top of our existing public-facing metadata. By using this approach, you get a state of the art public information database enhanced with your own proprietary data, which stays isolated and proprietary, inaccessible to our systems, coupled with professional help from seasoned investigators with experience with the product.


When quantifying sold access to our software under the SaaS model, we count jumps. We also count jumps in cases where a digital forensics investigation was needed: you will be billed according to the number of jumps that were required to reach a conclusion about a project, with a minimum of $1000 per task (which includes 100,000 jumps). A jump is a transaction from one address to the other.

The tool can expand transactions in certain directions from an address. For example, 100 jumps from address A will reveal, in order, the 100 closest transactions to this address, starting from the most recent.

Digital Forensics Tool - Old Version
Original, desktop-based version of our digital forensics tool

Searches like these can be filtered by transaction weight. For instance, you can focus only on transactions that sent out more than 0.5 BTC, producing fewer results and conserving jumps.

Addresses will be color coded to identify the following types of addresses, based on metadata:

Legend of forensics tool
Basic view legend

Some pattern-identifications mechanisms are also present in the software. For example, extracting the probability that address B is owned by the same person who owns address A.

It should be noted that the digital forensics service:

  • does not guarantee successful unmasking of an addrees. The average success rate is, at this point, around 50% and rising as our database grows.
  • does not include "real time network wide tracking" - that falls under data analytics which is not a service we offer at this point.

How much does it cost?

Get in touch to get a quote or to prepurchase an amount of jumps.

In case you need real-time notifications of certain addresses triggering or receiving transactions, you'll pay for an up front cost of a certain number of notifications.

In case you need a de-masking (de anonymization) of an address, 50% is paid up front and 50% on success. If de-anonymization is not possible for whatever reason, the remaining 50% is forfeit and you will be given what ever data was uncovered, within GDPR limits. Identification missions typically last up to 5 working days as we set out to acquire new metadata.

Who does the seeking?

All the forensics work at this point is done by Bruno Škvorc of Bitfalls and occasionally interns who have limited access to the tool. Bruno is a seasoned blockchain developer and analyst who has done his fair share of investigation and testifying