Analytics answers whether an address or transaction is risky at scale; forensics answers what happened to particular funds and who was involved. Forensic work needs time-ordered tracing, documented assumptions, and reproducible evidence, because its conclusions may be challenged by the other side.
Back to glossary
Glossary term
What is Blockchain forensics?
Blockchain forensics is the investigative use of blockchain data to reconstruct what happened in a specific case, such as a hack, scam, ransomware payment, or sanctions evasion. It goes beyond routine analytics by tracing funds step by step, attributing addresses to actors, and preparing evidence that can support asset recovery, law enforcement referrals, or court proceedings.