Checking 6 chains…

Every theft leaves a trail.
We make it glow.

Paste the thief's address. Forensa follows every hop across six chains, names where the money landed, and seals a case file an exchange can check.

Official $FORENSA · Robinhood ChainNot issued yet
Not issued yet. The address is posted here first.

Real trace · Bybit exploit, Feb 2025 · every point is a real address Open this case

Click any point for its address

–/6chains answering now
—latest Robinhood Chain block
Open Labels Initiativewhere address labels come from
—case files sealed
0wallet connections needed

01Trace

Every hop.
Across six chains.

Paste one address or one transaction. Forensa reads public explorers straight from your browser and follows each transfer to the next wallet, on Robinhood Chain, Ethereum, Base, Optimism, Arbitrum and Polygon.

This trail · 72 addresses · 91 transfers

02Evidence

Every claim
shows its work.

Each label names where it came from. Each step links to the transaction that proves it, and each finding carries a confidence level: high, medium or low.

THORChain Router · label via Blockscout

03Seal

One fingerprint.
Sealed on Robinhood Chain.

The case file's SHA-256 fingerprint joins a Merkle tree, and the tree's root is written to Robinhood Chain in one transaction. Anyone can re-check the file at /verify without having to trust us.

SHA-256 fingerprint of this sample file
computing in your browser…

04Send

Sent to the desk
that can freeze.

Forensa points the file at the exchange or stablecoin issuer that can actually freeze the money, and at the police. We list only channels we have checked ourselves.

Checked channels · loading…

What a finding looks like

Plain sentences.
Backed by transactions.

Each finding says what happened, how sure we are, and why. One click opens the proof on a public explorer.

Critical
money sitting where it can be frozen
High
act now, it can still move
Medium
trail continues somewhere else
Info
context for investigators
Case file · Bybit exploit, 21 Feb 2025SAMPLE · real trace

Loading findings…

Drop a Forensa case file here or choose a PDF on the verify page SHA-256 · computed on your device · only the fingerprint is looked up

Check any case file

Received a case file?
Check it before you act.

An exchange, a lawyer or a police officer can confirm in seconds that a Forensa case file has not changed since the day it was sealed.

  1. Fingerprint. Your browser hashes the PDF. The file stays with you.
  2. Proof. The fingerprint is matched to its Merkle proof.
  3. Chain. The proof is checked against the root stored on Robinhood Chain.
Open the verifier

Built on Robinhood Chain, for real

44 bytes on chain.
Nothing else.

Case files never go on chain. One seal transaction carries a short tag, the Merkle root of a batch of fingerprints, and how many files are in the batch. That is enough to prove any file in the batch.

0x00"FORENSA1"8 bytes
0x08Merkle root32 bytes
0x28Filesuint32 · 4
Seal transaction · data fieldformat v1
// data = "FORENSA1" || root || count  (44 bytes)
magic  46 4f 52 45 4e 53 41 31   // "FORENSA1" · 8 bytes
root   SHA-256 Merkle root       // 32 bytes
count  uint32, big-endian        //  4 bytes

// leaf = sha256(0x00 || file fingerprint)
// node = sha256(0x01 || min(a,b) || max(a,b))

SAMPLE This page's sample case file, sealed on its own, would write:

computing…

Latest sealchecking…

Asking the seal service…

Rules we don't bend.

Forensa never…

  • asks for your seed phrase or private keys
  • asks you to connect a wallet to run a trace
  • charges to "recover" your funds
  • messages you first, on any platform

Forensa always…

  • shows the source of every label
  • links every step to a transaction
  • lets you verify any case file at /verify
  • serves its own code, fingerprinted in /integrity.json · security

Start with one address.
Leave with a case file.

Not sure where to start? I've been robbed