Trail Report: a verifiable stolen-funds trace for small crypto theft victims
An agent traces stolen funds to exchange deposit addresses and writes a hop-by-hop report for police and exchanges. Victims and small DAOs pay per report.
Competitive · ABF-Bench makes agent fund tracing checkable
Written for: Solo builder
Next step
This week, run an agent with a block-explorer API over three ABF-Bench cases and publish one sample PDF with every hop linked. Offer free traces in r/ethdev and r/CryptoCurrency incident threads, saying up front that you never promise recovery.
Why now
Hacken counts $1.18B lost to hacks in Q3 and says audits give a false sense of security. Chainalysis and TRM sell to enterprises and governments. A person who lost $20k usually gets nothing, or gets targeted by recovery scammers. Cheaper fast models such as DeepSeek V4.1 Flash bring a multi-hop trace down to cents of inference.
What became possible
ABF-Bench is an interactive benchmark for agent fund tracing. Because public ledgers record every movement, each hop an agent claims can be checked independently. That means you can measure how accurate your tracer is before charging for a report.
Two ways in
- Trail Report
Paste a theft transaction. The agent follows funds across swaps and bridges until it reaches a custodial deposit address or a mixer, links every hop to an explorer, marks where confidence drops, and produces freeze-request letters addressed to the receiving exchange or the stablecoin issuer.
- Customer
- Individual theft and scam victims, and small DAOs after an exploit
- Model
- $99 per report, with no recovery promises and no success fees
- Trace Alerts
After a report, watches the traced addresses and emails the victim when funds move into an exchange, so they can file a freeze request in time.
- Customer
- Past Trail Report buyers and small protocol teams
- Model
- $9 a month per incident
Competition
This space is now taken in its core form. AMLBot's AI Tracer already lets a victim paste a transaction hash and get an AI-built PDF report covering bridges and exchange deposits.
Full competition notes (8 competitors)
This space is now taken in its core form. AMLBot's AI Tracer already lets a victim paste a transaction hash and get an AI-built PDF report covering bridges and exchange deposits. MetaSleuth and MistTrack already watch the attacker's addresses and email the victim when funds hit an exchange, and MistTrack does that for free. Trace Alerts on its own is therefore not a business. Small-ticket per-report tracing also exists, for example CryptoTracer in Japan. What I did not find is any tool that turns the trace into ready-to-file freeze-request letters. The letters would be addressed to the specific receiving exchange's compliance or law-enforcement contact, or to Tether or Circle, filled in with that recipient's required fields, and paired with a matching police-report packet. Today that step is done by hand by vendor staff, as in AMLBot's Tether case. A second gap is verifiability. Each hop would link to an explorer, confidence drops would be marked explicitly, and the method would be reproducible, so an exchange compliance team or police officer could check the report without trusting a black-box vendor. That matters because victims are heavily targeted by fake recovery services and trust is scarce. A new entrant could win by owning the step from trace to freeze request, measured by speed to a filed request. It could also sell to small DAOs after an exploit, which want a public, auditable trace for their community. But AMLBot and BlockSec can add letter generation quickly, and freezes still depend on exchanges and police acting. So the edge is narrow, and it would come from execution and credibility rather than from being first.
- AMLBot AI Tracer / AI AutoTrace
This is the closest direct match. It is a self-serve AI tool: you paste a transaction hash and it follows funds across wallets, bridges and likely exchange deposits, then gives you a downloadable PDF and graph aimed at theft victims and police filings. The beta appeared around March 2026 and coverage puts the wider launch at July 31, 2026. AMLBot also guides victims through Tether freeze requests by hand (https://blog.amlbot.com/650-000-usdt-stolen-while-the-owner-was-traveling-tether-froze-it-all/).
- MetaSleuth (BlockSec)
You start from a transaction and it draws a fund-flow chart that you can share with police. It also has address monitoring that sends email alerts when funds move, which overlaps directly with Trace Alerts. BlockSec writes victim guides and has a Trace AI piece saying professional investigations are too expensive for small cases (https://blocksec.com/blog/trace-ai-track-stolen-crypto).
- MistTrack (SlowMist)
Has a free form where victims report stolen funds. It tags and monitors the attacker's addresses and alerts the victim when funds reach one of about 200 million exchange-linked addresses. It logged 300 submissions in Q4 2025 and helped freeze or recover about $1M for 9 victims. There is also a law-enforcement product with exportable reports.
- Crystal Intelligence Investigative Services
Does professional tracing reports for individual victims, with no published price. It is also acquiring Scam Alert, a public platform for reporting scams.
- CipherBlade / Lionsgate Network
Runs tracing investigations for victims, done by people, with a free first assessment and pricing scaled to the loss.
- Xentotech
Sells tracing reports, quoted from $7,500. This is the high-cost tier of services that a per-report product would undercut.
- CryptoTracer (Japan)
Charges 9,800 yen per transaction for a trace with no upfront fee. This is already a cheap per-report model.
- Cryptera Chain Signals
A recovery and forensic-report service marketed through Product Hunt. Its track-record claims can't be verified, so it's typical of the many recovery-style firms that make victims wary.
Checked 2026-10-19
Risks
- Recovery scams have poisoned this market, so buyers will distrust any paid trace.
- Mixers and cross-chain bridges end many trails, and partial reports may disappoint buyers.
- Wrongly attributing an address to a person or exchange carries defamation risk.
- Free explorers like Arkham and Breadcrumbs cover part of the job.
Best on tech readiness and market pull; open space is the weak point (5).
tech 6 · pull 6 · space 5 · fit 6 · build 6
Exposed
Companies that could benefit or be threatened. News and context, not investment advice.
Momentum of its main topic
Sources
Status history
- 2026-10-19 Flagged as buildable