Forensics

In Dev

Block explorers show you individual transactions. After an incident, that's not enough. You need to trace funds across dozens of hops, profile the attacker's wallet, figure out if they're still moving money. That's what this does.

HubSec ForensicsPreview

Hyperbridge ISMP — Apr 13, 2026

Transaction0x240aeb9a...11093 FLAGS

CALL0xC513...F8E7→0x518A...8f26(Master Contract)

CALL→0x6C84...6D64(HandlerV1)

handleConsensusMessage(proof, commitments)

MMR proof bypass — leaf_index == leafCount

CALL→0xFd41...B6dE(TokenGateway)

handleChangeAssetAdmin(request)

Shallow authorization — missing authenticate()

CALL→0x8d01...90b8(Bridged DOT)

mint(1,000,000,000)

Unauthorized mint — 2,800x existing supply

Capabilities

Transaction Tracing

Decompose any transaction into its full internal call tree. Every function call, token transfer, and state change — decoded.

Fund Flow Analysis

Trace funds forward and backward across any number of hops. Find consolidation points, distribution patterns, exit strategies.

Wallet Intelligence

Complete address profiles. Funding sources, interaction history, behavioral fingerprints.

Risk Scoring

Automated assessment based on wallet age, funding origin, behavior patterns, and interaction graph.

Cross-Chain Tracing

Follow funds across Ethereum, Polkadot, AssetHub, parachains, and L2s. Detect bridge hops and mixer usage.

Real-Time Monitoring

Watch addresses and get alerts on fund movements, bridge interactions, or exchange deposits.

Currently in development. Reach out if you need incident response support or want early access.