Forensic, federal, counsel under one engagement
XELTRUS combines deep working knowledge of the US federal civil-recovery framework with proprietary on-chain forensic capability and integrated counsel coordination. Each engagement is matter-specific, opens with a written viability assessment, and is calibrated to maximize recoverable value asset-by-asset.
How we work, end-to-end
The operational pillars of every XELTRUS engagement. Each pillar is delivered under one engagement architecture, against one evidentiary record, with one written viability assessment opening the work.
Forensic Chain Analysis & Asset Tracing
Full on-chain reconstruction across Bitcoin, Ethereum, and major chains. Identification of counterparties, custodians, exchanges, and fiat off-ramps. Built on forensic methodology developed specifically for fraud-recovery casework — chain-of-custody compliant and admissible in federal proceedings.
Learn moreFederal Civil Recovery
Where the facts support it, recovery is pursued through the federal civil-recovery framework available under US law. The framework includes statutory provisions that, in qualifying matters, can meaningfully exceed the principal loss through enhancement multipliers, attorney-fee shifting, and post-judgment enforcement mechanisms.
Learn moreCounsel Coordination
Recovery actions are pursued under the federal civil-recovery framework with integrated counsel coordination — matter-specific selection, written engagement, end-to-end integration with XELTRUS forensic methodology, and engagement letter signed directly between claimant and counsel.
Learn moreWritten viability assessment first — engagement second
Every prospective matter is evaluated through a written, fact-specific viability assessment before any meaningful resources are committed. The assessment identifies which federal mechanisms are applicable, what the on-chain and off-chain evidentiary posture looks like, and whether the matter meets the qualification threshold. Only matters that pass viability proceed to engagement.
Coverage that maps to where digital assets actually move
Recovery posture is shaped by the asset class and the chains involved. Our forensic and procedural posture is calibrated for each layer of the digital-asset ecosystem in which loss occurs and through which recovery is pursued.
Bitcoin & Bitcoin-derived chains
UTXO-graph reconstruction, common-input clustering, peel-chain detection, CoinJoin participation analysis, and Bitcoin-derived chain coverage. Forensic posture aligned with the longer-running attribution datasets and the deeper precedent-base for Bitcoin-related federal proceedings.
Ethereum & EVM ecosystem
Account-graph reconstruction across Ethereum and EVM-compatible chains, ERC-20 and ERC-721 transfer tracing, smart-contract interaction analysis, and bridge-event correlation. Includes ERC-20 token-offering reconstruction, fake-DEX clone analysis, and reconstruction of misappropriations executed via staking, restaking, or validator-routed paths.
Cross-chain & bridges
Reconstruction across canonical and third-party bridges, wrapped-asset pairs, and cross-chain liquidity venues. Reconciliation of bridge events under a unified asset identity, so the proceeds path remains coherent when assets move between chains during the misappropriation.
One engagement, one evidentiary record
The recurring failure mode of digital-asset recovery is fragmentation: the forensic provider, the recovery counsel, and the cross-border counsel each work from a different version of the underlying record. We treat that fragmentation as the primary risk to manage. The engagement architecture is designed so the forensic record, the federal-law strategy, and the counsel work-product all feed from — and back into — a single, versioned evidentiary record.
How a matter moves from intake to disposition
Each engagement passes through sequential phases with explicit checkpoints, so the matter can be paused, re-scoped, or terminated cleanly at the points where doing so protects the claimant.
Intake & confidential assessment
Confidential intake under written protocol. Initial fact-pattern review, asset-class scoping, jurisdictional posture, and identification of the candidate federal mechanisms. The intake phase ends with the production of a written viability opinion that the claimant can review with independent counsel.
Forensic reconstruction & viability
Where intake clears the threshold, the matter proceeds to forensic reconstruction: on-chain trail, off-chain corroboration, attribution analysis, and asset-state-at-intake report. The reconstruction is delivered under chain-of-custody and is the foundation document for the viability decision.
Engagement & disposition
Where viability supports proceeding, the engagement is structured under written agreement and the recovery action is documented against the forensic record. The engagement runs through to disposition with integrated forensic, procedural, and counsel work-product on the same versioned record.
The honest list of what is outside our practice
We do not pursue matters that fail the viability threshold. We do not engage on contingency without a written viability opinion. We do not solicit victims through unsolicited outreach. We do not hold private keys, seed phrases, or recovery material for claimants. We do not publicize engagements or claimants. We do not represent that any matter will be successful, and we say so directly at intake rather than after a year of work.
Different claimants, one intake protocol
Recovery matters reach us through distinct entry points. Each profile is handled under the same written intake protocol, with the engagement structure adapted to the claimant’s posture.
Individual claimants
Individual victims of exchange-exit insolvencies, pig-butchering syndicates, false-trading platforms, fraudulent staking or validator schemes, token-offering misappropriation, or cross-border Bitcoin theft whose loss-shape supports a viable federal-law posture. Intake is direct and the engagement is structured matter-specifically around the individual case.
Victim cohorts
Mass-claimant matters affecting hundreds or thousands of victims of a single scheme. The cohort’s representation structure is established before counsel is engaged, so the chain of authority is unambiguous from the outset and the cohort’s coherence is preserved through disposition.
Counsel & professional advisors
Law firms, victim advocates, and professional advisors evaluating the federal-law posture of a matter on behalf of their own client. We work as the forensic and coordination layer behind the existing counsel relationship, under a parallel engagement structure that preserves it.
Request a viability assessment
If the matter you are considering involves Bitcoin theft, cryptocurrency misappropriation, or NFT fraud — whether you are the victim, represent a cohort of victims, or are counsel evaluating a recovery posture — reach out under our written intake protocol. All initial inquiries are reviewed by intake staff bound to confidentiality.