Course Outline
Blockchain Technology Fundamentals
Architectural characteristics such as decentralization, openness, and transparency
Cryptographic primitives ensuring chain security: hashing, digital signatures, and Merkle trees
Consensus mechanisms: Proof of Work, Proof of Stake, and emerging alternatives
Nodes, miners, validators, and the topology of active networks
The Cryptocurrency Ecosystem
Bitcoin and the original ledger model
Ethereum and account-based smart contract execution
Privacy-focused chains: Monero, Zcash, and their distinctions from transparent ledgers
Stablecoins, altchains, and their involvement in illicit financial flows
Practical Lab - Interpreting the Blockchain
Establishing connections to Bitcoin and Ethereum nodes for live data retrieval
Navigating block explorers and querying active transactions
Analyzing raw transactions, scripts, and smart contract interactions
Mapping the transaction history of wallets on transparent chains
Wallets, Keys, and Transaction Mechanics
Wallet classification: web, desktop, mobile, hardware, and custodial versus non-custodial models
Seed phrases, key derivation processes, and recovery mechanisms
UTXO versus account-based transaction frameworks
Addresses, change outputs, and transaction graphs from a tracing perspective
Mining and Trading in Investigative Contexts
Mining mechanics, pools, hash rates, and the exploitation of mining for fund origination or laundering
Centralized exchanges, decentralized exchanges, and over-the-counter (OTC) desks
KYC and AML controls within exchanges and common points of failure
How trading patterns can obscure underlying corruption-related flows
Smart Contracts and DeFi Environments
The nature of smart contracts and the observability of their state on-chain
DeFi primitives: swaps, lending, liquidity pools, and yield farming
Cross-chain bridges and wrapped assets as tools for obfuscation
Interpreting contract interactions to generate investigative signals
Practical Lab - Wallet and Transaction Forensics
Examining hardware and software wallets in a controlled setting
Recovering and analyzing artifacts from confiscated devices
Reconstructing transaction graphs across UTXO and account-based blockchains
Address Clustering and Attribution
Common-input clustering and other industry-standard heuristic methods
Change-output detection and behavioral pattern analysis
Connecting on-chain entities to off-chain identities via OSINT
Integrating web scraping, social media, and leaked data sources for attribution
Dark Web, Marketplaces, and Criminal Crypto Flows
Mapping criminal economies within dark web marketplaces
Common typologies: scams, fraud, contraband, and sanctions evasion
Tracking proceeds from initial deposits to cash-out points
Indicators of cryptocurrency activity linked to corruption
Privacy-Enhancing Tools and Counter-Forensics
Mixers, tumblers, and CoinJoin implementations
Privacy coins and the limitations of tracing on public chains
Cross-chain bridges and asset wrapping as layers of obfuscation
Evaluating what tracing can and cannot recover under various techniques
Practical Lab - Tracing a Suspect Wallet
Utilizing open-source tools to trace complex transaction graphs
Clustering wallet networks and assigning confidence levels to attributions
Documenting findings as a structured intelligence package
Cryptocurrency Money Laundering Typologies
Adaptation of placement, layering, and integration to digital assets
Layering techniques via decentralized exchanges, bridges, and mixers
DeFi protocols as surfaces for laundering and methods to analyze them
Cash-out vectors: peer-to-peer markets, OTC desks, and prepaid instruments
Ransomware, Theft, and Scam Response
Ransomware payment patterns and immediate response protocols
Negotiation and recovery practices, including associated limits and risks
Analyzing exchange hacks, rug pulls, phishing, and large-scale thefts
Collaborating with victims to preserve evidence without compromising the investigation
Cross-Chain Investigations
Tracing assets across Bitcoin, Ethereum, and EVM-compatible chains
Following funds through bridges and wrapped tokens
Reconciling on-chain evidence with exchange and off-chain records
Simulation Lab - Corruption Investigation
Simulating a bribery flow across multiple chains and a mixer
Constructing a coherent narrative from fragmented on-chain evidence
Creating chain-of-custody documentation for digital evidence
AML Compliance and Legal Frameworks
FATF guidelines, the Travel Rule, and jurisdictional variances
AML and KYC obligations for virtual asset service providers
Sanctions, politically exposed persons, and corruption-related typologies
Integrating cryptocurrency findings into existing compliance programs
Engaging with Exchanges and Cross-Border Partners
Subpoenas, Mutual Legal Assistance Treaties (MLATs), and information-sharing channels
Freezing orders, asset preservation, and seizure procedures
Coordinating cryptocurrency tracing with traditional financial investigation avenues
Digital Evidence and Courtroom Readiness
Chain of custody for cryptocurrency artifacts and on-chain evidence
Presenting blockchain evidence to non-technical decision-makers and juries
Addressing common challenges to digital evidence and defending findings
Collaborating with expert witnesses and external technical advisors
Capstone - End-to-End Corruption Inquiry Simulation
Progressing from initial intelligence tips through the full investigation process
Constructing the wallet network, attributions, and timeline
Coordinating with exchanges and cross-border partners
Generating a courtroom-ready report and oral briefing
Summary and Next Steps
Requirements
- Intermediate technical proficiency, encompassing networking knowledge and basic Linux command-line usage
- Functional understanding of cryptographic concepts, including hashing and public-key encryption
- Background in financial investigation, cybersecurity, digital forensics, or compliance
- Knowledge of at least one scripting language is advantageous but not mandatory
- General grasp of financial transaction mechanisms and AML principles
Intended Audience
Investigators and forensic analysts within anti-corruption agencies, financial crime units, and law enforcement bodies. Cybersecurity specialists assisting with fraud detection, AML, and digital evidence functions. Compliance and risk professionals working in regulated sectors where cryptocurrency exposure is expanding.
Testimonials (1)
- like the blockchain introduction. For a blockchain newbie like me, its englighten me. - Like the technical workshop, also interesting
