Real-time flow intelligence

Watch the money as it moves.

Block-level wallet-tree intelligence for forensics, banking and security — alerts in seconds, evidence by design.

Animated wallet tree A glowing root wallet branches into three levels of downstream wallets. Nodes light up in sequence as funds move, and one highlighted path ends at a regulated exchange exit point.

The problem

$3.4B

stolen from crypto platforms in 2025.

43.8%

of 2024 theft came from private-key and wallet compromise.

83%

of known exploiters have no direct link to a regulated exchange.

Sources: Chainalysis 2026; Liao et al. 2025.

How it works

From block to evidence in one pipeline.

Every transfer is captured as it lands, placed in its wallet tree, and scored while the funds are still moving.

  1. 01LIVE

    Streaming ingestion

    Every transfer captured at block level, as it lands on-chain.

  2. 02LIVE

    Graph engine

    Full wallet trees rebuilt in real time — every hop, amount and second-level timestamp.

  3. 03PARTIAL

    Behavioural scoring

    Live scores for speed, fan-out, drain patterns and exposure.

  4. 04BUILDING

    Case & attribution

    Cases opened from any wallet, with exit points at regulated venues flagged.

  5. 05BUILDING

    Evidence & reporting

    Deterministic, replayable traces packaged for investigators and courts.

Solutions

One engine. Three markets.

The same block-level wallet trees, read three ways.

Forensics & KYC

Trace stolen funds hop by hop, find where they touch regulated venues, and hand investigators evidence that stands up.

“Nearly every large wallet sits within one hop of an identity. We find it — your firms name it.”

Trace stolen funds

Follow every hop from the compromised wallet, with amounts and second-level timestamps.

Identify exit points

Flag the moment funds reach a regulated venue, where identity can be requested.

Court-ready evidence packs

Deterministic traces that replay identically, packaged for legal review.

Live alert demo

Seconds from block to alert.

Each alert carries the amount, the destination and a risk score, so the first responder can act without opening another tool.

  • Sudden drains measured against the wallet's own baseline
  • Fan-out to newly created wallets
  • Bot-speed transfer bursts under 15 seconds
  • Funds routed toward mixers and bridges
Alert feed · watchlistStreaming

    Simulated data for illustration. Addresses are fictitious.

    Why DeHound

    Built for evidence, not dashboards.

    Real-time capture

    Transfers recorded as they land — not reconstructed later by retrospective scraping.

    Deterministic replay

    The same inputs produce an identical trace, every time it is run.

    Peer-reviewed methodology

    Every scoring and tracing method is grounded in citable research.

    Clean division of labour

    We trace the flow; regulated firms hold identity. We never handle identity data.

    12
    research domains
    80+
    papers screened
    15
    deep-validated
    Sept 2026
    running in production since
    Audited
    independent code review

    Start a pilot

    Choose your pilot: forensics, banking or security.

    Tell us what you need to watch. We'll scope a pilot on your wallets and your use case.

    Forensics & KYCTrace, attribute exit points, build evidence.
    Banking IntelligenceSignals, warnings and credit capacity from flow.
    Security ServiceWatchlists and alerts within seconds.
    We reply within two business days.

    Request received. We'll be in touch to scope your pilot.