What the chain remembers

01A ledger with no eraser

Most financial records are private. A bank's books are seen by the bank, its auditors and, on formal request, a court. A public ledger is the opposite arrangement. Every transaction ever made on the chain is written into a record that anyone can read, that thousands of machines hold in identical copies, and that no single party has the power to amend. That last property is the one that matters here. The record is not kept honest by an institution promising to behave. It is kept honest by construction: each block of transactions is bound to the one before it, so that altering any entry would mean rewriting everything that follows it, on most of the copies, at once. Nobody can do that.

The practical consequence is simple to state and easy to underestimate. On the chain, nothing is ever quietly corrected, deleted or lost. What happened is what the ledger says happened, permanently, in full detail, for anyone who takes the trouble to read it.

02The paradox of untraceable money

Schemes move value onto the chain because the parties believe it puts the money beyond reach: no bank to write to, no institution to freeze an account, no statement arriving in the post. The belief has a surface logic and a structural flaw. Cash leaves almost no record. A wire transfer leaves a record held by a few institutions. Value moved on a public ledger leaves a record held by everyone, forever: every amount, every address, every timestamp, every split and every merge, preserved with a precision no bank statement approaches.

In the strict documentary sense, the money believed to be untraceable is the best-recorded money that ever moved. What a scheme relies on is not the absence of a record. It is the assumption that nobody will sit down and do the work of reading it.

03Names are not written. Context is

It is true that the ledger records addresses, not names. This is pseudonymity, and it is routinely mistaken for anonymity. The difference is decisive. An anonymous act leaves no thread to pull. A pseudonymous actor leaves every act tied to the same pseudonym, and the pseudonym accumulates context with each use. An address touches an exchange that performs identity checks. It receives funds from an address already connected to a known matter. It moves value at hours, in patterns and in amounts that fit one explanation and not another. No single observation names the holder. The accumulation does. Behaviour is recorded in total on the chain, and behaviour is very hard to keep separate from identity for years at a time.

04Time works for the investigator

Most evidence gets worse as it waits. Witnesses forget, paper goes missing, backups expire, institutions merge and purge their archives. On-chain evidence does the opposite. The record does not degrade at all, and the tools for reading it improve every year. An address that meant nothing in the year of the loss is identified two years later, because it eventually touched a service that knows its customers, or because a pattern surfaced across other matters. Movements that once looked like noise resolve into structure when there is more history to compare them against.

This is why matters of this kind do not really go cold. The trail written at the time of the loss is still there, in the same detail it was written in, waiting for the analysis to catch up with it. A matter that was unreadable when it happened is often readable now, and one that is partly readable now will be more readable later.

05What tracing can and cannot do

Honesty about limits belongs in the file, so it belongs here. Tracing builds the record of where value went: from the wallet that received it, through splits and intermediaries, across jurisdictions, to an endpoint that someone answers for. Done properly, it produces a chronology a tribunal can rely on, with every step dated, every amount stated and every inference kept separate from the facts beneath it. That is what it does. What it does not do, by itself, is bring value back. Restitution, the return of value to the person it was taken from, happens in proceedings, civil, criminal or regulatory, conducted by licensed professionals standing on the record, and no serious practitioner promises their outcome.

What can be said is narrower and still worth saying. Proceedings act on records, and the matters that move are the ones that arrive with the record already built. The work described here has been listed on this domain since 2018, as forensic investigation of on-chain transactions with the historical chronology of each movement. The description has not changed. The world has moved towards it.