Course Outline
Foundations of Blockchain Technology
Architectural properties including decentralization, openness, and transparency
Cryptographic primitives securing the chain: hashing, digital signatures, and Merkle trees
Consensus mechanisms: Proof of Work, Proof of Stake, and emerging alternatives
Network topology: nodes, miners, validators, and live network dynamics
The Cryptocurrency Landscape
Bitcoin and the original ledger model
Ethereum and account-based smart contract execution
Privacy-focused chains such as Monero and Zcash, and their distinction from transparent ledgers
Stablecoins, altchains, and their utility in illicit financial flows
Hands-On Lab: Reading the Blockchain
Establishing connections to Bitcoin and Ethereum nodes for live data access
Navigating block explorers and querying active transactions
Analyzing raw transactions, scripts, and smart contract invocations
Mapping historical wallet activity on transparent chains
Wallets, Keys, and Transaction Mechanics
Wallet taxonomy: web, desktop, mobile, hardware, and custodial versus non-custodial models
Seed phrases, key derivation processes, and recovery mechanisms
Differences between UTXO and account-based transaction models
Addresses, change outputs, and transaction graph analysis from a tracer’s perspective
Mining and Trading as Investigative Context
Mining mechanics, pools, hash rates, and methods for laundering or originating funds
Role of centralized exchanges, decentralized exchanges, and OTC desks
Application and failure points of KYC and AML controls at exchanges
How trading patterns can obscure underlying corruption-related flows
Smart Contracts and DeFi Surface
Smart contract functionality and on-chain state observability
DeFi primitives: swaps, lending, liquidity pools, and yield farming
Cross-chain bridges and wrapped assets as obfuscation vectors
Interpreting contract interactions for investigative signals
Hands-On Lab: Wallet and Transaction Forensics
Inspecting hardware and software wallets within a controlled environment
Recovery and analysis of artifacts from seized devices
Reconstruction of transaction graphs across UTXO and account-based chains
Address Clustering and Attribution
Industry-standard heuristics such as common-input clustering
Detection of change outputs and behavioral fingerprinting
Linking on-chain entities to off-chain identities via OSINT
Integration of web crawling, social media, and leaked data sources for attribution
Dark Web, Marketplaces, and Criminal Cryptocurrency Flows
Mapping criminal economies within dark web marketplaces
Common typologies: scams, fraud, contraband trade, and sanctions evasion
Tracking proceeds from initial deposit to cash-out points
Identifying indicators of corruption-linked crypto activity
Privacy-Enhancing Tools and Counter-Forensics
Implementation of mixers, tumblers, and CoinJoin protocols
Privacy coins and the limitations of public-chain tracing
Cross-chain bridges and asset wrapping as obfuscation layers
Assessing what tracing can and cannot recover under each technique
Hands-On Lab: Tracing a Suspect Wallet
Utilizing open-source tools to follow complex transaction graphs
Clustering wallet networks and assigning confidence levels to attribution
Documenting findings as a structured intelligence package
Money Laundering Typologies in Crypto
Adaptation of placement, layering, and integration stages to digital assets
Layering techniques via decentralized exchanges, bridges, and mixers
DeFi protocols as laundering surfaces and methods for interpreting them
Cash-out vectors: P2P markets, OTC desks, and prepaid instruments
Ransomware, Theft, and Scam Response
Ransomware payment patterns and immediate response protocols
Negotiation and recovery practices, including associated limits and risks
Analysis of exchange hacks, rug pulls, phishing, and large-scale theft
Collaborating with victims to preserve evidence without compromising investigations
Cross-Chain Investigation
Tracing assets across Bitcoin, Ethereum, and EVM-compatible chains
Following funds through bridges and wrapped tokens
Reconciling on-chain evidence with exchange and off-chain records
Hands-On Simulation: Corruption Investigation Lab
Simulating bribery flows across multiple chains and through mixers
Constructing a coherent narrative from fragmented on-chain evidence
Producing chain-of-custody documentation for digital evidence
AML Compliance and the Legal Landscape
FATF guidance, the Travel Rule, and jurisdictional variations
AML and KYC obligations for virtual asset service providers
Sanctions compliance, politically exposed persons, and corruption-relevant typologies
Integrating cryptocurrency findings into existing compliance programs
Working with Exchanges and Cross-Border Partners
Utilizing subpoenas, MLATs, and information-sharing channels
Freezing orders, asset preservation, and seizure procedures
Coordinating cryptocurrency tracing with traditional financial investigation lines
Digital Evidence and Courtroom Readiness
Maintaining chain of custody for cryptocurrency artifacts and on-chain evidence
Presenting blockchain evidence to non-technical decision-makers and juries
Addressing common challenges to digital evidence and defending findings
Collaborating with expert witnesses and external technical advisors
Capstone: End-to-End Corruption Inquiry Simulation
Executing a full investigation from initial intelligence tip
Building wallet networks, establishing attribution, and creating timelines
Engaging with exchanges and cross-border partners
Producing a courtroom-ready report and delivering an oral briefing
Summary and Next Steps
Requirements
- Intermediate technical proficiency, including networking fundamentals and basic Linux command-line navigation
- Practical understanding of cryptographic principles such as hashing algorithms and public-key encryption
- Professional background in financial investigations, cybersecurity, digital forensics, or regulatory compliance
- Knowledge of at least one scripting language is advantageous, though not mandatory
- General familiarity with financial transaction flows and AML regulatory frameworks
Target Audience
Forensic analysts and investigators within anti-corruption bodies, financial crime units, and law enforcement agencies. Cybersecurity professionals specializing in fraud prevention, AML enforcement, and digital evidence handling. Additionally, compliance and risk officers operating in regulated sectors where cryptocurrency exposure is expanding.
Testimonials (1)
- like the blockchain introduction. For a blockchain newbie like me, its englighten me. - Like the technical workshop, also interesting
