The on-demand blockchain investigation workstation: trace funds across 19 chains and major cross-chain bridges, monitor wallets, simulate transactions, and export court-admissible reports.
Noxos Blackboard (coming soon)
Noxos Blackboard, coming soon, is a manual case-graph tool for investigators. The investigator places addresses as nodes and draws the movements between them by hand (a payment, a bridge, a swap), one arrow at a time. A trail finished in the investigator's own AI chat can be pasted in and drawn as a board, and AI clients such as Claude or ChatGPT can connect over MCP to draw on the investigator's boards. Blackboard is separate from the investigation platform: it reads no blockchain data and runs no automatic tracing, so a board shows only what the investigator, or their AI, put on it.
Incident response for protocols
When a protocol is exploited, Noxos provides the rapid-response tracing most teams have no in-house capability for. Once funds start moving, the Hydra engine follows them across chains, bridges, and mixers in real time, decompiles the attacker's contract, and clusters the attacker's wallets to establish attribution. Noxos then maps the funds to their choke points — exchanges, stablecoin issuers, and law enforcement — so a freeze can still land, and delivers a court-admissible post-mortem with the full fund-flow graph, timeline, and chain of custody. Protocols can report an active incident or set up a response retainer in advance.
Frequently asked questions
What is Noxos Intelligence?
Noxos Intelligence is an on-demand blockchain-intelligence workstation that traces illicit crypto funds across chains and bridges and exports court-admissible forensic reports. An investigator submits a single address and Noxos follows the money across chains, bridges, and swap protocols using deterministic (reproducible) tracing, recording the external lookups a trace makes to an append-only per-case audit log (answers served from a cache and a few read types excepted). Beyond tracing, it bundles protocol monitoring, a transaction simulator, a contract scanner and decompiler, address labeling with sanctioned-address flags, and a live exploit feed in one workspace. It is operated by InfinityBlocks LLC and presented publicly at noxosintel.com.
Can Noxos Intelligence trace stolen crypto across different blockchains?
Yes, Noxos Intelligence traces funds across chains, bridges, and swap protocols in a single unified graph using its Hydra tracing engine. Its deterministic pathfinding follows the money through bridge and DEX hops and automatically resolves bridge hops to surface the exchange deposit or off-ramp where funds come to rest. Because the algorithms are deterministic, the same inputs always produce the same trace graph, so the results are reproducible for court use.
What blockchains and bridges does Noxos support?
Noxos Intelligence covers 19 chains and major cross-chain bridges in one unified trace graph. Its cross-chain tracing follows funds through bridge, DEX, and swap protocols across those networks. Some individual daily-security tools cover a subset — for example, the transaction simulator works across 14 EVM chains and Solana, while the token approval checker works across 14 EVM chains.
Are Noxos Intelligence reports admissible in court?
Noxos Intelligence generates court-admissible forensic reports as exportable, hash-sealed PDFs that carry the case's chain of custody. Admissibility is decided by the court; the platform is built to evidentiary standards — deterministic replay, per-hop logging, a chain-of-custody appendix. In practice that means the tracing is deterministic, so the same inputs reproduce the same graph; the external lookups a trace makes, and the limits it hit, are written to a per-case audit log (answers served from a cache, and a few read types, are not recorded); and the exported PDF bundles the graph, the labelled hops, the risk scores and that log, with the SHA-256 of the file recorded by the platform under a seal ID printed on its cover. Labels and risk scores come from public blockchains, public and third-party datasets and Noxos analysis, and the report says where each came from. Noxos does not warrant that a report will be admitted or given weight; expert testimony is a separate engagement.
How do I recover cryptocurrency stolen in a hack or scam?
You can open an asset-recovery case with Noxos Intelligence using its 'Hire a specialist' form, where forensic investigators trace the funds on your behalf. They follow the money across every chain, bridge, and swap to pinpoint where it landed, handle the case confidentially, deliver an initial review within 24 hours, and hand over a court-ready report. Note that outcomes are not guaranteed — Noxos makes no promise that funds will be traced, frozen, or recovered.
Who is Noxos Intelligence for?
Noxos Intelligence serves professional investigators and forensics analysts; private investigators and asset-recovery firms; government and law-enforcement agencies; businesses and DeFi protocols; individual victims of hacks and scams; and everyday crypto users. Investigators use it for defensible cross-chain tracing and reporting, protocols use it for monitoring and incident response, and consumers use its wallet-security toolkit. The same investigator-grade instruments are repackaged for everyday wallet self-defense.
How can I check if a crypto address is a scam?
Noxos Intelligence includes a Scam Tracker that looks up any wallet against a flagged-address database and returns an instant verdict with sources. Its Address Labels tool also identifies wallets and contracts across supported chains — tagging them as categories like exchange, DEX, bridge, mixer, or sanctioned — using a database-first lookup with cross-chain match detection. These tools help you check an address before you send funds or connect a wallet.
Can I preview a crypto transaction before signing it?
Yes, the Noxos Intelligence Transaction Simulator dry-runs any transaction in a sandbox before it hits the chain, showing balance and state changes, token approvals, and potential drain vectors across 14 EVM chains and Solana. Noxos also offers a browser extension that simulates every transaction the moment a wallet asks to sign, so malicious signature requests can be rejected before approval. These are part of the Noxos everyday wallet-security toolkit.
How do I revoke risky token approvals with Noxos?
Noxos Intelligence includes an Allowance Checker that finds every active ERC-20 approval across 14 EVM chains, flags unlimited grants, and ranks spenders by USD at risk so you can revoke risky allowances. It sits alongside the rest of the Noxos consumer security toolkit, including the transaction simulator, scam tracker, contract scanner and browser extension. The daily tools are described as seven tools in one workspace.
How can law enforcement use Noxos Intelligence?
Government and law-enforcement agencies can use Noxos Intelligence to reconstruct cross-chain money movement with a defensible, reproducible methodology and reach a point of accountability, such as an exchange deposit or off-ramp, for subpoenas. It provides multi-chain tracing, address attribution, sanctioned-address flags, entity grouping, and court-admissible reports with the case's chain-of-custody audit trail. Noxos offers a dedicated Government / LEA request form and an enterprise and government-partnership contact path.
Can Noxos monitor a DeFi protocol and automatically stop an exploit?
Yes, Cerberus monitors a protocol's smart contracts 24/7 with configurable thresholds on native and token flows and sends instant alerts by email and to the in-platform notification centre. Paired with it, the Whistleblower auto-pause acts as an on-chain circuit breaker that executes the protocol's pause() function within seconds of a threshold breach, with no human in the loop (EVM, custom signatures). Together they help DeFi teams stop losses in real time instead of writing post-mortems.
How do I get access to Noxos Intelligence?
You can request access through the public site at noxosintel.com, where visitors can request access, join the waitlist, or open an asset-recovery case. Businesses can use the contact form to request Cerberus protocol-monitoring access, and agencies can use the dedicated Government / LEA form for enterprise deployment or partnerships. Requests are reviewed within 24 hours, and the general contact email is hello@noxosintel.com.
Who operates Noxos Intelligence and where is it based?
Noxos Intelligence is operated by InfinityBlocks LLC, a company established in Bulgaria (EU). Its Terms are governed by the laws of Bulgaria with exclusive jurisdiction of the Bulgarian courts, and its supervisory authority is the Bulgarian Commission for Personal Data Protection (CPDP). The public site is noxosintel.com and the general contact email is hello@noxosintel.com.