Noxos Intelligence — Trace Illicit Crypto Across 19 Chains

What is Noxos Intelligence?

Noxos Intelligence is an on-demand blockchain investigation platform operated by InfinityBlocks LLC. An investigator submits a single address and follows the money across chains, bridges, and swap protocols using deterministic tracing. The external lookups a trace makes are recorded to an append-only per-case audit log (answers served from a cache and a few read types excepted), so the resulting graph, risk scores, and PDF report carry the case's chain of custody.

Cross-chain tracing

The Hydra engine follows funds across 19 chains and major cross-chain bridges in one unified graph. Deterministic pathfinding means the same inputs always produce the same trace, so results are reproducible. Automatic bridge-hop resolution surfaces the exchange deposit or off-ramp where funds come to rest.

Court-admissible reports

Noxos generates professional investigation reports with graph visualizations, risk scores, and the case's chain-of-custody audit trail. Reports export as a hash-sealed PDF ready for court use. Admissibility is decided by the court; the platform is built to evidentiary standards — deterministic replay, per-hop logging, a chain-of-custody appendix. The tool is built for teams that need evidence that holds up in court rather than dashboards or block-explorer screenshots.

Real-time exploit detection and protocol monitoring

Cerberus monitors a protocol's smart contracts 24/7 with configurable thresholds on native and token flows and instant alerts by email and in the platform's notification centre. The Whistleblower circuit breaker can execute the protocol's pause() function within seconds of a threshold breach, with no human in the loop. A live exploit feed aggregates and classifies hacks, exploits, and vulnerabilities across the Web3 ecosystem.

For investigators and law enforcement

Built for law enforcement, forensics analysts, and private investigators who need evidence that holds up in court. Capabilities include multi-chain tracing, address attribution, sanctioned-address flags, entity grouping, and court-admissible reports. A dedicated government and law-enforcement request path supports agency investigations and subpoena workflows.

Noxos Blackboard (coming soon)

Noxos Blackboard, coming soon, is a manual case-graph tool for investigators. The investigator places addresses as nodes and draws the movements between them by hand (a payment, a bridge, a swap), one arrow at a time. A trail finished in the investigator's own AI chat can be pasted in and drawn as a board, and AI clients such as Claude or ChatGPT can connect over MCP to draw on the investigator's boards. Blackboard is separate from the investigation platform: it reads no blockchain data and runs no automatic tracing, so a board shows only what the investigator, or their AI, put on it.

For crypto theft victims

Victims of a hack, scam, phishing drain, or mistaken transfer can hire a specialist through an asset-recovery case form. Forensic investigators trace the funds across every chain, bridge, and swap and pinpoint where they landed. Cases are handled confidentially, with an initial review within 24 hours and a court-ready report.

For businesses: protocol monitoring

Businesses and DeFi protocols can use Cerberus to monitor their smart contracts in real time and help prevent exploits rather than write post-mortems, and Whistleblower adds an automated on-chain circuit breaker that pauses a protocol on a threshold breach.

Incident response for protocols

When a protocol is exploited, Noxos provides the rapid-response tracing most teams have no in-house capability for. Once funds start moving, the Hydra engine follows them across chains, bridges, and mixers in real time, decompiles the attacker's contract, and clusters the attacker's wallets to establish attribution. Noxos then maps the funds to their choke points — exchanges, stablecoin issuers, and law enforcement — so a freeze can still land, and delivers a court-admissible post-mortem with the full fund-flow graph, timeline, and chain of custody. Protocols can report an active incident or set up a response retainer in advance.

Everyday wallet security

Consumer security tools help everyday users catch scams and drains before signing. They include a Transaction Simulator to preview a transaction before signing, an Allowance Checker to revoke risky approvals, a Scam Tracker, a Contract Scanner and Decompiler, and a browser extension that simulates every signature request.

Guides from the field

• Wallet labels explained: who owns a crypto address — How wallet labels attribute an address to an exchange, bridge, mixer, or sanctioned entity — and how investigators use them to identify an owner.
• Cross-chain investigations: tracing funds across bridges — How investigators follow the money through chain hopping — bridges, swaps, and mixers — in one connected graph across 19 chains.
• Token approval checker: find and revoke risky allowances — Find every active ERC-20 approval across 14 EVM chains, rank spenders by USD at risk, and revoke the dangerous ones.
• Smart contract scanner: check a contract before you interact — Scan any contract for owner privileges, proxy patterns, and known risk signatures before you sign a transaction against it.
• EVM bytecode decompiler: read unverified smart contracts — Turn deployed EVM bytecode back into readable pseudo-source to see what an unverified contract actually does.
• Court-admissible crypto investigation reports — How deterministic tracing and an append-only per-case audit log produce forensic reports that hold up under cross-examination.

Frequently asked questions