Course Outline
Foundations of Blockchain Technology
Decentralization, openness, and transparency as core architectural features
Cryptographic building blocks that secure the blockchain: hashing, digital signatures, Merkle trees
Consensus mechanisms: Proof of Work, Proof of Stake, and emerging alternatives
Nodes, miners, validators, and the structure of a live network
Cryptocurrency Landscape
Bitcoin and its original ledger architecture
Ethereum and account-based smart contract execution
Privacy-focused chains: Monero, Zcash, and how they differ from transparent ledgers
Stablecoins, alternative chains, and their role in illicit financial flows
Hands-On Lab - Reading the Blockchain
Connecting to Bitcoin and Ethereum nodes for real-time data access
Navigating block explorers and querying live transactions
Interpreting raw transactions, scripts, and smart contract calls
Tracing a wallet's history on transparent blockchains
Wallets, Keys, and Transaction Mechanics
Wallet types: web, desktop, mobile, hardware, custodial vs. non-custodial
Seed phrases, key derivation processes, and recovery methods
UTXO versus account-based transaction models
Addresses, change outputs, and transaction graph analysis from an investigator's viewpoint
Mining and Trading as Investigative Context
Mining operations, mining pools, hash rate, and how mining is exploited to launder or generate funds
Centralized exchanges (CEXs), decentralized exchanges (DEXs), and over-the-counter (OTC) desks
KYC and AML controls at exchanges and their failure points
How trading behaviors can obscure underlying corruption activities
Smart Contracts and DeFi Surface
Understanding smart contracts and how their state is visible on-chain
DeFi fundamentals: swaps, lending, liquidity pools, and yield farming
Cross-chain bridges and wrapped assets used for obfuscation
Analyzing contract interactions to identify investigative clues
Hands-On Lab - Wallet and Transaction Forensics
Examining hardware and software wallets in a secure environment
Recovering and analyzing data artifacts from seized devices
Reconstructing transaction graphs across UTXO and account-based chains
Address Clustering and Attribution
Common-input clustering and other standard industry heuristics
Detecting change outputs and identifying behavioral patterns
Linking on-chain addresses to real-world identities using OSINT techniques
Combining web scraping, social media, and leaked data sources for attribution
Dark Web, Marketplaces, and Criminal Cryptocurrency Flows
M mapping criminal economies on dark web marketplaces
Common crime types: scams, fraud, contraband sales, sanctions evasion
Tracking funds from initial deposit to final cash-out
Warning signs of corruption-linked cryptocurrency activity
Privacy-Enhancing Tools and Counter-Forensics
Mixers, tumblers, and CoinJoin implementations
Privacy coins and the limitations of public-chain tracing
Cross-chain bridges and asset wrapping as layers of obfuscation
What tracing techniques can and cannot recover under each method
Hands-On Lab - Tracing a Suspect Wallet
Using open-source tools to follow complex transaction graphs
Clustering wallet networks and assessing confidence levels in attribution
Documenting findings as a structured intelligence report
Money Laundering Typologies in Crypto
Placement, layering, and integration adapted for digital assets
Layering techniques via decentralized exchanges, bridges, and mixers
DeFi protocols as laundering channels and how to analyze them
Cash-out methods: peer-to-peer markets, OTC desks, and prepaid instruments
Ransomware, Theft, and Scam Response
Ransomware payment structures and immediate response actions
Negotiation tactics and recovery strategies, including risks and limitations
Exchange hacks, rug pulls, phishing attacks, and large-scale theft analysis
Collaborating with victims to preserve evidence without jeopardizing the investigation
Cross-Chain Investigation
Tracing assets across Bitcoin, Ethereum, and EVM-compatible networks
Following funds through bridges and wrapped tokens
Matching on-chain data with exchange records and off-chain information
Hands-On Simulation - Corruption Investigation Lab
Simulated bribery chain spanning multiple chains and a mixer
Constructing a clear narrative from fragmented on-chain data
Creating chain-of-custody documentation for digital evidence
AML Compliance and the Legal Landscape
FATF recommendations, the Travel Rule, and varying jurisdictional requirements
AML and KYC obligations for virtual asset service providers
Sanctions, politically exposed persons (PEPs), and corruption-related typologies
Integrating cryptocurrency insights into existing compliance frameworks
Working with Exchanges and Cross-Border Partners
Subpoenas, Mutual Legal Assistance Treaties (MLATs), and information-sharing mechanisms
Freezing orders, asset preservation, and seizure procedures
Coordinating cryptocurrency tracing with traditional financial investigation methods
Digital Evidence and Courtroom Readiness
Maintaining chain of custody for cryptocurrency artifacts and on-chain evidence
Presenting blockchain data to non-technical stakeholders and juries
Addressing common challenges to digital evidence and defending findings
Working with expert witnesses and external technical advisors
Capstone - End-to-End Corruption Inquiry Simulation
Conducting a full investigation from initial intelligence leads to final resolution
Mapping wallet networks, establishing attribution, and building timelines
Coordinating with exchanges and international partners
Delivering a court-ready report and oral presentation
Summary and Next Steps
Requirements
- Intermediate technical knowledge, including networking basics and fundamental Linux command-line usage
- Practical understanding of cryptographic concepts such as hashing and public-key encryption
- Experience in financial investigation, cybersecurity, digital forensics, or compliance
- Familiarity with at least one scripting language is useful but not mandatory
- Basic understanding of financial transactions and AML principles
Target Audience
Investigators and forensic analysts working in anti-corruption agencies, financial crime units, and law enforcement. Cybersecurity professionals supporting fraud prevention, AML initiatives, and digital evidence collection. Compliance and risk management specialists operating in regulated industries with growing cryptocurrency exposure.
Testimonials (1)
- like the blockchain introduction. For a blockchain newbie like me, its englighten me. - Like the technical workshop, also interesting
