Wallet drainage response

Your assets moved without your consent. Here's exactly what to do next.

Stay calm — most of what can still be protected depends on the next fifteen minutes, not the next day. These four steps come first, before anything else.

Confirm the transaction in a block explorer.

Revoke any remaining wallet permissions.

Move remaining assets to a new wallet.

Record the transaction ID and timestamp.

See how we can help Read our legal notice

Two ways to proceed

Work through it yourself, or hand us the trace.

Both options start from the same technical process. The difference is whether you run it yourself with a written guide, or have it done for you.

Self-service

Incident Response Playbook

$29.99 · one-time, PDF

Step-by-step containment, evidence, and reporting process
Fund-flow logic and explorer guide by chain
Report and reporting-channel templates included
Instant digital download

Get the playbook

Digital download via Gumroad

Handled for you

Premium Fund-Trace Analysis

$249 · one-time

Manual TXID and fund-flow analysis of your case
Written report delivered within 48 hours of acceptance
If funds reach a centralized exchange, we contact it directly with your case documentation
Report can support law-enforcement filings

01 Submit case → 02 Reviewed & accepted → 03 Case number assigned → 04 Payment instructions sent → 05 Report within 48h

What to expect

No guarantees. No pressure. No upsell.

No recovery guaranteesWe identify where funds moved and, where possible, notify the receiving exchange. Blockchain transactions cannot be reversed.

No fee unless acceptedThe $249 fee is only requested after your case is manually reviewed and assigned a case number.

Independent analysis, not legal adviceWe are not a law firm and do not provide legal or financial advice. Our reports are technical documentation only.

Legal & Privacy Notice

Ciryou — crypto incident response

P.O. Box 1432, Grand Cayman, KY1-1110, Cayman Islands

OperationThis informational website and technical analysis service is operated by CryptoGuard Forensics Ltd., P.O. Box 1432, Grand Cayman, KY1-1110, Cayman Islands. Contact: info@ciryou.com

Data & PrivacyWe do not use tracking cookies, marketing pixels, or analytical software — your visit to this website is entirely anonymous. We do not collect or store any data sets ourselves.

Privacy Policy (short form)When you submit the case-intake form, the information you provide (name, email, transaction ID, and case description) is received and held by our data processor, Formspree, on our behalf. This data is used solely to review your case and prepare your report. It is retained only until your report has been completed and, for security reasons, is permanently deleted no later than 3 months after submission — whether or not a case was accepted. Digital downloads and payments are handled entirely externally by our merchant partner; we do not process or store payment data on our own systems. You may request confirmation of what was submitted, or ask for early deletion, at any time by contacting info@ciryou.com.

Technical DisclaimerWe provide independent technical blockchain ledger analysis, on-chain tracking support, and educational emergency documentation. We are not a law firm, we do not provide legal advice, and we do not offer financial services or guaranteed asset recovery.