![[Webcast Transcript] Considerations and Challenges for Blockchain, Cryptocurrency and NFT Investigations | HaystackID](https://milioncrypto.com/wp-content/uploads/2022/06/og.16123_0702.jpg)
[co-authors: John Wilson, Rene Novoa]
Editor’s Be aware: On Could 18, 2022, HaystackID shared an academic webcast developed to spotlight the foundational fundamentals of blockchain, cryptocurrencies, and NFTs and to current sensible issues for the investigational course of round these transactional applied sciences.
This session, led by one of many world’s main cybersecurity, info governance, and authorized discovery digital forensics specialists, additionally offered an examination of uncooked information on blockchain ledgers, shared tips on how to analysis particular addresses and transactions as a part of an investigational course of, and regarded NFTs from an eDiscovery perspective.
Whereas the entire recorded presentation is available for on-demand viewing, offered in your comfort is an entire transcript of the presentation.
[Webcast Transcript] Concerns and Challenges for Blockchain, Cryptocurrency and NFT Investigations
Presenting Specialists
+ John Wilson, ACE, AME, CBE, Chief Info Safety Officer and President of Forensics, HaystackID
As Chief Info Safety Officer and President of Forensics at HaystackID, John supplies consulting and forensic providers to assist corporations handle varied issues associated to digital discovery and pc forensics together with main forensic investigations, cryptocurrency investigations, and making certain correct preservation of proof objects and chain of custody.
+ Rene Novoa, Director of Forensics, HaystackID
As Director of Forensics for HaystackID, Rene Novoa has greater than 20 years of know-how expertise conducting information restoration, digital forensics, eDiscovery, and account administration and gross sales actions.
Presentation Transcript
Moderator
Good day, everybody, and welcome to at this time’s webinar. We’ve received an incredible presentation lined up for you at this time, however earlier than we get began, there are only a few normal admin factors to cowl. At the beginning, please use the web query instrument to publish any questions that you’ve, and we’ll share them with our speaker. Second, if you happen to expertise any technical difficulties, please tell us utilizing that very same questions instrument and a member of our admin workforce will probably be available to assist you. And eventually, simply to notice, the webinar will probably be recorded and we’ll be sharing a replica of that with you alongside the slides by way of e mail throughout the subsequent few days. So with out additional ado, I’d like at hand over to our speaker to get us began.
John Wilson
Properly, thanks. Good day, and good morning, afternoon, and night to at this time’s worldwide viewers. I hope you’re all having an incredible week. My title is John Wilson. On behalf of the whole workforce at HaystackID, I’d wish to thanks for attending at this time’s presentation and dialogue titled, “Concerns and Challenges for Blockchain, Cryptocurrency and NFT Investigations”. Right now’s webcast is a part of HaystackID’s common sequence of instructional displays developed to make sure listeners are proactively ready to realize their cybersecurity, info governance, and eDiscovery targets.
So the presenters at this time have been purported to be myself and Rene Novoa. Sadly, Rene Novoa just isn’t capable of be with us at this time, attributable to some unexpected circumstances, so that you’re caught with me, however we’ll get by way of it. I’m at present employed at HaystackID. Each of us are skilled veterans in digital investigations with particular experience in digital forensics, assortment of cellular gadgets, and rising information varieties, codecs, together with Blockchain, cryptocurrencies, NFTs, or different digital property. Having served as skilled witnesses in investigations associated to at this time’s matter, I’m excited to have the ability to share with you at this time.
So from a proper introduction perspective, I’m John Wilson. I’m the Chief Info Safety Officer and President of Forensics right here at HaystackID. On this function, I present experience and skilled witness providers to assist corporations handle varied digital forensics and eDiscovery (digital discovery) issues, together with main investigations and making certain correct preservation of proof objects and chain of custody. I often develop processes, create workflows, and lead implementation tasks for shoppers, together with main monetary establishments, Fortune 100 corporations, and Am Regulation 100 corporations. I’ve additionally been lucky to work on a number of the most important issues on document in america and lots of the 39 international locations the place I’ve had the chance to work on instances.
Right now’s webcast presentation is being recorded for future on-demand viewing. A duplicate of the presentation will even be accessible for the attendees as soon as the on-demand model is accomplished, and we anticipate these objects to be accessible on the HaystackID web site quickly after we conclude at this time’s stay presentation.
Presently, let’s transfer into our presentation on cryptocurrency and NFT investigations.
So at this time, we’re going to speak by way of what’s a Blockchain for those who don’t have vital information or understanding of what’s a Blockchain and what are digital property, what are the makes use of of these digital property? Then we’ll get into investigating and the forensics round digital property and Blockchain and cryptocurrencies, and all that enjoyable stuff, how are you aware if digital property exist within the case that you just’re engaged on, after which some suggestions and tips or issues that assist advance these investigations.
So what’s a Blockchain? Actually, it’s troublesome to get right into a dialog about cryptocurrencies and digital property if you happen to don’t perceive what a Blockchain is, to start with. So actually, from a simplistic standpoint, a Blockchain is a ledger of information that information transactions. In order that ledger is public. The Blockchain is public. Anyone that has entry to a consumer can entry the Blockchain for that exact ledger. The transactions are recorded. Most of them say anonymously, nevertheless it’s actually synonymous. Loads of the data might be tracked again, it’s not really nameless. The transactions are recorded to a hash or a crypto string, which is generally called the general public handle for anyone. I imply, it has no figuring out info, however there are methods to lookup and discover a few of that info, however the important thing level is it’s an immutable ledger.
So it’s a ledger that after it’s written to, it could’t be modified, as a result of as you write new blocks to the chain, it’s the older blocks, the validation, and the hash for the validation of these blocks, is what builds the important thing for the brand new block. So if you happen to alter any of the earlier blocks, it could invalidate the whole Blockchain, and so therefore, it’s immutable, if you happen to change something, it’s going to interrupt the Blockchain, new transactions, the brand new blocks, wouldn’t be capable of be efficiently mined or validated, and we’ll get right into a bunch of those phrases right here shortly. However once more, the transactions are on this public ledger, so they’re traceable. You may comply with, “Hey, I’ve received this public handle, this hash key, that’s associated to a transaction or units of transactions”, and you’ll comply with that hash key and see the place these currencies have gone and the place they have been spent. Now, you’re solely capable of perceive the hash key that it’s related to or the handle that it’s related to, and you need to make the most of different methodologies to then perceive what that handle is or who it belongs to.
It’s actually additionally essential to know that there are lots of Blockchains and public ledgers. You get Bitcoin, Ethereum, Tether, Ripple, Dogecoin, advert infinitum. There are tons of of them within the market, or hundreds, actually. After which you can even have non-public ledgers. So you may have monetary establishments that may run a Blockchain or any sort of entity, nevertheless it’s frequent in logistics and monetary establishments, the place a monetary establishment has areas in a number of international locations, as an illustration, and they also’ll use their very own non-public Blockchain to deal with transfers to completely different accounts or completely different areas by way of their Blockchain, as an alternative of utilizing Swift or worldwide wires, and the methodologies that banks historically have used. It permits them to account for and observe these transactions a lot sooner.
And so, loads of attention-grabbing issues are being finished round that, and we’ll speak about there are lots of extra makes use of than simply digital property and simply cryptocurrencies. You have got logistics. Corporations are utilizing the Blockchain to trace – there’s a giant poultry firm, as an illustration, that tracks the eggs that they delivered to the grocery from the conception of the egg, what hen home it was made in, all over packaging, into cargo to the shop, after which truly meting out on the retailer, who bought that dozen eggs. They’ve very concerned Blockchain techniques that observe all of that info. And then you definitely even have sensible contracts. You have got the NFTs. There’s simply loads of exercise, loads of issues that Blockchain may be very properly suited to.
Once more, it’s this immutable public ledger. It turns into very intriguing for doing loads of these several types of issues. Good contracts are very attention-grabbing. To interrupt a wise contract down into easy phrases, a wise contract is sort of like a merchandising machine, these old fashioned merchandising machines. It’s received all these things in there, after which it’s received a keypad with some letters and a few numbers. So that you stroll as much as the machine and also you punch in I would like B2, and so B2 goes to drop you out these Bugles chips or no matter it could be in that exact slot. So you possibly can consider a wise contract as similar to that. So as soon as anyone goes as much as the machine, they meet the situations to set off the sensible contract. So like within the merchandising machine, the situation is that I’ve put within the acceptable quantity of foreign money into the merchandising machine, I’d then punch the important thing that claims, hey, I would like B2, after which it dispenses B2, and that’s just about how a wise contract works.
As soon as the situations are met, you place within the acceptable foreign money, or the suitable enter, no matter which may be, the sensible contract triggers and it does no matter directions that sensible contract is meant to do, and that may be signing an actual property contract, it may be establishing a course of to ship a car to anyone, it may be loads of various things, and it may be very advanced with a number of steps. However ultimately, it’s actually only a merchandising machine. It’s a course of when the situations are met, the method triggers, goes by way of no matter steps it has, and there could also be checkpoints or new actions that must happen. So much like the merchandising machine, you begin the sensible contract by placing the cash in, then it’s ready for enter. You need to choose the letter first, after which the sensible contract’s like, okay, I now have a letter, so now I’m going to ask for a quantity, after which you choose a quantity, after which it provides you the actual merchandise associated to that. There’s loads of steps concerned in that, although it appears quite simple. You have got the foreign money getting in, you may have validating, did I get the suitable quantity of foreign money? Sure. Okay, now I can ask for the enter to say what I need to be distributed out of the machine, and increase, okay, I’ve received A and I’ve received 2. Okay, now I’ve received my correct inputs. Now I’ve to spin the coil. Spit out the only merchandise. Did the only merchandise fall by way of the trapdoor? Sure, it did. Did the trapdoor get opened? Sure, it did. Did the merchandise get pulled out of the trapdoor? Sure, it did. Now the contract is fulfilled, it’s accomplished. In order that’s actually the primary gist.
So what varieties of digital property are we speaking about? Once more, we’ve gone by way of most of this however you may have digital currencies, cryptocurrencies, and NFTs. NFTs are artworks which are tied right into a Blockchain so you possibly can present sole possession, who owns that exact merchandise, a lot of dialogue round NFTs, and we’ll get somewhat extra into that in a bit. Stablecoins. Stablecoins are pegged to one thing or backed by one thing. So you may have USDT, the US greenback tether, you may have a bunch of various tethers of that nature, and that’s actually attention-grabbing territory as a result of there have been some challenges in that lately, and we’ll speak extra about that shortly as properly.
Then you may have Blockchains, your digital property which are strictly digital coupons and vouchers, like Burger King will ship out to prospects that submit for a sure factor or do sure issues, they’ll give them digital vouchers or coupons which are tracked on the Blockchain, to allow them to observe the redemption, who redeemed it, the place they redeemed it, how they redeemed it, and all types of different info. So it’s a really helpful advertising instrument.
After which you may have the sensible contracts, and sensible contracts, once more, can do many alternative issues. They require that you’ve that acceptable enter, they require that acceptable actions are taken, and the conclusion.
One final remark about sensible contracts that’s actually essential is as soon as the triggering situations are met, the sensible contract will execute. It’s constructed into the Blockchain that approach. So you need to be – a complete space that’s going to have to be checked out is basically going to be… how properly the sensible contract itself was written, as a result of once more, as soon as situations are met, the sensible contract triggers, so if in case you have a programming error and that sensible contract triggers due to that programming error, it’s going to execute, it’s going to do what it’s purported to do and comply with by way of with that course of.
So who makes use of digital property? What are the makes use of of digital property? Definitely, most individuals have heard concerning the legal or unhealthy exercise, ransomware, darkish market, darkish net, the place individuals are transacting and paying for issues in cryptocurrency, however there are one million reliable causes. Loads of industries are utilizing it. It’s used to resolve geographic points. So that you’re in a market house, the place perhaps the normal foreign money in that market, in that geographic space just isn’t very steady or dependable or accessible, and digital property can definitely present some benefits there.
While you begin speaking concerning the industries that become involved in cryptocurrencies, there are loads of companies now accepting cryptocurrencies. There are loads of monetary establishments utilizing it to, once more, run non-public ledgers that switch currencies backwards and forwards throughout their organizations. Many, many alternative industries that partake and have some very legitimate makes use of for it. It’s now not strictly seen as a legal exercise the place initially a a lot bigger share of the exercise on the cryptocurrencies was legal. Right now, there’s loads of legitimate exercise, loads of makes use of, loads of investing and buying and selling, day buying and selling, like hedge funds which are being backed by cryptocurrencies. There’s loads of exercise across the cryptocurrency utilization and positively adoption throughout the monetary market.
It’s nonetheless extremely unregulated, it’s nonetheless very younger. The EU is simply now beginning to do some regulation round cryptocurrencies and that may proceed to mature, after which the Blockchain, digital property will proceed to evolve and mature as {the marketplace} evolves and matures round it.
So what are a few of these legitimate makes use of? Why would a enterprise become involved in it? So, there are loads of monetary makes use of, the place organizations are using the cryptocurrencies to promote items, obtain items; some organizations are utilizing cryptocurrencies as a hedge towards the volatility within the conventional currencies. You have got very vital functions within the micropayments world the place it’s a lot more durable to take care of micropayments, pennies and cents. Loads of currencies are beginning to get rid of a few of that, or loads of locations are beginning to not carry the change, however cryptocurrencies can go right down to decimal factors of cents. A single little bit of Bitcoin is down into the hundredth of cents and might be divided in a lot smaller chunks, and it’s additionally loads of exercise round decreasing or minimizing the prices per transaction.
So, the associated fee per transaction in some cryptocurrencies might be a lot decrease than, say, a typical bank card alternate charge. So when a enterprise takes a bank card, they pay a share payment of that transaction with a purpose to obtain these funds, and for companies, these cryptocurrencies can cut back what these charges are, and make it in order that the precise group promoting the products can seize extra of the worth that they’re getting paid, and whether or not that’s handed on as value financial savings to the buyer or handed on as higher profitability for the group, there loads of prospects there, however that diminished payment construction’s definitely making vital positive aspects within the commerce marketplaces. You may see there’s loads of
shopper exercise round this, round the usage of cryptocurrencies. It’s simpler. They will keep one pockets with a number of currencies in it. It has password management or entry controls, so it’s a lot more durable to be stolen generally phrases, however individuals don’t at all times handle their passwords correctly, and so that may additionally develop into an issue. Loads of attention-grabbing issues there.
So this can be a actually attention-grabbing one as a result of this slide was finished a month in the past as we have been getting ready to do that presentation, and so Bitcoin, once we did this, was price 43,207. Properly, the entire cryptocurrency market truly has considerably dropped. So at this time’s value this morning, a Bitcoin is price about 28,953, so you possibly can see it’s a 25% drop, nearly 30% drop over the course of the final 30 days. Ethereum once we did this was price $3,341, and at this time it’s price $1,952. Once more, a major drop. Tether is an attention-grabbing one and we’re going to speak extra about this in a couple of moments, however Tether is a stablecoin, it’s pegged to the US greenback, and it’s purported to at all times be price $1. Right now’s market, it’s price 99 cents as a result of there’s been excessive volatility and they also’re having bother sustaining that peg. Very attention-grabbing stuff. Very difficult. BNB, one other one made a major loss. 498 was the worth once we did this, it’s now price 290. So, as you possibly can see, the crypto market cap was over 2 trillion once we offered this slide. Right now’s market worth, cryptocurrencies, the full quantity is simply price 1.24 trillion. In order you possibly can see, a really vital drop within the market.
Now we’re going to begin getting in direction of corporations which are utilizing or adopting cryptocurrency so we are able to begin moving into the precise investigation facet. Why do we have to perceive investigations? All of this was foundational info, however now you possibly can see, you’ve received Starbucks, Subway, Microsoft, professional sports activities groups, Tesla, all of them buying and selling, accepting cryptocurrencies in a single form or one other – Complete Meals, Burger King. Burger King’s one of many huge ones that makes use of these digital coupons. Very attention-grabbing stuff. Complete Meals Market, so staple objects, your grocery retailer, taking cryptocurrencies. Very intriguing stuff, or hedging with cryptocurrencies.
Okay, so now we’re going to speak about non-fungible tokens. Clearly, it’s been a scorching matter, everyone has been speaking about NFTs, and so what’s an NFT? Why is it essential to know what’s happening there? So, NFTs are actually digital objects, music, artwork, movies, no matter, digitally. There are tweets which are captured as pictures that may be offered on the Blockchain and be certain that there’s a sole proprietor that has full rights to it that owns it. After which that particular person can switch it. So it’s like artwork possession, is a method of taking a look at it, however with a a lot simpler to entry market. It may be simply transferred, and once more, it’s an immutable ledger and the possession might be confirmed very simply and shortly by going by way of the ledger and seeing who has the final rights to it, who transferred the final rights to it.
So, once more, there’s been loads of attention-grabbing issues. You have got “Beeple” who had by no means offered something over $100. In March 2020, his first work, his first NFT, The First 5,000 Days, offered for an astounding $69 million. Loads of curiosity there and within the market itself. It positively drove some worth for him. The worldwide marketplace for NFTs is at present about 22 billion, however it’s quickly rising. There are new NFT marketplaces being launched nearly day by day. You’ve received celebrities and types which are all becoming a member of in now. One of many newest NFTs that’s being talked about is you may have Gucci and different manufacturers which are promoting digital variations of a handbag, as an illustration, to be used throughout the metaverse, within the digital world, so you should buy a Gucci bag, and a few of these Gucci baggage are promoting for greater than the bodily counterparts in the actual world, which is totally insane. So that you personal a replica of the digital model of it, and it’s being offered for greater than precise bodily gadgets.
Stablecoins, we talked about {that a} good bit. Why do you need to perceive them? So that they’re digital currencies backed by some type of asset, and that’s sometimes a bodily asset like gold or silver, or fiat foreign money, the US greenback, or the euro, or the pound, the sterling. They’re a stablecoin, they’re backed, and so they’re pegged to these currencies. In order that’s the place issues begin to get attention-grabbing. We will speak about Terra that was finished within the… it was a US dollar-based stablecoin. The market collapsed within the sell-off final week on Could 9, and so a Terra that was supposedly pegged to a greenback, so its worth ought to at all times be $1, is now price roughly 10 cents, and it has been de-pegged from the US greenback since Could 9, because the market tanked that day, and it has but to get better and is more likely to by no means get better, however actually essential to know how that occurs and the place that comes from. So principally, you may have a cryptocurrency that’s backed by some type of asset, and so they have a promise to pay or keep sufficient property to maintain the worth of that foreign money. And might be very attention-grabbing stuff.
Good contracts, we went by way of this a great bit already. Ethereum is likely one of the platforms that loads of sensible contracts are finished on. Loads of the sensible contracts are being utilized by varied corporations. Starbucks is utilizing sensible contracts to have interaction and transact with their espresso growers and be certain that they’re utilizing acceptable practices, assembly the phrases of their contracts and their agreements, in order that the these sensible contracts are being executed to buy, management the worth, and transact the espresso purchases, as an illustration.
So, why do we have to get into investigations? Why are we right here at this time? So, as we stated, there was loads of legal exercise early on in cryptocurrencies. That has considerably diminished, however there’s nonetheless loads of legal exercise there, however past that, you may have loads of legitimate enterprise causes now. So you may have organizations which are using these cryptocurrencies for reliable functions, and so when reliable functions come, lawsuits begin getting tied in, incidents happen the place an organization’s being acquired or an insolvency, and the way do you perceive what crypto property that entity owns? How do you perceive the place they’re, what’s occurred to them? The checklist goes on and on, however there’s a giant want to essentially perceive what transaction issues happen. Insurance coverage claims, “Hey, my paper wallets received stolen”, cyber losses; ransomware occasions the place organizations pay ransomware in cryptocurrencies; the valuations of damages, if somebody stole cryptocurrencies from you, how do you determine what that cryptocurrency’s price? Is it price what it was the day it was stolen?
Once more, as you possibly can see, once we talked about it, cryptocurrencies are extremely risky. They go up and down typically giant percentages in a day, and so, how do you consider these damages? Is it the damages primarily based on at this time’s worth, the damages primarily based on the day that these currencies have been stolen? Can any of it’s recovered? How do you work that out? Fraud and corruption exercise? One of many case research that I speak about often concerned a merger and acquisition situation the place the corporate had acquired cryptocurrency – that the corporate that was acquired had acquired cryptocurrencies as a hedge or as safety for the eventuality of a ransomware occasion, and they also had this nest egg of cryptocurrencies sitting on the books, so to talk, within the occasion an occasion occurred, then they received acquired, so the brand new firm acquired them. The brand new firm didn’t perceive that that they had these cryptocurrencies and actually had no consciousness of it, and as that transaction occurred, shortly after the acquisition, the brand new firm, the fuller entity, did get ransomwared. So then they’re sitting in a board assembly and, “Hey, I feel Firm X had acquired some cryptocurrency as a hedge to have the ability to pay for the ransom”, the board had determined they wanted to pay the ransom as a result of they couldn’t afford the downtime and varied different points, and determined to go work out the place that cryptocurrency was, and so they couldn’t discover it. No one had any information of it. They couldn’t discover the place it was. We needed to do an investigation and we have been capable of decide that the previous CFO of the group determined that no one knew about that cryptocurrency so he would simply transfer it to a few of his personal wallets, and we have been capable of hint that, observe that, unwind that, and efficiently get better the big majority of that cryptocurrency for the group.
There are business instruments. There are additionally public, free instruments. You have got the business instruments CipherTrace and Chainalysis and Maltego that do loads of this. They’ve loads of nice options that enable you unwind or perceive most likely one of the crucial crucial issues in relation to a cryptocurrency investigation, which is attribution, who owns that exact hash key, that exact pockets, who’s the proprietor or consumer of that pockets, and so these softwares do keep some attribution as entities get discovered, in addition to have instruments to help you construct your personal entities as you perceive what entities personal sure cash, and begin constructing an attribution database, which might be actually essential in your investigations.
They do a bunch of different issues as properly, like present threat rankings, how a lot exercise has a selected pockets had at midnight market, or how a lot exercise of pushing foreign money by way of spinners or mixers, and that are instruments to obfuscate or launder the cash and stop individuals from having the ability to work out the place the foreign money went or how a lot foreign money there was et cetera.
So, these instruments might be extraordinarily helpful and useful in that regard. However it may be finished with Blockchain.com Explorer that does Bitcoin. You may go and lookup transactions immediately on these platforms. You are able to do the analysis. You may work out – you possibly can comply with the path of a transaction, nevertheless it’s handbook whereas you may have some extra automation within the business instruments.
So, what types of issues do you could perceive if you happen to’re going to get into investigating cryptocurrencies? It’s good to perceive pockets varieties, a chilly pockets, a scorching pockets, software program, {hardware} wallets, paper wallets, getting a legitimate understanding of what the wallets are, what you are able to do with a pockets. The addresses, the general public handle versus the non-public keys. So, sometimes for the proprietor of a pockets, you may have your public handle, that’s the handle the place individuals can ship foreign money to, or you possibly can spend your foreign money. And you need to authenticate along with your non-public key. Your secret is what unlocks it. It says, “Hey, I personal this”. And cryptocurrency may be very very similar to fiat foreign money in that approach. When you have it in your hand and also you management it, you possibly can spend it. And so, within the cryptocurrency world, which means if I’ve the general public handle and the non-public key, I can spend that foreign money, I can do no matter I would like with that foreign money, I can switch it. And that’s the place loads of threat comes into play.
Now, you need to begin moving into an alternate. Alternate transactions, attention-grabbing issues there. Within the exchanges, in the event that they’re US-based, they comply with the KYC banking guidelines. And so, they must know your buyer, they’ve received to have that attribution constructed out for that exact handle that will get created on an alternate.
Then you may have the funding platforms the place you don’t truly personal the asset. So, if you happen to exit on Robinhood at this time, and you purchase Bitcoin you don’t truly personal the Bitcoin, you personal an asset registered with Robinhood that’s tied to that Bitcoin.
Now, Robinhood, specifically, is launching its personal wallets, and so they’re going to begin supplying you with the power to personal your precise cryptocurrency and be capable of transact in it and switch it. They’re launching their very own pockets. However in at this time’s market with Robinhood, if you happen to have been to go take a look at the general public ledger if you made a purchase order of Bitcoin, you received’t see your transaction there as a result of Robinhood owns a big portfolio of cryptocurrency and so they simply transfer round task as to who owns it and purchase further foreign money in the event that they want. Nevertheless it’s finished with a shadow ledger that claims, “OK, so we’re going to assign X {dollars} of X factors of Bitcoin to this consumer”. And so, that ledger simply tracks what your portion of possession of that exact asset is.
Then you can begin speaking about privateness cash. Privateness cash, like DOGE and monero the place they’re a lot more durable to unwind, they’re a lot nearer to an nameless foreign money as a result of they do issues to obfuscate the possession, they do issues to create new addresses for every transaction. When the transactions get put into the blocks, they seed it with different transactions. They do issues to assist actually obfuscate and preserve the power of monitoring down that cryptocurrency – to make it tougher primarily.
After which the very last thing, simply extra of an consciousness and understanding is mining. What’s mining? Why is mining a time period associated to cryptocurrencies? So, mining is the method of validating a block throughout the Blockchain and creating the brand new foreign money. So, Bitcoin, each time you mine a block, there’s a cost of cryptocurrency to the profitable miner of that block. Now, the profitable mining is the method of operating the mathematical equations and doing the hashing to find out what the hashes that solves – what’s the hash for a selected block. So, as you undergo on a brand new block, you get all the data – they get all of the details about the transactions contained in that block which have been verified and are in that block. After which you need to remedy for the hash of that block. And that’s a mathematical components that will get scaled. Sometimes, it simply will get more durable and more durable as {hardware} developments happen and as software program developments happen, nevertheless it might truly simplify it as properly as a result of it’s sustaining the method to make sure that it takes 10 minutes to mine a block within the Bitcoin world. So, that course of is basically attempting to make sure that it takes 10 minutes to mine every block. And that creates the brand new phase of Bitcoin that will get put into {the marketplace} with every block that’s mined. And that will get halved at common intervals till there will probably be no extra Bitcoin to be added to the block, and there’ll be 21 million Bitcoin on the block. After which at that time, it’ll simply be motion of the Bitcoin, after which the transactional charges associated to that Bitcoin. That will be the one cost.
So, actually essential to know in an investigation context, you’ve received to exit and also you’ve received to do forensics. You’ve received to go take a look at the computer systems. You’ve received to find out, “Hey, are there cryptocurrencies concerned on this explicit asset?” As I stated, typically, you’re going to be doing an investigation and know that there’s cryptocurrencies concerned there. You might even know some pockets addresses. You could have already gone to Blockchain.com Explorer and traced a few of these transactions, after which found out some new pockets addresses perhaps. And you could go discover them on the gadgets that you just’ve accessed. That’s the place these regexes come into play. And these are the fundamental regexes that may enable you discover any Bitcoin, Ethereum, monero, or sprint. And there’s a complete library of those. You may construct – the hashes do have a selected sample, sometimes. So, you possibly can construct and develop these for nearly any cryptocurrency that you really want. Definitely, a really useful instrument.
However you do have to know, doing that forensic investigation remains to be one of the best and most tried and true approach of starting an investigation as a result of you might or might not know that cryptocurrencies are concerned in a selected group or a selected matter as you’re beginning to do the investigation. It’s an incredible observe in at this time’s day and age to begin on the lookout for these cryptocurrency signatures, attempting to find out are there wallets put in? Have they got a {hardware} pockets or software program pockets that has been accessed? Or an internet pockets that’s been accessed by a selected endpoint, whether or not it’s a cellular machine or a pc. Understanding the presence of these cryptocurrency instruments is definitely a sign that you could be need to begin investigating it and figuring it out.
That is the place issues begin to get much more sophisticated as a result of, once more, you do must exit and begin monitoring these transactions. One of many investigations we did, we needed to observe the transactions, over 700 transactions deep. For those who’re utilizing these free instruments, that may be fairly time-consuming, going single transaction by single transaction and dealing down a tree versus utilizing a number of the business instruments. However the business instruments are very, very expensive. And all the pieces that they do might be finished by the free instruments. It’s only a extra handbook course of, aside from the business instruments do present rankings. Once more, they’ve like a rating. Nearly consider it like a – you possibly can consider it like a credit score rating. And so, a selected pockets may have a credit score rating that claims, “Hey, that is larger threat, it’s been concerned in loads of darkish net transactions, or it’s been concerned with different wallets of identified nefarious actors” as a result of they’ve that attribution constructed out. And so, due to this fact, it has a better threat rating that claims, “Hey this can be a way more dangerous factor”.
From there, I’m going to begin tackling a number of the questions which have are available in at this time. Once more, your finest strategy for any cryptocurrency investigation is basically delving into the forensics first. After which if in case you have a major quantity of transactions or a major quantity of IDs and stuff, I actually advocate having knowledgeable that’s received vital expertise coping with cryptocurrency investigations, as a result of they are often sophisticated. They are often fairly difficult, particularly as you begin having cross-Blockchain transactions the place individuals are going by way of an alternate. So, they’ve Bitcoin, and so they’re going by way of an alternate and so they’re shopping for Ethereum or they’re shopping for monero or different cryptocurrencies that may make issues extraordinarily extra sophisticated to comply with and observe.
So, now we have our first query that was requested is, “Utilizing Blockchains to trace real-world property like eggs, does this logistically work? How do I cease one egg being swapped for one more egg? Do you want some sort of tattoo or product like a QR code linking to the NFT or is there one other approach?”
So, they do have barcodes like on the packaging, and typically even throughout the precise objects the place the logistics chains are utilizing it. It’s extraordinarily attention-grabbing, the place they’ll truly comply with an egg from the hen home all the way in which to the grocery retailer till the purpose of checkout when anyone truly purchases that exact bundle of eggs.
And so, then that particular person goes dwelling and so they get salmonella from these explicit eggs, they’ll simply backtrack on to what vehicles it was on. A few of them are getting much more refined the place that Blockchain, that logistics Blockchain is definitely monitoring the temperature of the truck. It’s getting recorded inputs from the temperature of the truck to know if there was a temperature variation throughout the truck that was delivery them from the producer location to the distributor location, or from the distributor location to the precise retailer.
So, there are loads of attention-grabbing controls round there. There are loads of issues being finished with RFID chips linking into these logistics Blockchains. So, they’re getting automated inputs from these RFID chips. There’s loads of actually attention-grabbing actions and issues happening round it. However sure – to allow them to truly do this monitoring. It’s finished by way of barcode/QR code kind info on these gadgets that permits them to try this monitoring.
So, the following query is said to anyone simply stating they didn’t know that they didn’t truly personal the Bitcoin in Robinhood.
And so, that’s right. So, within the Bitcoin public ledger, Robinhood truly owns these Bitcoins at present. Once more, that’s altering with Bitcoin, and a number of the different platforms. However in Robinhood, they’ve an inner ledger that claims, “Hey, we personal 500 Bitcoin, as an illustration, and that 500 Bitcoin is distributed throughout these individuals, that every particular person owns a little bit of it”. And so, they’ve their very own inner ledger that tracks that possession versus being out on the precise public ledger.
That public ledger solely says, “Hey, Robinhood has all of those cash”. So, then if you’re speaking about doing investigations, you do have to truly exit and subpoena Robinhood and say, “Hey…” if the corporate owned a Bitcoin by way of Robinhood, you would need to truly subpoena the data from Robinhood versus wanting on the Blockchain itself. And that’s only a easy finite instance, however there’s loads of various things that must occur round that and it may be very attention-grabbing.
So, then now we have – the following query is, “Is possession of Bitcoin at all times public? Is it attainable to know the way a lot Bitcoin is in chilly storage at any time?”
Attention-grabbing query. Sophisticated reply. So, the possession of the Bitcoin is public. It’s a public ledger. Each motion – each creation of Bitcoin, after which each motion of that Bitcoin from that creation is tracked in that public ledger. Once more, it’s tracked by these public addresses, by your pockets handle. And so, these addresses are public and so they’re there.
Now, can I inform what’s in chilly storage? You may’t as a result of it – all you realize is that that pockets exists, that handle, that public handle exists. What kind of handle it’s, is it a chilly storage pockets the place they’re simply printing it out, placing it on paper? There’s no option to observe or know that.
Typically, they are saying that no less than 25% of Bitcoin is lifeless foreign money, foreign money that individuals now not have entry to. That foreign money can now not be accessed, as a result of the individuals don’t have the non-public keys to entry it, or they transferred it to an invalid handle, and in order that invalid handle has no – there isn’t a proprietor of it. So, there’s some attention-grabbing issues that happen round that.
Now, if you happen to begin speaking about monero and privateness cash, once more, nonetheless a public ledger that may be absolutely traced, to the extent that that exact handle has entry to the coin. The challenges are actually that loads of these privateness cash, they’re taking your $10 transaction, as an illustration, breaking it up into 5 $2 transactions, or extra sometimes, a $1, a $3, a $2, and a $1.50, and a $1.50. And all these transactions are being mixed to make your transaction. And so, they’re breaking it up into these a number of transactions by way of automation. And it turns into very arduous to comply with and hint that foreign money due to the way in which they operate. However loads of exercise round that, however it’s nonetheless a public ledger. And you may nonetheless take a look at that public ledger, and we’re nonetheless capable of construct some stage of attribution on these ledgers.
So, subsequent query. “Simply to be clear, can the forensic investigation uncover who the precise particular person is within the management of the pockets i.e., to difficulty authorized proceedings towards a selected particular person?”
Nice query. It’s attainable. It’s not essentially constructed into the Blockchains themselves. However once more, by way of the event of attribution, by way of the event of the forensics investigation, you seize an individual’s pc, you discover the precise wallets they’ve, after you have these addresses, perhaps you establish they got here by way of an alternate like Coinbase right here within the US, and so then you possibly can then flip round and subpoena Coinbase. You may difficulty orders to have that foreign money frozen. There are loads of prospects.
How that every one will get interpreted within the authorized system remains to be sort of younger. There’s not loads of case precedent. However there’s loads of exercise there. There are loads of issues that you are able to do by way of… when anyone owns that foreign money by way of an alternate the place they do have KYC necessities, you may get loads of that info, and you’ll proceed with that in a authorized courtroom.
Now, is that going to say that you just’re going to achieve success with that on a regular basis or each time? Completely not. It’s a matter of determining, are they utilizing an alternate? Is their pockets primarily based by way of an alternate? Or are they only utilizing a {hardware} pockets the place they’ve direct management and entry to their foreign money? Or in different instances, you may have the Robinhood the place you don’t truly personal the foreign money. A lot more durable to perpetrate fraud with the foreign money concerned within the platforms like Robinhood. That’s coming as a result of they’re launching their very own {hardware} wallets, their very own software program pockets the place individuals may have entry to their foreign money and be capable of truly transact with the foreign money that they’ve invested in by way of that platform. So, loads of prospects there that may be taken benefit of.
However the parting thought right here is it’s refined, it’s difficult. They don’t seem to be easy investigations. Sometimes, although there’s a public ledger, there’s loads of work to be finished to unwind them, examine them, observe it again, construct attribution to who’re the people concerned in these explicit transactions and objects.
Your finest technique of unwinding most cryptocurrency issues begins with a great forensic course of. Accumulating the machine. Accumulating the mobile phone. For those who’re particularly doing a crypto investigation and have malfeasance with the cryptocurrency, getting that machine, that cellular machine in an unlocked state the place you may get entry to the pockets and be capable of decide the precise pockets addresses and stuff might be extraordinarily useful.
Once more, a few of that info might be gained by way of the forensic course of, doing the forensic pictures of it, after which looking for the addresses and figuring out the cryptocurrency addresses. However your mileage might range relying on the sophistication of the consumer, the actual varieties of transaction and actions that they’re doing.
All that being stated, I feel we’re nearly on the prime of the hour. I’ll ask if there are any final questions earlier than we transfer on.
Appears to be like like we’re good. So, I need to thank all of you who took the day trip of their schedules to take part in at this time’s webcast. We all know how helpful your time is and respect you sharing it with us. We additionally hope you may have the chance to attend our subsequent month-to-month webcast at present scheduled for June 22nd, 2022. Essential matter for this upcoming webcast will probably be Information Safety and Privateness with Cross-Border Transfers. Yow will discover info on this forthcoming webcast in addition to on-demand variations of previous webcasts on HaystackID.com.
Thanks for attending, and we hope you may have an incredible day.
If anybody does have any questions, please be happy to achieve out. We’re completely happy to reply the questions or interact with you, present no matter info we are able to. It is a matter that’s close to and expensive to my coronary heart and I’d like to dig in and speak about it. So, please be happy to achieve out.
This concludes at this time’s webcast. I hope you may have a beautiful day.
