01
Resolving exchange account restrictions
AML and KYC reviews, Source of Funds, and restrictions on an account or withdrawals.
Learn about this serviceCryptoassets · Investigations · Account restrictions
Are your cryptoassets frozen, stolen, or inaccessible?
We assist with cryptocurrency theft, restricted funds and accounts, and lost access to wallets.
- 01Freeze
funds inaccessible
CEX - 02Cause
reason for the restriction
AML · KYCrisk - 03Documents
evidence for review
SoF - 04Resolution
submission and outcome
OUT
DefCrypt service workflows
- Resolving an exchange account freeze
- 01 Freeze (CEX)
- 02 Cause (AML · KYC)
- 03 Documents (SoF)
- 04 Resolution (OUT)
- Recovering access to a wallet
- 01 Access lost (LOCK)
- 02 Assessment (TECH)
- 03 Access (OUT)
- SEED (phrase)
- FILE (wallet.dat)
- HW (device)
- Analyzing the movement of funds
- 01 Incident (THEFT)
- 02 Tracing (TXID)
- 03 Destinations (CEX · BRIDGE)
- 04 Evidence (PACK)
- TX-A (trail)
- TX-B (trail)
- TX-C (trail)
- Legal support
- 01 Facts (CASE)
- 02 Findings (TECH)
- 03 Case file (FILING)
- Exchange (CEX)
- Lawyers (LAW)
- Authorities (LE)
Practice indicators
200+cases handled
85%effectiveness
25 minuntil the first response
NDAthroughout the process and afterward
01 / Find an approach
Choose your situation to understand the next steps
Describe what happened. We will assess the situation and propose an appropriate course of action.
Funds are restricted
We help you respond to AML and KYC reviews and prepare documents for lifting restrictions.
Cryptocurrency was stolenWe trace asset movements and prepare evidence for further submissions.
Wallet access was lostWe assess the available data and whether access to the wallet can be recovered.
It is unclear what happenedWe conduct an initial review and suggest safe next steps.
Five areas of practice
02
Wallet access recovery
We assess recovery options involving a password, partial seed phrase, wallet.dat file, or device data.
Learn about this service03
Crypto transaction analysis
We trace the movement of funds, map transactions, and prepare an analytical report.
Learn about this service04
Legal support
We prepare evidence and materials for exchanges, lawyers, and law-enforcement authorities.
Learn about this service05
Emergency response to theft
We assist after a hack, cryptocurrency theft, or an unauthorized transfer.
Learn about this service02 / Our process
How we work: four stages
We proceed only when the next step is supported by the available evidence.
- 01
Initial assessment
We review the situation, assess its urgency, and identify the information needed.
- 02
Analysis and strategy
We verify the facts and select a technical, compliance, or legal route.
- 03
Preparation and support
We prepare evidence and submissions and coordinate with exchanges and specialists.
- 04
Outcome and recommendations
We document the outcome and identify any further action.
03 / Cases
Cases: issue, work, and outcome
We show the initial situation, the work completed, the timeline, and the documented outcome. Client details are anonymized.
Platform / amountSituation and workTimeline / outcome
Bybit$115,000
Withdrawal restriction after an AML and KYC review
We identified the reason for the restriction, assembled source-of-funds evidence, and prepared a submission to the compliance team.
5 days
Access to the funds was restored after the documents were reviewed.
Tether$830,000
Account freeze
We analyzed 847 transactions and prepared a blockchain-forensics report explaining the source of the funds.
15 days
The restrictions were lifted after the materials were submitted for specialist review.
The outcome depends on the circumstances of each matter and decisions made by third parties. These cases do not guarantee a similar outcome.
Engagement model
A fee payable after the agreed result is achieved
For eligible cases, we define the result criteria and fee in advance.
Check whether your case is eligible04 / Working principles
What you need to know
- 01
We do not promise that funds will be returned or restrictions lifted before assessing the situation.
- 02
We use lawful methods only: we do not falsify documents or bypass AML and KYC reviews.
- 03
We never ask for seed phrases, private keys, passwords, or 2FA codes.
05 / Questions
Frequently asked questions
A brief overview of the first step, security, and expectations.
01What is needed for an initial assessment?
The name of the exchange or wallet, a brief description, dates, and amounts. If you have a TxID, correspondence, or documents, tell us about them. We do not need seed phrases, keys, or passwords.
02Can the return of funds or lifting of restrictions be guaranteed?
No. The outcome depends on the circumstances, available documents, platform rules, and decisions made by third parties. After the assessment, we will explain the available options and risks.
03How is confidentiality maintained?
We discuss sensitive data only through an agreed secure channel and request the minimum information needed. We can enter into an NDA where appropriate.
04When is an urgent response needed?
When funds are still being transferred, an attacker retains access, or the theft occurred recently. A prompt response is particularly important in these situations.