Where Did My Crypto Go? How to Trace Stolen Funds on-Chain

Start with facts, not panic

Every transfer on Ethereum, Solana, Arbitrum, Base, Monad, HyperEVM, and other public chains leaves a permanent record: sender, recipient, asset, amount, and timestamp. You do not need wallet connect or a seed phrase to read that data — only the wallet address and transaction hashes.

What to copy in the first 10 minutes

• Your wallet address on the correct network (0x… on EVM, base58 on Solana).
• The first suspicious outbound transaction hash or signature.
• Approximate time of loss in UTC.
• Token names, NFT collections, or memecoins that left without your intent.
• Which app or site you used before the loss (for your own notes — not proof on-chain).

Pick the right chain before you search

• Same 0x address on Ethereum vs Base vs Arbitrum has separate balances — check the network in your wallet.
• Solana drains appear on Solscan only — not Etherscan.
• Chain-specific guides: Ethereum, Base, Monad, Arbitrum, Solana, Trust Wallet/BSC.

Free tools vs a structured trace

• Etherscan, Solscan, and HyperEVMScan show raw tables — good for verification, slow under stress.
• Tracefunds turns public data into a fund-flow graph, labeled destinations when known, and a verification checklist ($5 single tx · $20 full case file).
• We document limits honestly — mixers, bridges, and privacy tools can break a single-chain path.

If someone asks for your seed phrase

Legitimate tracing never requires your recovery phrase. Anyone who asks for it after you post about a hack is likely running a second scam. See our seed phrase compromised and recovery scam guides.

What tracing cannot do

On-chain tracing shows where assets moved publicly. It does not guarantee recovery, freeze funds at an exchange, or identify a person behind an address. Avoid anyone who promises otherwise in your DMs.