Drained by a malicious approval
You signed something on a phishing site and tokens left the wallet. We trace the route and prepare an exchange-ready report.
Wallet recovery
MetaMask
Trace and respond to MetaMask incidents — drained wallets, malicious approvals, or lost access to a seed phrase.
How MetaMask works at a glance
MetaMask is the most-used browser wallet on Ethereum and EVM chains. The wallet itself is non-custodial, so most incidents involve either a lost 12 or 24 word seed phrase, a forgotten password on a local install, or a malicious smart-contract approval that drained funds. Each path needs a different response.
Situations we commonly help with
If any of these sound like your case, we've handled it before.
Forgotten local password, seed available
You have your 12 or 24 word seed but cannot remember the password set on the local extension.
Partial seed phrase
You wrote down most of the words but one or two are missing or unreadable.
Compromised seed from a fake support agent
The seed was shared with someone posing as MetaMask support and the wallet is being actively monitored.
How it works
A transparent five-step process so you always know what's happening next.
- Step 1
Case assessment
We listen to your situation, review the basic facts, and decide together whether an investigation makes sense.
- Step 2
Blockchain analysis
We trace transactions across chains, cluster addresses, and identify exchange touchpoints and intermediaries.
- Step 3
Evidence compilation
Findings are turned into a clear, court-ready report you can hand to law enforcement or counsel.
- Step 4
Authority coordination
We work alongside law enforcement and compliance teams at exchanges to act on the evidence.
- Step 5
Resolution & reporting
You receive a final written summary outlining what was uncovered and the outcomes obtained.
What we'll need from you
The faster we have these, the sooner you get a clear assessment.
- 1Your MetaMask wallet address (read-only)
- 2Transaction hashes from the incident if relevant
- 3Whatever you have of the seed phrase, if recovery is the goal
- 4A timeline of what happened
48-hour response
Start your MetaMask case
Share the basics. We'll come back with an honest assessment of whether an investigation can help. No pressure, no upsell.