Logo
UNIT59INTELLIGENCE OPS
[CAPABILITIES // THREE PILLARS // EST. 2021]

Intelligence
Operations.

Unit59 operates across three core disciplines. Each pillar is staffed by specialists with backgrounds in military intelligence, cyber-warfare, and financial crime investigation.

[PILLAR 01]OPERATIONAL

Blockchain Forensics

On-Chain Transaction Intelligence

On-chain transaction graph analysis across BTC, ETH, USDT (ERC-20/TRC-20), SOL, and 40+ networks. We reconstruct fund flow from initial theft to mixer obfuscation to off-ramp exchange withdrawal. Every satoshi leaves a trace.

UTXO cluster analysis
Cross-chain bridge tracking
Mixer de-anonymization
Exchange subpoena packages
DeFi protocol tracing
Cold wallet attribution
[BTC / ETH / USDT / SOL / +40 CHAINS]
ACTIVE DEPLOYMENT
[PILLAR 02]OPERATIONAL

Syndicate Reconnaissance

Threat Actor Profiling

Phishing infrastructure mapping and threat actor profiling. We identify the operators—not just the wallets.

Domain clustering via WHOIS/DNS
Phishing kit fingerprinting
Operator attribution scoring
Infrastructure pivot analysis
[OSINT / DARKWEB / DNS]
[PILLAR 03]OPERATIONAL

Asset Triage & Recovery

Evidentiary Package Construction

Court-ready evidentiary packages for law enforcement referral and international asset freezing.

Chain-of-custody documentation
Expert witness packages
Law enforcement liaisons
Exchange freeze requests
[LEGAL / LAW ENFORCEMENT / CIVIL]
[PROCESSING SEQUENCE // THREE-PHASE PROTOCOL]

THE OPERATIONAL
LIFECYCLE

PHASE01
ACTIVE
INGESTION & TRIAGE

Immediate automated parsing of submitted transaction hashes, attacker addresses, and malicious metadata to establish incident vectors and signature matching.

TX HASH PARSINGADDRESS CLUSTERINGSIGNATURE MATCHINGVECTOR CLASSIFICATION
▼
PHASE02
ACTIVE
FORENSIC ANALYSIS

Manual trace routing across multi-chain bridges, mixers, and cold wallet clusters to isolate primary off-ramp exit gates and establish threat actor identity profiles.

BRIDGE TRACINGMIXER DE-ANONCOLD WALLET ATTRIBUTIONACTOR PROFILING
▼
PHASE03
ACTIVE
DISPATCH & LIAISON

Assembly of cryptographically verified, chain-of-custody evidentiary packages formatted specifically for international law enforcement intervention and immediate exchange freeze actions.

EVIDENTIARY PACKAGESLAW ENFORCEMENT REFERRALEXCHANGE FREEZE REQUESTSCHAIN-OF-CUSTODY DOCS
[INITIATE ENGAGEMENT]

Ready to open a case file?

Submit your incident for immediate intelligence triage.

INITIATE TRIAGE →