THE PUBLIC RECORD
Onchain evidence
Wallet activity, native balances, deployed code, and contract metadata. A reproducible snapshot at a specific block.
THE GROUNDTRUTH PLATFORM
From a single address
to a considered decision.
A focused investigation workspace for digital-asset security. Follow the public evidence, examine the relationships, and preserve a record your team can stand behind.
Start your evaluationEXPLORE THE PLATFORM
One workspace.
Four ways into the investigation.
01
Onchain investigations
Follow activity. Examine relationships.
Explore capability02
Threat intelligence
Connect financial and technical context.
Explore capability03
Casework & evidence
Give every finding a defensible record.
Explore capability04
Watchlists & review
Keep important investigations in view.
Explore capabilityTHE INTELLIGENCE FOUNDATION
A wider field of view.
A precise starting point.
Begin with the public record. Expand the investigation through the relationships, source context, and analyst knowledge that give it meaning.
THE WIDER PICTURE
Threat context
An investigation model for connecting wallet leads with actor reporting, campaigns, and technical indicators from licensed sources.
THE HUMAN JUDGMENT
Analyst knowledge
Case notes, review status, saved watchlists, and evidence packages. Keep the reasoning with the record.
NETWORK COVERAGE
Five networks.
One investigation approach.
What a network snapshot captures
Native balance, transaction nonce, deployed bytecode, and supported contract reads are pinned to the same block. Explorer metadata adds available verification, creator, proxy, token, and holder context.
What belongs in the source notes
Activity contains up to 50 recent indexed transactions, capped at the snapshot block. Indexing can lag; token transfers and internal calls need separate investigation. Source gaps remain visible in the case.
THE INVESTIGATION TOOLKIT
A desk for the work.
A record of the thinking.
Move through the investigation without moving the evidence between disconnected documents and browser tabs.
01
Address investigations
Start with a wallet or contract on a supported network. Capture a pinned snapshot and the indexed activity around it.
NETWORK SNAPSHOT / SOURCE CONTEXT02
Relationship exploration
Inspect observed counterparties and available contract relationships in an interactive graph. Select a node to examine its context.
COUNTERPARTIES / CONTRACT RELATIONSHIPS03
Transaction review
Filter recent activity by direction, address, hash, or method. Keep native values, execution status, and explorer references in view.
FILTERS / TRANSACTION REFERENCES04
Persistent casework
Keep the snapshot, your hypothesis, and the open questions together. Update case titles, notes, and review status as the investigation develops.
NOTES / REVIEW STATE / CASE RECORDS05
Focused follow-up
Save important cases to a watchlist for manual review. Refresh a snapshot when you need new evidence without losing the analyst record.
WATCHLISTS / ON-DEMAND REFRESH06
Evidence handoffs
Export the complete case, a transaction worksheet, or a readable brief. Give the next reviewer the sources and reasoning behind the finding.
JSON / CSV / MARKDOWNINTELLIGENCE YOU CAN EXPLAIN
The finding matters.
So does the reasoning.
When a case moves between teams, the context should move with it. GroundTruth keeps the source record, the analyst’s interpretation, and the next question together.
01
Observe
Capture what the source actually reports, with the network, block, and time that put it in context.
02
Interpret
Describe the relationship and record your hypothesis. Keep uncertainty and alternative explanations visible.
03
Review
Save the rationale, mark the case’s review state, and export a record the next person can examine.
GROUNDTRUTH / EVIDENCE RECORD
ILLUSTRATIVE CASE BRIEF
Treasury counterparty review
One record. Enough context for the next decision.
- Review scope
- Counterparty activity on Ink
- Evidence basis
- RPC snapshot + indexed activity
- Source references
- Network, block, transaction, timestamp
- Analyst record
- Hypothesis, rationale, open questions
- Review state
- Analyst reviewed
ANALYST NOTE
Review the funding relationship in context. A shared counterparty is an observation; the case records the evidence needed to assess its significance.
JSONCSVMARKDOWN
THREE WAYS TO HAND OFF THE WORK
The complete evidence package
Structured case data, snapshot fields, indexed activity, source-backed observations, and saved analyst notes.
The transaction worksheet
A portable table of the indexed activity, including references, native values, timestamps, methods, and execution status.
The readable case brief
A concise review record with the snapshot context, observations, source references, and the analyst’s written reasoning.
FIT THE WAY YOUR TEAM WORKS
Your workspace.
Your environment.
Work with a local case store or connect the desktop app to a GroundTruth server in your environment. Choose the data boundary that fits the investigation.
THE ANALYST
GroundTruth workspace
Investigations · Notes · Evidence
THE INVESTIGATION LAYER
Private case store
Local or connected workspace
THE SOURCE RECORD
Network & explorer
Public data · Source references
THE NEXT CONNECTION IS THE ONE THAT MATTERS.
MANY ECOSYSTEMS / ONE CONNECTED PICTUREConnect the dots.
Own the investigation.
A wider view of the threat.
A clearer next move.