New releases across the TRM platform and blockchain intelligence — real-time cross-chain swaps in TRM Forensics, behavioral Signatures® in TRM Transaction Monitoring and TRM Wallet Screening, TRM MCP in Claude Desktop, Co-Case Agent™ sessions in parallel, and expanded attribution across the largest crypto theft on record, darknet markets, drug-precursor suppliers, and sanctions
TRM Forensics enables real-time cross-chain swaps on 36 EVM blockchains and through 21 bridge services, with more blockchains and bridges being added.
Tracing funds through cross-chain swaps as they happen is critical for investigations. For example, TRM investigators traced the Binance theft proceeds through cross-chain swaps chained simultaneously through two bridges. Freezes depend on how fast an issuer or exchange learns an address is tainted.
On October 29, an attacker moved about $6.36 billion out of Binance wallets across ten blockchains. TRM attributed the theft to North Korea’s TraderTraitor, traced the transfers from Binance’s wallets to the attacker addresses on all ten chains, and labeled those addresses.
Learn MoreTRM customers can work alerts from Claude Desktop or an automated agent, run Co-Case Agent sessions in parallel, and alert on behavioral Signatures in Transaction Monitoring and Wallet Screening.
Create alert rules using Signatures to detect suspicious patterns beyond a single transaction
Behavioral Signatures and observed country are included in Wallet Screening results
New Claude Desktop connector, alert review from the MCP, and machine-to-machine access
Multiple Co-Case Agent sessions and real-time cross-chain swap matching
TRM labeled the attacker addresses in the largest crypto theft on record, added millions of address and liquidity pool labels, and labeled sanctions exposure as OFAC, FinCEN, and the UK took action.
Additional drug-precursor manufacturers and more than 10 million new darknet marketplace address labels
Attacker addresses labeled across ten blockchains, plus millions more TRON addresses and DEX liquidity pools attributed
OFAC and FinCEN action on the A7 Network, UK designations of three exchanges, and an OFAC action against a Hamas financing network