What happened.
A specific mechanism at a stated point in blockchain history. An observation your team can examine.
Grounded in evidence. Built for AI.
Documented on-chain findings for analysts, applications and AI agents.
Follow 25.5 million USDC to the DEX/swap venues it was swapped through.
A mechanism. A block. The supporting record. Explore the evidence before it enters your workflow.
01 / THE REGISTRY
The Registry is our core product. Each record connects an observation to the transactions and method behind it, with its certainty and limitations in view.
{ "mechanism": "LP_REMOVED", "chain": "ethereum", "evidence": [ "transaction", "event_log" ], "reproduction": { "method": "event inspection", "scope": "stated block" }, "status": "illustrative"}A specific mechanism at a stated point in blockchain history. An observation your team can examine.
The supporting transactions and event references stay attached to the finding.
The method and reproduction steps make the reasoning behind the record inspectable.
Certainty, coverage and limitations help your team make its own assessment.
02 / FROM ACTIVITY TO EVIDENCE
A useful finding needs a trail back to its source. The Registry keeps that trail with the record.
Identify a recorded event or a contract behaviour at a specific block.
Attach the relevant transactions, the method, and what the available data can support.
Inspect a record, check address exposure or bring Registry data into your own systems.
The distinction matters. Direct observations and inference stay separate. Signatures protect record integrity; sources and methods support the findings.
03 / MONITORING & TRACING
Monitor reported exploits. Trace associated fund movements, with sources and coverage limits attached.
1,631
Reported incidents, with references.
$32.1B
1,291 entries with reported loss figures.
1,291 with figures340 without
100%
Public-source citations: 1,631 / 1,631.
Register totals before deduplication. Reported losses are catalogued amounts, not funds traced or recovered by Bitpoort.
Snapshot of the internal Exploit Register, dated 15 September 2026. Counts refer to entries; duplicate incident records remain, so these are not unique-incident totals.
The $32.1B is the sum of reported loss figures across 1,291 entries, rounded to one decimal billion. Another 340 entries have no reported loss figure. Duplicate entries may affect that sum.
100% describes the presence of a public-source citation. It does not establish that every report has been independently verified or every incident reconstructed.
ILLUSTRATIVE FUND MOVEMENT
Follow 100 demo units through a transit wallet into two modelled endpoints.
The invented starting balance is 100 demo units. This is a modelled origin, not an observed exploit.
The real Exploit Register is access-controlled. Traces can be partial; unresolved movements stay explicitly unresolved.
04 / BUILT FOR YOUR DESK
Use address exposure checks to identify connections to recorded activity. Give analysts the underlying findings to review as part of their screening process.
REGISTRY STANDARD
Documented findings, supporting sources and exposure checks for compliance teams, financial-crime units and the firms advising them.
$200/ month
or $2,000 per year
Request accessinfo [at] bitpoort.com
Inspect documented findings with supporting transactions, methods and stated limitations.
Use bulk API access and address exposure checks to support your team’s assessments.
Keep advisory signals separate from directly observed activity when reviewing a finding.
Use point-in-time snapshots for casework and internal reference, independently of Console.
05 / A FEW PRACTICAL DETAILS
No. Registry subscriptions can be used independently through your existing systems. Console is our investigation workspace for exploring activity and organising case findings. It is currently a live prototype.
AI helps users retrieve and explain information. Integrations bring Registry data into software and AI workflows. Factual findings remain tied to the underlying records and methods.
Current coverage focuses on Ethereum transactions and tokens. Bitcoin information is advisory. Trace coverage has limits, which are stated with the product and its records. See current coverage ↗
A signature protects a record’s integrity. The sources and methods support its factual findings. Independent signature verification depends on published signing keys and the supported verification process; the current product page states what is available.