The Crypto Detectives Are Cleaning Up

Before a new breed of cryptocurrency detectives helped bring him down, Ryan Felton marketed his crypto scheme with a grandiose promise: He was creating “Netflix on the blockchain.”

He called the crypto-themed streaming service FLiK. For a small amount of the popular digital currency Ether, customers could purchase a FLiK token, which would give them access to shows and movies broadcast on the new platform. Mr. Felton described the project as an “entertainment revolution”; crypto enthusiasts bought more than $2 million worth of FLiK coins.

But the streaming business never materialized. Instead, Mr. Felton bought a $1.5 million house, along with $32,000 in diamonds. He spent $180,000 more on a red Ferrari.

When cryptocurrencies hit the mainstream in the 2010s, the technology was widely viewed as a perfect vehicle for crime. A drug dealer or scam artist could transfer large quantities of money instantly, without relying on a bank to validate the transaction. To early advocates, crypto was appealing because it promised the secrecy and anonymity of cash, without the inconvenience of face-to-face exchanges.

That secrecy was an illusion. Crypto transactions are inscribed on a publicly viewable ledger called a blockchain. To the untrained observer, blockchain records are unintelligible — a jumble of meaningless letters and numbers. But a growing industry is dedicated to deciphering them.

At the center is the New York analytics start-up Chainalysis, which was valued at $8.6 billion after a funding round last year. With tens of millions of dollars in federal contracts, Chainalysis has built a reputation as one of the crypto industry’s leading detectives — a team of blockchain analysts that helps the government track crypto transactions.

As federal agencies orchestrate an aggressive crackdown on crypto fraud, Chainalysis has come to occupy an increasingly important position in the industry. The company markets itself to the government and private companies as a force for good in a badly behaved sector — a firm whose business is solving crimes and cooperating with public officials.

After the FTX exchange imploded, its bankruptcy lawyers hired Chainalysis to disentangle the web of entities at the center of Sam Bankman-Fried’s empire and track the $400 million in crypto that a hacker stole from FTX’s accounts. Chainalysis has also been conducting some light diplomacy: In April, it hosted a conference in Manhattan to bring together government officials and the newly chastened crypto executives who are trying to win back their trust. Guests received socks stitched with the Chainalysis logo.

But that ambassadorial role has also put Chainalysis at odds with some of crypto’s most passionate advocates, who envisioned digital money as a private, anonymous financial network. That clash is a battle for crypto’s future, and it’s unfolding at a turbulent moment in the industry’s short history.

From the government’s perspective, Chainalysis is arguably the most trusted company in the industry — but only because it sells powerful tools aimed at penetrating the veil of secrecy that made crypto attractive in the first place.

The blockchain is “oftentimes the key to unlocking a case,” said Jonathan Levin, 32, one of the founders of Chainalysis. “It’s more traceable and more conclusive.”

In late 2020, Mr. Felton was indicted on charges that he had used investors’ funds to finance his extravagant lifestyle. He went on trial in Atlanta last summer. Testifying for the prosecution was Beth Bisbee, a Chainalysis investigator who once worked for the Drug Enforcement Administration. In 2014, her analysis of blockchain records helped the D.E.A. track down an internet drug dealer in Arizona.

That investigation was relatively low-tech: Ms. Bisbee pasted Bitcoin transaction logs into a spreadsheet, which she searched for clues. These days, crypto fraud is more complicated, involving multiple types of currencies, each with its own blockchain. Chainalysis makes software that can do the time-consuming work automatically.

In the courtroom, Ms. Bisbee presented a colorful diagram mapping the movement of the millions of dollars’ worth of Ether that investors spent on Mr. Felton’s tokens. The funds had been routed to a series of crypto wallets, digital repositories where people can store their holdings. Using a forensic technique called clustering, Ms. Bisbee showed that all those wallet addresses belonged to the same person: Mr. Felton. From those accounts, he had moved his investors’ Ether to one exchange before transferring it to another. Then he’d converted the Ether into cash.

“What was the source of the vast bulk of those funds before they were wired out?” one of the prosecutors asked Ms. Bisbee.

“The FLiK token sales,” she replied.

The prosecution presented its case over four days in July. On the last day, Mr. Felton pleaded guilty.

A new kind of crypto business

About a decade ago, Mr. Levin, then a master’s student in economics at Oxford University, was at a pub with a friend when the conversation turned, naturally, to the topic of cryptocurrency arbitrage. Variations in the price of Bitcoin across two exchanges had created a moneymaking opportunity: Buy Bitcoin at the lower price, then sell it for a profit.

The arbitrage trade proved too time-consuming and logistically complicated for Mr. Levin to execute. “I probably had, like, 100 pounds to my name,” he said. But the conversation ignited Mr. Levin’s fascination with Bitcoin. The digital currency was invented in 2008 by a mysterious figure named Satoshi Nakamoto, who envisioned a private, decentralized form of commerce that would operate outside the supervision of any government or financial institution.

Mr. Levin was no radical libertarian, however. A 20-something from the United Kingdom, he was interested in the inner workings of the technology, and he saw an opportunity for professional advancement: Not many other people seemed to be studying cryptocurrencies. At the time, Bitcoin was still considered the domain of hackers and drug dealers; none of Mr. Levin’s professors wanted to supervise his research.

Undeterred, Mr. Levin started attending crypto conferences and eventually wrote a master’s thesis titled, “Creating a decentralised payment system: A study of Bitcoin.” But he still had questions.

“No one understood how and why people were actually using crypto,” Mr. Levin said. “If you could package that information up and supply that to all of the most important stakeholders, you can build systemically one of the most important companies.”

While he was still at Oxford, Mr. Levin started a blockchain analytics company called Coinometrics, but it soon fizzled. (“It’s probably not the best idea to meet your co-founders on Reddit,” he said.) Then, in early 2015, he was introduced to Michael Gronager and Jan Moller, Danish entrepreneurs who were working on a similar project. Mr. Gronager had been using blockchain analysis to track crypto lost in the collapse of Mt. Gox, an early exchange. Together, the three men founded Chainalysis.

As the crypto industry has expanded, blockchain tracking has become increasingly important. These days, some of the largest crypto companies hire blockchain analytics firms to help monitor their customers’ activity and comply with laws designed to stop money laundering. In bankruptcy proceedings, analytics firms sort through the remains of collapsed crypto companies, investigating public transaction logs to locate missing funds.

The crypto industry’s recent downturn has taken a toll on the tracking business. Elliptic, one of Chainalysis’ competitors, cut 10 percent of its staff in February. The same month, Chainalysis laid off about 40 employees, a roughly 5 percent cut.

But blockchain analysis companies have been insulated from the worst effects of the market crash. Chainalysis declined to reveal its exact sales figures, but Mr. Gronager said the company’s revenue increased 70 percent last year despite the crisis in crypto markets. That growth is partly a function of the company’s business model: Two-thirds of its revenue comes from partnerships with public institutions, including law-enforcement agencies, the company says, a source of income that remains relatively stable even when the market implodes.

The Justice Department paid Chainalysis $12,500 for its work on the Ryan Felton case, according to federal records. But that assignment was a drop in the bucket. The Justice Department, the Treasury Department and other federal agencies pay for the ability to use Chainalysis’ blockchain-tracing software, including a tool called Reactor, which maps transactions. In total, Chainalysis has active contracts with the federal government worth about $65 million, according to an analysis of federal records by Jack Poulson, the executive director of the nonprofit Tech Inquiry, which tracks contracts.

Lately, though, Chainalysis has faced competition from smaller rivals including TRM Labs, a tracking firm that has gained prominence by selling software for new types of cryptocurrencies with names like Solana.

In 2021, an official at TRM emailed the Treasury Department to question its decision to award an exclusive contract to Chainalysis, according to email logs obtained through a public records request.

The TRM representative asked for a “rationale as to why this procurement isn’t following a competitive bid process,” according to the emails. “There are multiple providers with analogous capabilities that meet” the requirements, the representative wrote. By early last year, TRM had secured its own contract with the Treasury Department, according to a company spokeswoman. And TRM was hired alongside Chainalysis to work on FTX’s bankruptcy.

“We went from a Bitcoin world to this multi-chain world, and people needing tools to follow illicit activity no matter where it happens in the crypto…