chain-forensics

# Chain Analysis/Forensics Skill Expert on-chain analysis and transaction forensics for security investigations and incident response. ## Capabilities - **Transaction Tracing**: Follow fund flows across addresses and protocols - **Pattern Detection**: Identify suspicious patterns (wash trading, rugpulls, sandwich attacks) - **MEV Analysis**: Analyze MEV activity and flashbots bundles - **Address Clustering**: Group related addresses and identify ownership - **Cross-Chain Tracking**: Track bridged assets across chains - **Forensic Reports**: Generate detailed investigation reports ## MCP/Tool Integration | Tool | Purpose | Reference | |------|---------|-----------| | **Phalcon MCP** | Transaction analysis, exploit detection | [phalcon-mcp](https://github.com/mark3labs/phalcon-mcp) | | **whale-tracker-mcp** | Large transaction monitoring | [whale-tracker](https://github.com/kukapay/whale-tracker-mcp) | | **bicscan-mcp** | Address risk scoring | [bicscan](https://github.com/ahnlabio/bicscan-mcp) | | **dune-analytics-mcp** | Custom queries, analytics | [dune](https://github.com/kukapay/dune-analytics-mcp) | | **Etherscan MCP** | Block explorer data | [etherscan](https://github.com/haomingdev/etherscan-mcp) | ## Transaction Tracing ### Basic Flow Analysis ```bash # Get transaction details cast tx 0xTxHash --rpc-url $RPC # Decode transaction input cast 4byte-decode $(cast tx 0xTxHash --rpc-url $RPC | grep input) # Get internal transactions via Etherscan API curl "https://...