Guides · Cross-chain
How Does Cross-Chain Cryptocurrency Tracing Work?
Cross-chain tracing follows value that leaves one blockchain and is associated with value on another. The link is often a bridge or a swap. BNG SOFTWARE compares protocol references, amounts, and timing, then grades each link. A link that the protocol's own records support is different from two transfers that merely look similar. Similar amounts and timestamps can suggest a candidate. They do not, by themselves, prove that the same funds moved.
Why one explorer tab is not enough
A block explorer shows one network. A bridge involves two events, plus the service between them. Staying on the first network shows the departure and hides the arrival. The shorter explainer How Cross-Chain Bridges Complicate Cryptocurrency Tracing covers why a bridge breaks the single-ledger trail. This page covers how a review deals with that break.
How a link is graded
When is a link verified or protocol-supported?
When the protocol's own records carry it. A bridge deposit event on the source chain with a corresponding release reference on the destination network is a protocol-supported relationship. A confirmed outgoing transaction is a verified on-chain event.
When is a link only probable?
When the evidence is resemblance rather than a protocol reference. A candidate inbound transfer matched by amount and timestamp is flagged for a person to review. It is not automatically adopted into the path.
When is the destination unresolved?
When the current data does not settle it. An address pattern consistent with a custodial service, without more, is an unresolved destination until further evidence or lawful disclosure clarifies it.
BNG Helix correlates swap and bridge events and keeps a strength label on each candidate for the analyst. The software orders the review. It does not replace it.
What should a fund expect after a bridge or multi-network loss?
A fund or protocol incident often starts on one network and continues on another, sometimes after a swap into a stablecoin. The useful deliverable is a timeline that names each network, each transaction reference, and the grade of the link between them. Unresolved hops stay unresolved, which matters if the timeline will be shown to counsel, an auditor, or investors' advisers. Where a compromised contract is part of the story, an access-control or code review can be scoped separately. A tracing page does not double as a full security audit, and a focused review is not represented as one.
Sent funds on one network and the other side never arrived?
The review starts with your transaction on the source network and asks whether a corresponding release or credit is visible on the destination network. Sometimes the protocol events line up. Sometimes only a candidate transfer lines up by amount and time. Sometimes the destination is a custodial account and the public chain stops at the deposit. You should receive that distinction in writing. You do not need to provide a seed phrase for the check.
Do not send a seed phrase, a private key, or a password.
Request a Confidential Case Assessment
Networks this kind of review may involve
The company's published areas of technical focus include Bitcoin, Ethereum, Solana, TRON, BNB Chain, Dogecoin, Chainlink-related assets, XRP Ledger, Hyperliquid-related activity, Cardano, Stellar, NEAR, Litecoin and Zcash.
Coverage depends on network architecture, the data available, and the kind of transaction. Privacy-enhancing features and off-chain activity may limit visibility. No review should promise that every bridge protocol on every network can be read.
What the client receives
A timeline, the transaction references, the grade of each link, and the open questions. The document structure is described in What Is a Blockchain Forensic Investigation Report? and the order of the work in How Does Cryptocurrency Recovery Work?
Frequently asked questions
Can you follow funds from Ethereum to TRON, or from Bitcoin through a wrapped asset?
Often those are the right questions to ask, and sometimes the data supports an answer. Feasibility depends on the protocols used and on what each network records. It is assessed on the case, not assumed.
If the amounts match, is that proof?
No. Matching amounts and close timestamps are a reason to review a candidate. They are not, alone, proof that the funds are the same.
Do you trace Hyperliquid and other venues listed on the site?
The site lists Hyperliquid-related activity among the areas the company may review. Whether a given path is visible still depends on the data for that activity.
Is a cross-chain trace a smart-contract audit?
No. A focused security review can be scoped separately. The tracing engagement explains the movement of value. It is not, by itself, a full audit of a protocol.
Can the funds be recovered because they crossed a bridge?
The bridge explains the path. It does not return the assets. Recovery still depends on the destination and on third parties.
Further reading
Confidential Case Intake
Request a confidential case assessment
Share a short description of what happened and any public transaction references you have. Please do not submit passwords, seed phrases, private keys or unnecessary identity documents through this form.