Two flagship investigations
One CeFi, one DeFi — the same agent investigation workflow, end to end, on real seeded alert data.
CeFi / ExchangeBX-104
BitCityX Suspicious Withdrawal
Account takeover likely
11
MCP calls
6
Evidence
5
Actions
JSON / PDF export available on the completed report.
- · Account takeover likely
- · 11 simulated MCP calls (BitCityX, Memory, Analytics, Replay)
- · 6 evidence items, 5 recommended actions
- · JSON / PDF export
DeFi / On-chainCV-2041
CitySwap Flash Loan Oracle Manipulation
Oracle exploit confirmed
12
MCP calls
6
Evidence
5
Actions
JSON / PDF export available on the completed report.
- · Oracle exploit confirmed
- · 12 simulated MCP calls (CitySwap, Memory, Analytics, Replay)
- · 6 evidence items, 5 recommended actions
- · JSON / PDF export
Both investigations are simulated end to end — deterministic MCP transcripts, no real external tool calls, no mainnet or testnet execution. See the Analyst page for the full workflow breakdown.