Notifications
Clear all
Topic starter
08/07/2026 6:52 pm
TL;DR: Blockchain forensics has turned Bitcoin into a durable investigative trail, helping law enforcement trace major criminal proceeds in cases such as Silk Road, Mt. Gox, AlphaBay, and Welcome to Video, according to Bitwarden’s summit discussion. The deeper lesson is that traceability can expose identities without automatically creating enforcement power or governance control.
NHIMG editorial — based on content published by Bitwarden: a summit discussion on blockchain tracing, crypto crime, and accountability
Questions worth separating out
Q: How should security teams use traceability without mistaking it for control?
A: Use traceability as a detection and investigation layer, not as proof that risk has been reduced.
Q: Why do visible transaction logs or access logs fail to create accountability on their own?
A: Because accountability requires more than a record.
Q: What should identity teams learn from blockchain forensics?
A: They should learn that correlations matter more than single signals.
Practitioner guidance
- Separate visibility from enforceability Map which parts of your identity stack can prove what happened and which parts can actually stop or revoke access.
- Correlate identity evidence across systems Join logs from identity providers, secrets stores, workload platforms, and payment or transaction systems where relevant.
- Reduce reusable operational trails Limit long-lived credentials, shared accounts, and repeated infrastructure patterns that create durable correlation points for investigators or adversaries alike.
What's in the full article
Bitwarden's full article covers the contextual detail this post intentionally leaves at the level of governance and interpretation:
- The full summit discussion on how blockchain tracing techniques were used in landmark investigations and why investigators treated them as a forensic breakthrough.
- Additional examples from Silk Road, Mt. Gox, AlphaBay, and Welcome to Video that show how different criminal models exposed themselves differently.
- The privacy tension raised by universal traceability, including why the same tool that supports law enforcement also changes the threat model for ordinary users.
- The broader conversational context from the Bitwarden Open Source Security Summit fireside chat, including comments from Andy Greenberg and Paul Stringfellow.
👉 Read Bitwarden's summit discussion on blockchain tracing and crypto crime →
Bitcoin tracing and crypto crime: what IAM teams should notice?
Explore further
08/07/2026 7:13 pm
Blockchain transparency proves that visibility and accountability are different control objectives. A ledger can expose movement with extraordinary fidelity, but consequence still depends on legal reach, operational disruption, and an actor who can be pinned to the activity. That distinction matters for identity programmes because many teams overestimate what observability alone can deliver. The practitioner conclusion is to treat traceability as evidence, not enforcement.
A few things that frame the scale:
- 92% of organisations expose NHIs to third parties, raising concerns about supply chain security, according to the Ultimate Guide to NHIs.
- 96% of organisations store secrets outside of secrets managers in vulnerable locations including code, config files, and CI/CD tools.
A question worth separating out:
Q: How do organisations know whether audit data is actually improving governance?
A: Audit data is helping only if it shortens the time from detection to containment, revocation, or decision. If teams can produce reports but cannot remediate the actor, the programme has observability without governance. The test is whether the evidence leads to a measurable response, not whether the dashboard looks complete.
👉 Read our full editorial: Blockchain tracing shows anonymity is not accountability
