Operating on-chain does not mean operating outside the law. When a smart contract (a self-executing program whose terms are encoded directly on a blockchain) behaves contrary to a party's reasonable expectations – through an exploit, a logic error, or a counterparty's bad faith – the legal question is identical to its off-chain equivalent: who bears the loss, and can it be recovered? The answer turns on the intersection of contract law, equity, and the jurisdictions where the affected parties, funds, and exchanges happen to sit. Asset recovery in smart-contract disputes requires moving on multiple fronts simultaneously – forensic tracing, freezing relief, and exchange disclosure – and the window to act is measured in hours, not weeks.
This analysis sets out the disputes framework for smart-contract claims: where the legal exposure sits, which forums are most useful, how freezing and disclosure orders work in practice, and what operators and fraud victims should expect when they instruct cross-border counsel. We draw on what we see in live mandates across the major common-law and civil-law hubs.
What Makes Smart-Contract Disputes Legally Distinct?
Smart-contract disputes are legally distinct because the instrument that caused the harm is also the primary evidence – and it is immutable. Unlike a disputed wire transfer, the transaction record on a public blockchain cannot be altered, suppressed, or denied. That cuts both ways. The claimant has a permanent, forensically verifiable trail. The respondent cannot claim the record was falsified. The legal complexity, however, arises because the code executed exactly as written, while the commercial understanding of the parties may have been entirely different.
Courts in England and Wales, Singapore, Hong Kong, and the DIFC have each grappled with the foundational question: is a digital asset property? In England, AA v Persons Unknown [2019] established that cryptoassets are a form of property capable of being the subject of a proprietary injunction. That ruling has been followed, refined, and extended. The legal consequence for disputes practitioners is significant: if the asset is property, the full range of proprietary remedies – tracing, constructive trust, freezing orders, and account of profits – becomes available. A claim framed purely in contract, without a proprietary foundation, is structurally weaker.
The distinction between a smart-contract exploit and a voluntary transaction matters enormously for the cause of action. An exploit that drains liquidity pools by manipulating price oracles is likely theft or fraud on any analysis. A governance vote that retroactively alters tokenomics is closer to a corporate law claim. A bridging protocol failure sits in a third category – potentially negligence, potentially a product liability claim, potentially neither if the documentation is wide enough to disclaim liability. We regularly advise clients on precisely which cause of action to plead before issuing, because the choice drives the forum, the interim relief available, and the speed of resolution.
Which Courts and Arbitration Forums Are Most Effective for These Claims?
The choice of forum is the single most consequential decision in a smart-contract dispute, and the answer is almost always driven by where assets can be frozen rather than where the claimant prefers to litigate on the merits. England and Wales remains the leading forum for crypto asset recovery globally, primarily because its courts issue worldwide freezing orders (injunctions that freeze a respondent's assets wherever they are situated) on an expedited, without-notice basis and have developed the most extensive body of precedent on crypto as property.
Singapore has similarly issued proprietary injunctions over cryptoassets and is the preferred forum for disputes with an Asia-Pacific nexus. Hong Kong's courts – including the landmark tokenised injunction in HCA 2417/2024 – have demonstrated comparable willingness. The DIFC Courts in Dubai are increasingly used for freezing relief in support of foreign proceedings, and the Trafigura v Gupta [2025] DIFC decision confirmed the court's jurisdiction to grant a worldwide freezing order (WFO) in that capacity. For operators based in the MENA region or with assets in the UAE, the DIFC is an efficient route to interim relief that would then be enforced onward.
Arbitration – whether through international commercial arbitration seated in London, Singapore, or Geneva – is better suited to disputes between identified counterparties who have agreed to arbitrate. Where the respondent is anonymous, or where asset freezing is the primary objective, arbitration alone is inadequate: the arbitral tribunal has no power to freeze third-party exchange accounts. In our cross-border practice, we most commonly see a hybrid approach – seeking freezing and disclosure relief from a national court while simultaneously commencing arbitration on the merits, preserving both the interim position and the binding determination.
The CFAAR network (Crypto Fraud and Asset Recovery network, launched in London in September 2021) connects insolvency practitioners, forensic specialists, and counsel working on complex recovery matters. We engage allied practitioners through networks of this kind when the recovery involves multiple asset classes or insolvency elements alongside the smart-contract claim itself.
For a scoped assessment of your forum options and the interim relief available in your jurisdiction, contact OBOLUS at Map your options. The process above describes the standard pathway. Your facts – the entity structure, the asset location, the counterparty profile – change the analysis at every step.
How Do Freezing Orders and Disclosure Orders Work in Crypto Claims?
A freezing order in a crypto dispute works by targeting the exchange or custodian holding the misappropriated assets, not only the respondent directly. The sequence is: trace the funds on-chain to an identified deposit address at a regulated exchange, apply without notice to the court for a WFO combined with a Bankers Trust or Norwich Pharmacal disclosure order, obtain an order requiring the exchange to identify the account holder and freeze the balance, and then serve the order on the exchange's legal team. Each step has a tighter time constraint than the last.
Exchange cooperation varies sharply by jurisdiction and by the exchange's own legal infrastructure. Regulated exchanges in Singapore, the UK, Hong Kong, and the UAE typically have compliance teams equipped to respond to court orders within hours. Exchanges that operate from less-regulated environments may require the disclosure order to be served via a jurisdiction where the exchange holds a licence or a subsidiary. This is one of the central cross-border challenges in smart-contract recovery: the funds may be traceable, the order may be valid, but enforcement depends entirely on the legal exposure of the exchange in the serving jurisdiction.
Separately, and in parallel, the affected party can approach the token issuer directly. Tether (USDT) and Circle (USDC) hold contract-level freeze and blacklist authority over their issued stablecoins and will generally act on a law-enforcement case reference, an OFAC designation, or a court order from a recognised jurisdiction. Acting on an issuer freeze is one of the fastest ways to immobilize a stablecoin balance before it is swapped or bridged out. The window, however, is narrow – once assets move to a non-custodial wallet or a decentralised exchange, issuer-level action becomes unavailable.
In our practice, we initiate the on-chain trace, the issuer notification, and the court application in parallel on day one of an engagement. Sequencing these in series costs time the client does not have.
What Role Does On-Chain Tracing Play in Building a Dispute Case?
On-chain tracing is not merely a technical exercise – it is the evidentiary foundation of the entire claim. Courts in every major forum now expect a professional forensic report as a prerequisite for granting without-notice freezing or disclosure relief. The report must identify the transaction hashes, map the fund flows to destination addresses, attribute those addresses to a named or identified entity (typically an exchange), and present the methodology in a form that a judge can follow without specialist knowledge. A well-constructed forensic report can be the difference between a court granting relief within hours and adjourning for a return hearing.
Forensic analysis tools offered by specialist providers – including Chainalysis, TRM Labs, Elliptic, and Asset Reality – allow practitioners to map fund flows across chains, identify mixing or layering patterns, and produce attribution evidence. We engage forensic specialists as a standard component of any recovery mandate, not as an optional extra. The report forms part of the evidence bundle filed with the court and is often the document that determines whether the threshold for interim relief is met.
The cross-border angle matters here too. A fund flow that begins on Ethereum, bridges to a Layer 2, swaps to a privacy coin, and deposits on an exchange in a different legal system requires forensic methodology that addresses each step. Courts expect the analysis to be complete. A gap in the chain of tracing – even a small one – gives a respondent the room to argue that the assets cannot be identified as the same property stolen from the claimant.
In a recent recovery matter, a payments company identified that a significant balance of stablecoins had been misappropriated through a compromised protocol interface. We engaged forensic specialists within hours of instruction, traced the funds through two intermediate exchange deposits across two separate jurisdictions, and moved for disclosure and freezing relief before the next business day. The funds were frozen prior to any further movement.
How Does the Cross-Border Structure of a Business Affect the Dispute Strategy?
A smart-contract dispute is almost never a single-jurisdiction problem. The claimant may be incorporated in the Cayman Islands, operate its protocol from Singapore, hold its treasury in USDC, and have counterparties in Europe and the UAE. The respondent's assets may sit on an exchange regulated under the FCA in the UK or the SFC in Hong Kong. Each of those contact points creates a different legal handle for interim relief – and counsel must choose the most efficient one quickly.
The governing law of the smart contract, to the extent it has one, matters less than most operators expect. Courts regularly exercise jurisdiction over crypto claims where the claimant is present in the jurisdiction, where the exchange holding the frozen assets is regulated there, or where the harm was suffered there. The question of governing law usually arises at the merits stage, well after the freezing and disclosure relief has already been granted or refused.
For operators structured across the Gulf, the interplay between VARA and ADGM/FSRA licensing and the DIFC Courts' jurisdiction is particularly important. A business licensed by VARA under the Dubai regime operates under a different legal and judicial infrastructure from one licensed by the FSRA within ADGM. The DIFC Courts serve both free zones and are available for offshore disputes with a UAE nexus, but the procedural pathway differs depending on the entity's licence and registration. We advise businesses in both hubs on structuring their dispute-resolution clauses and their corporate domicile decisions with this interaction in mind.
If your business sits across two or more hubs and you need a recovery strategy that accounts for the full legal topology, contact OBOLUS at Map your options. If a prior application stalled or an account was closed, a second read of the structure often surfaces the reason and the route forward.
What Are the Most Common Mistakes Businesses Make in Smart-Contract Disputes?
The most damaging mistake in a smart-contract dispute is delay. Every hour between the moment of loss and the moment counsel is instructed narrows the recovery window. Funds move at transaction speed. Once they clear a mixing protocol or land in a non-custodial wallet at an unregulated exchange, the legal tools available diminish sharply. We move for freezing relief and exchange disclosure while the trail is live – that is the standard we set internally on every recovery engagement.
The second common mistake is treating the dispute as a technical problem rather than a legal one. Protocol teams frequently spend the first 24 hours attempting on-chain remediation – negotiating with exploiters through on-chain messaging, offering bug bounties, or trying to reverse transactions through a validator majority. These steps are sometimes appropriate. But they are not substitutes for legal action, and they can, in the wrong circumstances, complicate the court's view of the claimant's conduct. Counsel should be in the room – or on the call – when those decisions are made.
The third mistake is filing in the wrong jurisdiction for procedural speed. Some operators instinctively want to file in their home jurisdiction. If that jurisdiction does not have a developed body of crypto-property case law, the court may require lengthy argument at the without-notice stage on whether digital assets are property at all. An application in England and Wales, Singapore, or Hong Kong – in a jurisdiction that has already resolved that foundational question – is typically faster even accounting for the logistics of filing abroad.
A fourth error is an insufficiently precise claim on the assets. Courts expect the claimant to identify the specific assets being claimed, not a class or category. A freezing application that says "the claimant's cryptoassets held at Exchange X" will be questioned. One that says "the balance of USDC at the wallet address beginning [specified hash], now held in account [identified by forensic trace] at Exchange X" is both more compelling and more likely to result in a targeted, effective order.
Decision Matrix: Which Profile Should Choose Which Approach?
The right combination of legal tools depends heavily on the operator's profile, the nature of the loss, and the counterparty's identifiability. No two smart-contract disputes are identical, and a strategy designed for one profile can be counterproductive for another.
Profile A – Protocol operator, identified exploiter, funds on a regulated exchange. This is the most recoverable scenario. The approach is immediate: on-chain trace plus forensic report, without-notice application to an English, Singapore, or Hong Kong court for a WFO and disclosure order, parallel notification to the stablecoin issuer if applicable, and service on the exchange. The timeline from instruction to order can be measured in hours if the forensic evidence is ready. The key risk is exchange cooperation – a respondent who has already withdrawn, or whose account sits at an exchange with limited legal infrastructure, reduces recovery probability significantly.
Profile B – Institutional investor, counterparty dispute on a DeFi protocol, counterparty pseudonymous. Here the primary tool is the disclosure order. The court compels the exchange – where the counterparty's known wallet has previously interacted – to provide KYC information, converting a pseudonymous respondent into an identified one. The timeline is longer and success depends on the counterparty having used a regulated exchange at some point in the chain. We have seen disclosure orders used to identify respondents who believed pseudonymity provided indefinite protection. It rarely does, in the leading common-law forums.
Profile C – Counterparty dispute, both parties identified, written terms exist alongside the smart contract. This is closer to a standard commercial dispute with an on-chain component. The forum is likely arbitration (if a clause exists) or high court litigation on the governing law of the agreement. The smart-contract code forms part of the evidence, and expert evidence on its operation is almost always required. The timeline is longer. The strategic question is whether interim freezing relief is warranted at the outset – often it is, to preserve the position pending the merits determination.
Profile D – Fund or family office, suffered loss through a compromised third-party protocol, no direct counterparty relationship. The claim is likely in tort – negligence, or possibly a statutory cause of action if the protocol operated without a required licence under the relevant regime (whether MiCA, the VARA regime, the applicable VASP provisions under the Cayman VASP Act, or otherwise). The cross-border angle is acute: the protocol's registered entity, the operators, and the user may each be in different jurisdictions. Counsel must map the legal entities before the claim is drafted.
A Common Assumption: "Once the Funds Leave the Wallet, Nothing Can Be Done"
A common assumption among operators who have suffered a smart-contract exploit is that on-chain movement of funds terminates the legal options. This is incorrect, and acting on it causes the delay that actually closes the window. Recovery is not guaranteed – no honest counsel will represent otherwise – but the availability of legal tools does not end at the moment of movement. It ends when those tools are not used in time.
The relevant question is not whether funds have moved, but where they have moved to. Funds that reach a regulated, KYC-compliant exchange are legally accessible through court-ordered disclosure and freezing. Funds that remain as stablecoins are accessible through issuer-level freeze mechanisms. Funds that are converted to other assets and held in a custodial wallet remain traceable and, if identifiable at a regulated custodian, subject to court order. The legal regime follows the asset. The asset is rarely truly beyond reach in the first 24 to 48 hours.
What changes after that window is the forensic complexity, the number of jurisdictions involved, and the probability that assets have been distributed, mixed, or converted into a form that makes tracing more difficult. That increase in complexity does not mean the case cannot be pursued – it means it requires more resource and a longer timeline. We have seen recoveries initiated weeks after the loss event succeed where the forensic trail was sufficiently clear. We have also seen matters where the first 12 hours of inaction proved decisive. The former is the exception. The latter is not.
Related at OBOLUS
- Disputes and asset recovery for digital-asset businesses – full scope of OBOLUS dispute and recovery services for operators
- Worldwide freezing orders in Brazil – obtaining cross-border freezing relief in a key Latin American forum
- Staking and rewards taxation: the compliance burden in practice – the tax exposure sitting alongside your on-chain activities
FAQ
Can stolen crypto actually be recovered?
Recovery is possible but not guaranteed, and the probability depends on speed, the quality of forensic tracing, and whether the assets have reached a regulated exchange or remain as a freezable stablecoin. Courts in England and Wales, Singapore, Hong Kong, and the DIFC have granted proprietary injunctions and freezing orders over cryptoassets. The key variable is how quickly counsel is instructed and whether the on-chain trail is intact at the time of application.
How fast must I act after a digital-asset theft?
Speed is the decisive factor. Recovery windows are measured in hours. The optimal position is to have a forensic trace and a court application prepared within the first business day. Every hour of delay increases the probability that assets are moved to a non-custodial wallet, converted, or bridged to a chain that complicates tracing. Instructing counsel the moment a loss is identified – rather than after internal investigation is complete – is the single most important step a business can take.
Can a court freeze assets held on an exchange?
Yes. Courts in the leading common-law forums routinely grant orders directed at regulated exchanges, requiring them to freeze a specified account balance and disclose account-holder identity. The order is served on the exchange's legal team. Cooperation is generally strong at FCA-, SFC-, and MAS-regulated exchanges. The practical limitation is the exchange's jurisdiction: an order from an English court has immediate traction at a London-regulated entity but requires additional steps to enforce against an exchange in a less-familiar legal system.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. Operators we advise benefit from a team that structures licensing, banking and tax as one mandate rather than three disconnected workstreams. To discuss your situation, contact info@oboluslaw.com.
By Victor Olsen, Regulatory & Compliance Analyst – specialist in the cross-border regulatory exposure of smart-contract disputes and the applicable VASP and CASP regimes across the leading hubs.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.