On-chain asset tracing in Bermuda moves fast or it fails. When digital assets are misappropriated – whether through exchange fraud, a compromised custody arrangement or deliberate misappropriation by an insider – the window to freeze and recover is measured in hours, not weeks. Blockchain transactions are irreversible; funds that reach a mixer or an uncooperative offshore exchange become exponentially harder to recover. Bermuda's legal architecture, combining a mature common-law Supreme Court with a dedicated digital-asset regime, gives claimants a credible platform to act – but only if counsel engages before the trail goes cold.
This guide sets out the sequential legal steps for on-chain asset tracing in Bermuda: from the first forensic sweep, through emergency freezing relief and exchange disclosure, to the enforcement of judgment across the borders where the assets or defendants ultimately sit.
Why Bermuda's Legal Architecture Supports Crypto Recovery
Bermuda offers claimants a common-law Supreme Court with established equitable jurisdiction over property, combined with the Digital Asset Business Act (DABA) – the statutory regime that brought digital-asset businesses within a regulated perimeter and, crucially, within compellable disclosure reach. The Supreme Court of Bermuda can issue worldwide freezing orders and Norwich Pharmacal-style disclosure orders, drawing directly on English common-law principles. Bermuda's close alignment with English and Commonwealth jurisprudence means that its courts have accepted, consistent with leading common-law authority, that a cryptoasset is a form of property capable of being subject to proprietary remedies.
The practical significance: a freezing order obtained in Bermuda binds Bermuda-domiciled entities – including exchanges and custodians licensed under DABA – and can be deployed in parallel with proceedings in other common-law forums. In our cross-border practice, we regularly advise clients who hold claims touching multiple jurisdictions simultaneously; Bermuda frequently sits alongside England, the BVI or the Cayman Islands as the forum of first action precisely because the target entity – a custodian, a fund administrator – is Bermuda-regulated.
Step 1: Conduct a Structured On-chain Forensic Sweep
The foundation of every recovery matter is a forensic trace that converts raw blockchain data into court-admissible evidence. Before any application is filed, the claimant's team must identify the originating wallet, map each hop across the relevant chain or chains, flag any mixer or cross-chain bridge event, and identify the ultimate receiving address or exchange deposit address linked to a known entity.
This work is conducted using institutional-grade blockchain analytics tools. The output – a transaction-hash chain, a clustering analysis and, where possible, an exchange attribution – forms the evidential spine of every subsequent legal step. A court asked to grant emergency relief needs to see that the claimant's claim is more than speculative; a professional forensic report satisfies that threshold far more effectively than a wallet screenshot.
The common mistake at this step is delay. Operators we advise routinely underestimate how quickly a sophisticated counterparty can move funds across chains, convert assets to privacy coins, or withdraw to cold storage. The forensic sweep should begin within hours of discovery, not after an internal investigation report has been approved by three committees.
Contact OBOLUS before the forensic work is complete. In our recovery practice, we engage legal and forensic workstreams simultaneously. Waiting for a finished forensic report before instructing counsel typically costs the claimant the most valuable 24 to 48 hours of the recovery window. For an immediate assessment of your situation, write to us at info@oboluslaw.com or reach our disputes desk via t.me/oboluslaw.
Step 2: Apply for Emergency Freezing Relief in Bermuda
A worldwide freezing order (an injunction restraining a respondent from disposing of or diminishing assets anywhere in the world) is the primary emergency instrument available through the Supreme Court of Bermuda. Applications are made on an without-notice basis where there is a genuine risk that notice would cause the respondent to dissipate assets before the order takes effect.
To succeed at the without-notice stage, the claimant must demonstrate a good arguable case on the merits, a real risk of dissipation, and full and frank disclosure of all material facts – including those that may assist the respondent. The standard is well-settled across common-law forums, and Bermuda courts apply it consistently with English authority.
Where the respondent is not yet identified – as is common in crypto theft matters, where the attacker is known only by a wallet address – the application is made against persons unknown. English precedent, which Bermuda courts treat as highly persuasive, has affirmed that proceedings against persons unknown are procedurally available and that a freezing order may attach to assets held at a named exchange even before the account holder's identity is established.
The order, once granted, must be served on any exchange or custodian holding the frozen assets. Bermuda-regulated entities under DABA are subject to the jurisdiction of the Supreme Court and are obliged to comply. For assets held outside Bermuda, the order provides the foundation for recognition and enforcement proceedings in the forum where the exchange is domiciled.
Step 3: Secure Exchange Disclosure Through Court Order
A Norwich Pharmacal order (an order compelling an innocent third party that has been mixed up in wrongdoing to disclose information about the wrongdoer) is the instrument used to compel exchanges, custodians and other service providers to identify the person behind a wallet address. The application is made against the exchange or platform rather than the unknown defendant.
In a Bermuda-based recovery, the target of the disclosure application may be a DABA-licensed entity or, more commonly, a foreign exchange whose only connection to Bermuda is that it received a transfer from a Bermuda-connected victim. In the latter case, the Bermuda order must be supported by parallel proceedings – or a letter of request – in the forum where the exchange is regulated.
The common mistake at this step is preparing the disclosure application without anticipating the exchange's compliance team requirements. In our practice, we have seen exchanges require not only the court order itself but a certified copy, a legal opinion confirming the order's validity, and a law-enforcement case reference before they act. Preparing that package in advance shortens the effective freeze-to-disclosure gap from weeks to days.
We work alongside forensic partners to convert on-chain evidence into court-ready disclosure applications. The transaction-hash evidence from Step 1 feeds directly into the disclosure affidavit – each hop in the trace corresponds to a disclosure target – and a well-structured application covers the entire chain in a single filing where procedurally possible.
Step 4: Manage Cross-border Enforcement
Most Bermuda recovery matters do not resolve entirely within Bermuda. The assets may have moved to an exchange in Singapore, a custodian in the BVI, or a cold wallet accessed from a jurisdiction with limited treaty cooperation. Cross-border enforcement therefore runs in parallel with the Bermuda proceedings, not after them.
For assets or defendants in common-law jurisdictions – England and Wales, Singapore, Hong Kong, the Cayman Islands, the BVI – recognition of a Bermuda freezing order is generally available on established principles. Bermuda's status as a British Overseas Territory with a common-law Supreme Court aligns it closely with the forums where recognition is most straightforward. In our cross-border practice, we coordinate with allied counsel in the relevant jurisdiction to prepare mirror applications or recognition filings before the Bermuda order is even served, so that the enforcement chain closes simultaneously.
For stablecoins – USDT (Tether) or USDC (Circle) – the issuers hold contract-level freeze authority over their issued tokens. Issuers generally act on a court order or a law-enforcement designation. Securing a Bermuda court order and presenting it to the issuer alongside a law-enforcement case reference is the standard route to a stablecoin freeze. This step requires the transaction hash identifying the specific tokens, which is why the forensic sweep in Step 1 is prerequisite to every downstream action.
If the enforcement trail is already live, act now. The process above describes the standard path. Your facts – the entity structure, the user base geography, the exchange relationships – change the analysis and the priority of actions. If a prior attempt stalled or an account was closed, a structured second review can identify the route back. Contact our disputes desk at info@oboluslaw.com or via t.me/oboluslaw.
Step 5: Obtain Judgment and Execute Recovery
A freezing order preserves assets; it does not transfer them. Once the defendant is identified and served, the claimant must bring substantive proceedings to judgment – whether in Bermuda, in the defendant's home forum, or in an arbitral seat agreed by the parties. Summary judgment is available in Bermuda where the defence is not genuinely arguable, which is often the case in straightforward misappropriation matters where the blockchain record is dispositive.
Enforcement of a Bermuda money judgment in other common-law jurisdictions is available under the applicable statutory reciprocal enforcement regimes or, where those do not apply, at common law. Timing and procedural requirements vary by forum; allied counsel in each relevant jurisdiction should be briefed before judgment is sealed to ensure the enforcement filing is ready to proceed without delay.
The decision point at this stage turns on commercial pragmatism. A large claim against an identified, solvent defendant in a cooperative jurisdiction warrants full proceedings to judgment. A smaller claim, or a claim where the defendant is a Bermuda-regulated entity willing to engage, may resolve through a negotiated return of assets supported by the freezing order as leverage. We advise on both paths, and the right choice depends on the facts of the matter.
A Cross-border Recovery in Practice
In a recent matter, a fund administrator operating through a Bermuda-registered entity discovered that a substantial balance of stablecoins had been moved by an unauthorized counterparty to a series of exchange deposit addresses across two jurisdictions. We engaged the forensic workstream within hours of the client's call, prepared a without-notice freezing application for the Supreme Court of Bermuda, and simultaneously briefed allied counsel in a second common-law forum where the receiving exchange was regulated. The disclosure order in the second forum was filed within days of the Bermuda order being granted. The issuer freeze was confirmed after we presented the Bermuda order and a law-enforcement reference together. The full balance was preserved before the counterparty attempted a further transfer.
Which Recovery Profile Applies to Your Matter
Profile A – the defendant or the custodian is Bermuda-regulated, assets are in stablecoins, and the forensic trace is clean. This is the most favorable recovery profile. The Bermuda Supreme Court has direct compulsion over the custodian; the issuer freeze is available on the court order; timeline to first freeze is typically measured in days.
Profile B – the defendant is identified, assets have moved to a foreign exchange, and Bermuda's connection is the victim entity. The Bermuda order provides a strong foundation for recognition proceedings in the target forum, particularly in common-law jurisdictions. Timeline depends on the target forum's procedural pace; common-law forums are generally faster than civil-law counterparts.
Profile C – the defendant is unknown (persons unknown), assets have passed through a mixer, and the trace has gaps. This is the most challenging profile. The forensic work must close the gaps before court applications are viable. A partial trace can still support a without-notice application if the evidence demonstrates a good arguable case on a specific wallet cluster or exchange account. Timeline is indeterminate; the legal window remains open as long as the asset can be located.
Addressing the Assumption That Nothing Can Be Done
A common assumption in the market is that once digital assets leave a wallet, recovery is impossible and legal action is futile. That assumption is wrong in most cases where professional counsel engages early.
Blockchain's defining characteristic – an immutable public ledger – is simultaneously the fraudster's audit trail. Every transaction is recorded and recoverable. Where funds pass through a centralized exchange, that exchange holds identity records. Where they sit in stablecoins, the issuer can freeze them. The legal question is not whether a trace is possible; it is whether the claimant acts quickly enough and assembles the evidence competently enough to use it.
What recovery requires is speed, forensic precision, and counsel who can convert the on-chain record into court-ready form before the counterparty moves again. The cases that fail are not those where the assets were untraceable; they are those where the claimant waited too long, engaged the wrong forum, or filed a defective disclosure application that alerted the respondent before the freeze was in place.
Related at OBOLUS
- Disputes & Asset Recovery for Digital-Asset Businesses – our full practice overview covering freezing orders, disclosure and cross-border enforcement
- How to Prepare an Exchange Disclosure Application – a step-by-step guide to the evidence and procedural requirements
- Fund Domicile Selection for Institutional Clients – structuring guidance for funds with digital-asset exposure considering Bermuda and peer jurisdictions
FAQ
Can stolen crypto actually be recovered?
Yes, in many cases – provided counsel engages quickly and the forensic trace is sound. Recovery depends on identifying the assets on-chain, locating them at a compellable entity such as a regulated exchange or a stablecoin issuer, and obtaining court orders in the right forum before the counterparty moves the funds further. A clean trace to a centralized exchange or a stablecoin wallet is, in our experience, the most recoverable fact pattern.
How fast must I act after a digital-asset theft?
Immediately. Recovery windows are measured in hours, not days. The longer the delay between discovery and first legal action, the greater the risk that assets move to an uncooperative jurisdiction, are converted to privacy coins, or are withdrawn to cold storage. The forensic workstream and the court application process should run simultaneously from the first hour. Engaging counsel before the forensic report is finished is standard practice in live recovery matters.
Can a court freeze assets held on an exchange?
Yes. A worldwide freezing order granted by the Supreme Court of Bermuda – or by courts in England and Wales, Singapore, Hong Kong or other leading common-law forums – binds exchanges subject to that court's jurisdiction and can be used to support recognition proceedings against exchanges in other jurisdictions. Stablecoin issuers such as Tether and Circle also hold contract-level freeze authority over their issued tokens and generally act on a court order or a law-enforcement designation.
OBOLUS is an independent digital-asset law boutique acting exclusively for businesses. We advise exchanges, custodians, token issuers and funds on disputes and on-chain asset recovery across more than 25 forums, on licensing across more than 70 jurisdictions, and on the compliance, tax and banking structures that sit around them. Digital assets are the whole of our practice. We move for freezing relief and exchange disclosure while the trail is live, working alongside forensic partners to convert on-chain evidence into court-ready applications. To discuss a live recovery matter or to assess your exposure, contact us at info@oboluslaw.com.
By Glen Sorensen, Disputes & Recovery Analyst – specialising in on-chain asset tracing, emergency freezing applications and cross-border enforcement in common-law forums.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.