Investigations

Create visual investigations to trace fund flows, map address relationships, and document findings.

Creating an investigation

Click Investigations in the sidebar and then New Investigation. Give it a name, optional description, and priority level. Investigations are private to your account by default — you can share them later via a public link.

Investigation workspace

Each investigation opens a full-screen workspace with:

• Graph canvas — visual node-and-edge graph of addresses and transfers
• Sidebar panel — details for the selected node or edge
• Toolbar — add addresses, expand, annotate, export, query, AI assist
• Query editor — Power Mode split-pane for Cypher and SQL

Adding addresses

Click Add Address in the toolbar and paste an Ethereum address. The address appears as a node on the canvas. You can also add addresses from Explorer search results.

Expanding nodes

Select a node and click Expand to discover connected addresses. ChainGraph queries the graph database for all transfers to and from that address, adding counterparties as new nodes and transfers as edges.

Expansion limits apply to prevent the canvas from becoming too cluttered. By default, the top 25 counterparties by transfer count are returned. Use Power Mode queries for more targeted expansion.

Annotations

Add text annotations to document your findings. Annotations appear as sticky notes on the canvas and are saved with the investigation. Use them to record hypotheses, mark suspicious activity, or leave notes for collaborators.

Sharing

Click Share to generate a public link. Anyone with the link can view the investigation in read-only mode — no account required. Shared links expire after 30 days by default (configurable on Pro tier).

Investigation statuses

Limits