A hardware wallet is supposed to protect your crypto. But what happens when the device itself becomes part of the problem? On October 9, 2026, wallets belonging to people who bought Ledger devices through reseller CryptoBilis were drained. Bitquery’s investigation eventually traced $102 million in stolen crypto across 335 wallets and six blockchains. The investigation also found that the thief had spent two weeks testing small transactions before the drain. But here’s the part I want you to pay attention to. The money didn’t simply disappear after the wallets were emptied. Investigators followed the funds across different chains, tracked swaps between assets, identified wallets holding the stolen funds, and monitored movements through services used to exchange or obscure transactions. Some of the funds were frozen. Others continued moving. You can read the investigation here: bitquery.io/investigations/l… Now, why does this matter beyond the incident itself? Because finding out that money has left a wallet is only the beginning of an investigation. The next questions are harder. Where did the funds go? Which addresses received them? What happened to those funds afterward? And how do you separate what the blockchain actually shows from what you merely suspect? Answering these questions requires more than looking at isolated transactions. You need a way to follow wallet activity, investigate transaction connections, and examine market information in context. This is where @tickingdev comes in. Ticking is building an on-chain research platform that brings wallet activity, transaction tracking, market intelligence, and charting into one research experience. One way to understand what the platform offers is to look at how its features help you investigate what’s happening on-chain, starting with the movement of funds between wallets. With WALLETS MAPS & TRANSACTION TRACKING, you can explore connections between addresses, follow transaction paths, and inspect the records behind those connections. Every transfer leaves a trail, but following that trail across different addresses can become complicated, especially when funds move repeatedly or cross between networks. For example, if Wallet A sends funds to Wallet B, you can inspect that transfer and investigate what happens next. Does Wallet B send the funds elsewhere? Are the assets swapped for another token? Do subsequent transactions lead to other addresses? Each transaction provides another piece of evidence to investigate. This is the idea behind wallet tracking: turning a collection of individual transactions into a trail you can follow. But there’s an important distinction. A connection between two wallets doesn’t automatically mean they belong to the same person. A transaction alone doesn’t tell you why it happened either. Good on-chain research means following the evidence without pretending it proves more than it does. Ticking’s wallet explorer lets users search for wallets, tokens, protocols, and transactions, then explore recorded activity and transaction connections. However, tracing transactions is only part of understanding the bigger picture. If those transactions involve a particular token, you may also want to know what’s happening with its price and the market around it. That’s where MARKET INTELLIGENCE & TOKEN RESEARCH becomes relevant. Knowing where a transaction went doesn’t necessarily tell you what’s happening in the market. Suppose you discover a token while investigating on-chain activity. You want to understand its price, how that price has changed over time, and what market information is available to help you investigate it. Looking at one price figure won’t answer every question. You need context. What market does the price refer to? When was the observation recorded? How has the price moved over the period you’re examining? What does the available historical data show?⤵️