Skip to content
FORENSIAWeb3 forensicsOpen workspace
FORENSIAOpen workspace
Menu
Make yourself at home
← The field guide
Wallets / Illustrated lesson

Key compromise
The signature can be valid while the use is unauthorized.

Someone holding a usable signing key may create a valid transaction without the owner’s consent. Blockchain evidence can establish the transaction, but the route by which the key was obtained often needs other evidence.

Reading history stays in this browser. Manage it in My Explore.
  1. 01

    A key becomes accessible

  2. 02

    A valid signature is produced

  3. 03

    A transaction spends the assets

Illustrative sequence. This diagram is a teaching aid, not a captured transaction.

What to collect

  1. Transaction and signature context
  2. Known owner’s incident account
  3. Device or operational evidence, if available
Before drawing a conclusion

Do not infer a specific malware infection or weak key generator solely from an outgoing transfer.

Test the idea

A valid signature appears. Does that prove the owner intended the payment?

Reveal the explanation

No. Validity establishes acceptance under signing rules, not informed consent or the identity of the person operating the key.

Open the related case ↗
FORENSIA

Web3 forensics that shows its sources. Read-only, public evidence, and a clear line where the proof ends.

Contact us

Leave your name and email and the Forensia team will write back.

How we handle your emailOr email us directly

By selecting Contact me you agree that Forensia may email you at this address about your enquiry. You can withdraw anytime. Name, email and consent are kept for up to 90 days, separately from investigations. No searched address is included in this submission.