Frequently Asked Questions

Blockchain auditing is the independent financial and forensic audit of an organisation’s crypto holdings, transactions, and reserves, verifying that the on-chain reality matches the books. It is distinct from a smart-contract (code) audit: we audit the money and the controls, not the source code. Our work covers financial-statement audits, proof of reserves, transaction reconciliation, and AML controls.

Yes. We partner with ICPAC-licensed firms (the Institute of Certified Public Accountants of Cyprus is the body that authorises statutory audit work in Cyprus), so independent audit opinions are issued through licensed partners your investors, board, and regulators can rely on, combined with the on-chain forensic depth most accounting firms don’t have.

A proof-of-reserves audit is an independent, on-chain attestation that an exchange or custodian actually holds enough assets to fully back its customer liabilities. We cryptographically verify wallet ownership, confirm balances on-chain, and reconcile them against internal records, so you can prove solvency to customers and regulators rather than just assert it.

Under MiCA, CySEC is the competent authority in Cyprus for crypto-asset service providers (CASPs) and most crypto-assets, with a transitional regime for CASPs running to 1 July 2026. Our AML and compliance audits review your KYC/AML controls, wallet-risk exposure, and reserve backing against EU and Cyprus requirements, giving you documented, audit-ready evidence of compliance.

Blockchain forensics is the discipline of tracing, analysing, and documenting cryptocurrency transactions to produce evidence suitable for legal proceedings, distinct from general analytics or monitoring. Our investigations follow a documented methodology with a clear chain of custody, producing legally admissible, court-ready reports and expert testimony for legal teams, businesses, and government agencies.

Act fast and contact us immediately. Stolen funds can be moved through mixers or cross-chain bridges within hours, so the earliest hours matter most. We trace the funds on-chain, document the trail, notify exchanges that may be able to freeze assets, and coordinate with law enforcement in Cyprus, Greece, and beyond. The sooner we start, the better the odds of recovery.

Sometimes. It depends on where the funds went and how quickly we are engaged. We trace transaction pathways across wallets, exchanges, and chains to identify where assets landed; when funds reach a regulated exchange they can often be frozen and recovered through legal channels. We are honest about the odds up front and never guarantee recovery, but early forensic tracing materially improves the chances.

Yes. We are based in Nicosia, Cyprus, and serve clients across Cyprus, Greece, and the wider EU. We provide blockchain auditing backed by ICPAC-licensed partner firms, crypto compliance support including MiCA readiness and DAC8 reporting, blockchain forensics and crypto recovery, and AML/compliance advisory, for exchanges, funds, law firms, regulators, banks, and fintechs.

We work with crypto exchanges, funds, and digital-asset businesses needing audited, verifiable financials; law firms and prosecutors needing on-chain evidence and expert testimony; banks, fintechs, and CASPs needing AML and compliance assurance; and individuals or businesses that have lost crypto to fraud or theft.

It depends on the engagement. Audit support, proof of reserves, and compliance work are scoped up front and quoted as a fixed fee once we understand the wallets, chains, and volumes involved. Investigations and recovery cases are phased: a scoped initial assessment first, so you know what the evidence shows before committing to more. For theft victims the first conversation is free, and we never charge a percentage-of-recovery fee up front. Anyone demanding an upfront fee to "release" or "recover" your funds is running a second scam.

Check us independently. Ondology Labs is a registered Cyprus company based at Hawaii Tower, Themistokli Dervi 41, Nicosia, with named founders you can verify on LinkedIn, an ISO/TC 307 technical committee membership, and an ICPAC-licensed audit partner (CYAUSE Audit Services) behind our statutory audit work. We never cold-contact victims and we never ask for payment through gift cards or crypto transfers to "unlock" recovered funds. If someone claiming to be us does any of that, it is an impersonator.

No, and no legitimate firm can. Recovery depends on where the funds went: assets that reach a regulated exchange can often be frozen through legal channels, while funds sitting in a private wallet cannot be seized by anyone without legal process against the holder. We tell you honestly what the trace shows and what your realistic options are. Treat any "guaranteed recovery" promise as a red flag for fraud.

Yes, regularly. For law firms we produce court-ready expert reports on blockchain evidence, tracing exhibits, joint expert statements, and oral testimony. For insolvency practitioners we identify and document crypto assets in an estate, trace pre-insolvency transfers, and support recovery actions. Instructions can run through your firm so the work sits under legal privilege where appropriate.