Crypto expert witness in Cyprus and Greece
Blockchain evidence that holds up under cross-examination.
Expert witness and court support for lawyers running cryptocurrency cases in Cyprus, Greece, and across the EU. We produce independent, court-ready expert reports on on-chain evidence, work to your timetable, and give oral evidence at the hearing. Our duty is to the court, and we say what the evidence says.
Our duty is to the court
An expert instructed by one party still owes an overriding duty to the tribunal hearing the case. That duty comes before any duty to the party paying the fee, and we state it in every report. In practice it means we will not adopt the conclusion you would prefer if the chain data does not support it. We will tell you early, privately, and in time for you to decide how to proceed. This is not a disclaimer. It is the reason an expert report carries weight at all. An expert who shades findings to suit the instructing side is exposed on the first day of cross-examination, and the client pays for it.
Who You Would Be Instructing
Expert engagements are led personally by the firm's founders. You are instructing a named individual, not a queue.

Iraklis co-founded Ondology Labs and leads its blockchain forensics and auditing work from Limassol, Cyprus. He has spent more than seven years in cryptocurrency, including over two years as a senior data analyst at Cointelegraph, and works on forensic investigations, transaction tracing, and on-chain analysis for legal teams and digital-asset businesses.
- MSc in Blockchain and Digital Currency
- ISO Technical Committee Member
- 7+ years in cryptocurrency
- Forensic investigations & data analysis

Panayiotis co-founded Ondology Labs and leads its technical work from Limassol, Cyprus. A data scientist by background with more than five years in cryptocurrency, he builds the analytics behind the firm's tracing and audit engagements — clustering, risk scoring, and cross-chain transaction analysis — and works on financial crime detection for legal teams and digital-asset businesses.
- MSc in Data Science and Analytics
- AI & Machine Learning professional
- 5+ years in cryptocurrency
- Financial crime & forensic analysis
Full CVs, including relevant instructions and appointments, are available to instructing lawyers on request.
Proceedings We Are Instructed In
Crypto now turns up in disputes that have nothing to do with crypto. The common thread is a question about where value went, who controlled it, and what the record proves.
Civil fraud & asset tracing
Following misappropriated value across wallets, chains, and off-ramps, and evidencing whether it can still be identified in a traceable form. Often the core of both the claim and the eventual enforcement.
Freezing & interim applications
Focused analysis on short notice to support an urgent application: where the funds are now, which exchange or custodian holds them, and the risk of dissipation. Prepared to be filed, not summarised later.
Insolvency & bankruptcy
Identifying digital assets belonging to the estate, reconstructing transfers made before the relevant date, and valuing holdings at the dates that matter to office holders and creditors.
Criminal prosecution & defence
Evidence for prosecuting authorities, and independent review for the defence. Attribution assumptions in crypto cases are frequently overstated, and testing them is legitimate expert work on either side.
Regulatory & arbitration
Expert evidence in enforcement proceedings and commercial arbitration, including disputes over custody, exchange conduct, token issuance, and the performance of contractual obligations on-chain.
Matrimonial & probate
Undisclosed crypto holdings in financial remedy proceedings and estate disputes. We test whether a disclosed position is complete and identify what the on-chain record shows against it.
What the Expert Report Contains
Opposing counsel rarely disputes the transactions. Blockchain data is public and verifiable. What gets attacked is the reasoning laid over it, so the report is built to show every step of that reasoning.
Instructions & questions
The letter of instruction and the specific questions put to us, reproduced so the scope of the opinion is unambiguous and nothing is answered that was not asked.
Methodology & data sources
The tools, chains, data providers, and analytical steps used, set out so another competent expert could repeat the work and reach the same result.
Chain of custody
How each item of evidence was obtained, when, by whom, and how it has been preserved since. Blockchain data is verifiable at source, and we record what is needed to verify it.
Findings & flow of funds
The conclusions in plain language, supported by transaction schedules and visual flow-of-funds maps a judge can follow without a technical briefing.
Assumptions & limitations
Every point where the trail could not be resolved, where attribution rests on inference rather than proof, and where an alternative explanation is open. Stated by us, before opposing counsel states it.
Declaration & duty to the court
A statement of our qualifications, our independence from the parties, and our understanding that our duty to the court overrides any duty to the party instructing us.
How an Instruction Runs
Scope and deadline agreed in writing before analysis begins, so the terms of the opinion cannot be adjusted once the findings are known.
Conflict check & scoping call
You tell us the parties, the issues, and the timetable. We clear conflicts, confirm the work is within our expertise, and tell you if it is not.
Letter of instruction
You set the questions in writing. We agree scope, fee basis, and the report deadline before any analysis starts, so the terms of the opinion are fixed in advance.
Evidence review & analysis
We work through the disclosure and the on-chain record, trace the transactions in issue, and test the assumptions rather than adopting them from the case papers.
Draft findings & report
We share draft findings so you can identify factual errors and matters we have misunderstood. The conclusions themselves are ours and are not negotiated.
Hearing & cross-examination
Expert meetings, joint statements where a second expert is instructed, and oral evidence at the hearing — explaining the analysis and defending the methodology under questioning.
Joint Experts, Meetings and the Hearing
Most of the technical disagreement in a crypto case narrows before anyone reaches the witness box, because both experts are looking at the same public ledger.
Joint and single joint instructions
We accept single joint expert appointments where the parties or the tribunal prefer one expert to two, and we take joint instructions on agreed terms. Where each side has its own expert, we take part in expert discussions and in producing a joint statement that records what is agreed, what is not, and the reason for the difference. Narrowing the technical issues early usually saves more hearing time than any argument about them later.
Giving oral evidence
We attend to give evidence and to be cross-examined on the report. The work that matters here was done months earlier: an opinion with documented methodology, stated assumptions, and limitations disclosed on the face of the report is a much harder target than one that has to be defended for the first time under questioning. We answer the question asked, we concede the point where the point is good, and we do not argue the client's case from the witness box.
What Blockchain Evidence Can and Cannot Establish
Worth agreeing before instructions, because the gap between the two is where most crypto expert evidence is successfully attacked.
It can establish
- That a specific transfer of a specific amount occurred at a recorded time
- The path funds took across wallets, chains, bridges, and swaps
- That a set of addresses behaves as a single controlled cluster
- That value reached a named exchange, custodian, or identifiable service
- That a party's disclosed position is inconsistent with the on-chain record
It cannot establish on its own
- Who physically held the keys at the moment a transaction was signed
- The intention or state of mind behind a transfer
- The identity behind an address without off-chain corroboration
- What happened inside an exchange, where movements are off-chain
- A reliable path through a mixer or a privacy-preserving protocol
Where a finding depends on inference rather than proof, we say so in the report and explain what would be needed to close the gap — usually exchange records obtained through disclosure or a third-party order.
Cyprus, Greece and instructions from abroad
We are a blockchain forensics firm based in Cyprus, and we work directly with legal teams in Cyprus and Greece. Blockchain evidence itself is not jurisdictional. The same ledger is available wherever the case is heard, which is why we are also instructed by lawyers elsewhere in the EU and beyond, working alongside them rather than in place of local counsel.
The procedural requirements for expert evidence do vary by forum: the form of the expert declaration, the rules on court permission, disclosure of instructions, and whether experts meet before the hearing. We ask the instructing lawyer to confirm the rules that apply in their forum and we write the report to comply with them. We do not advise on procedure, and we do not give legal advice. That is your side of the file.
If funds are still traceable, start with crypto asset recoveryExpert Witness FAQ
What does a crypto expert witness actually do?
Two things. First, analyse the blockchain evidence in a case and set out the findings in a written report the court can rely on: what moved, when, between which addresses, and what can and cannot be inferred from that. Second, explain it. A judge or arbitrator will usually have no technical background, so the value is in translating on-chain data into plain findings that survive scrutiny — and in appearing to give oral evidence and be cross-examined on them if the matter is heard.
Who instructs you, and in what kinds of proceedings?
Lawyers, almost always. Litigators running civil fraud and asset tracing claims, counsel preparing freezing or other interim applications, insolvency practitioners, criminal prosecutors and defence teams, regulatory enforcement lawyers, arbitration counsel, and family and probate practitioners dealing with assets a party has not disclosed. We are also instructed by in-house counsel and by insurers. Occasionally a party instructs us directly, but the report is usually stronger when it comes through the legal team who know what is in issue.
Will you support our case?
We will analyse the evidence and report what it shows. That is not the same thing, and it is worth being blunt about. An expert instructed by one side still owes an overriding duty to the court, above any duty to the party paying the fee. If the chain data does not support the position you would like it to support, we will say so in the report. That is the point of an independent expert. An expert who shades findings to suit the instructing party is worth nothing once cross-examination starts, and the damage lands on the client rather than the expert.
What is in the expert report?
Our instructions and the questions we were asked. Our qualifications and the basis of our expertise. The material we were given and the material we obtained ourselves. The methodology, tools, and data sources used, in enough detail that another competent expert could repeat the exercise. The chain of custody over the evidence. The findings, with flow-of-funds diagrams and the underlying transaction schedules exhibited. The limitations and assumptions. And a declaration of independence and of our duty to the court.
Why does methodology matter so much?
Because it is the first thing opposing counsel attacks. Blockchain data is public, so the transactions themselves are rarely disputed. What gets disputed is the reasoning laid over them: address clustering, attribution of a wallet to a person or entity, the treatment of mixers and bridges, and the assumptions used where a hop cannot be resolved. A report that documents each inferential step, and separates observed fact from expert opinion, holds. A report that presents conclusions without showing the work does not.
Can you work as a single joint expert, or attend expert meetings?
Yes to both. We accept single joint expert appointments where the parties or the court prefer one expert rather than two, and we take joint instructions on agreed terms. Where each side has its own expert, we take part in expert discussions and in producing a joint statement identifying what is agreed, what is not, and why. In practice much of the technical disagreement in crypto cases narrows quickly at that stage, because the underlying data is common to both experts.
Can you work to a court timetable?
We agree a deadline before accepting instructions, and we do not accept instructions we cannot meet. Tell us the date the report is due and what else is fixed in the timetable — disclosure, expert meetings, the hearing window. Urgent applications are a different rhythm: for a freezing or interim application we can produce a focused analysis and supporting evidence on short notice, then a fuller report later. If the scope is not achievable in the time available, we will say so at the outset rather than deliver something thin.
Which jurisdictions do you cover?
Cyprus and Greece are where we are based and where we work directly with local legal teams and courts. Blockchain evidence itself is not jurisdictional, so we are also instructed by lawyers elsewhere in the EU and beyond, working alongside them on procedure and local requirements for expert evidence. We ask instructing lawyers to confirm the procedural rules that apply to expert evidence in their forum, and we write the report to comply with them.
What do you need from us to start?
A clear letter of instruction stating the questions you want answered and the issues in the proceedings, the relevant pleadings or case summary, and the underlying evidence: wallet addresses, transaction hashes, exchange records, disclosure material, and any prior expert reports. The timetable and the hearing date. And the identity of the parties, so we can run a conflict check before accepting. If some of the on-chain material is missing, we can often reconstruct it from the addresses.
More questions answered on our general FAQ.
Related Reading
Considering an expert on a crypto case?
Send us the issues, the timetable, and the parties for a conflict check. We will tell you whether the evidence can answer your questions before you instruct.