A transfer confirmation arrives at midnight. By the time the screen refreshes, the wallet is empty and the funds are moving on-chain across three hops. Most victims assume that is the end of the story. It is not – but the window to act is measured in hours, not weeks.
Bermuda's courts can freeze crypto assets, compel disclosure from virtual-asset service providers, and support recognition of foreign judgments – making the jurisdiction a meaningful recovery forum for digital-asset losses. The tools available include proprietary injunctions, worldwide freezing orders, and Norwich Pharmal-style disclosure orders directed at exchanges and custodians. Speed is not a preference; it is a prerequisite.
This guide walks through each step: from the moment a loss is confirmed, through on-chain tracing and urgent interim relief, to enforcement and cross-border coordination. Where Bermuda's crypto-specific rules are relevant, we name the instrument. Where timing is the critical variable, we say so plainly.
Why Bermuda Is a Viable Forum for Crypto Asset Recovery
Bermuda is a direct-tier jurisdiction for crypto asset recovery – one of a small group where the courts actively engage with digital-asset disputes and where the procedural tools needed to freeze and trace stolen crypto are well established. As of early 2026, Bermuda has in place a licensed digital-asset framework that places regulated virtual-asset service providers (VASPs) within reach of its courts.
That matters for two reasons. First, a VASP holding or handling stolen funds can be the subject of a disclosure order requiring it to identify the account holder and produce transaction records. Second, a freezing order obtained in Bermuda can, in appropriate cases, be served on custodians or exchanges operating under Bermudian licences – even where the underlying wallet sits elsewhere.
Bermuda's Supreme Court has jurisdiction over matters touching on assets held, managed, or transacted within the island's licensed digital-asset environment. The courts are comfortable with the cross-border nature of crypto disputes. In our experience, that familiarity shortens the time between an urgent application and a workable order.
For losses that originate outside Bermuda, the question is whether enough of the transaction chain passes through a Bermudian-regulated entity to give the court a jurisdictional hook. That assessment happens at the tracing stage – before any application is made.
Read our overview of Bermuda as a recovery jurisdiction, including its VASP regime and court procedures.Step 1 – Immediate Triage: What to Do in the First 48 Hours
The first 48 hours after a crypto theft determine whether meaningful recovery action is possible. The priority is not to contact a court; it is to preserve evidence and identify where the funds have gone.
Begin with what you can record without on-chain expertise. Capture every transaction confirmation, wallet address, exchange communication, and screenshot of the platform involved. Do this before anything else. Screenshots are not forensic-grade evidence, but they preserve context that may later be difficult to reconstruct.
Do not transfer any remaining assets from the affected wallet. Doing so can contaminate the on-chain record. The wallet's transaction history is evidence. Instruct your counsel or tracing specialist to pull the on-chain record immediately. Public blockchains are transparent: every movement is recorded, and even a chain of mixed or bridged transactions leaves traceable artefacts. The question is not whether movement has occurred – it is where the funds are now and whether they have reached a cash-out point.
At this stage, the critical output is a preliminary wallet map: the originating wallet, the intermediate hops, and the destination or current resting point. That map is what drives the legal application. Without it, an injunction application has no forensic foundation.
If a centralised exchange or licensed VASP is identified anywhere in the path, contact between that entity and the wrongdoer is the choke point. An order compelling disclosure or a freeze can interrupt the exit route – but only while the funds are still in the exchange's custody. Hours matter here. Once a withdrawal is processed, the window closes.
Step 2 – On-Chain Tracing: Following the Money Across the Chain
On-chain tracing is the forensic engine of crypto asset recovery. It converts a string of wallet addresses into an intelligible movement narrative – from the victim's wallet to the point at which funds either rest or are converted.
Blockchain-analytics tools process the raw transaction data from public ledgers. They identify wallet clusters, flag known high-risk addresses, and map the flow of funds through mixing services, bridges, and intermediate wallets. The goal is attribution: connecting a wallet address to an identifiable entity, whether a regulated exchange, a VASP, or a specific individual.
Tracing is not instantaneous, but it does not require weeks. A preliminary attribution map covering the first several hops can typically be produced within days of instructing a specialist. That map is the evidence base for every legal step that follows.
Where funds pass through a cross-border route – moving from a Bermudian exchange to an offshore custodian or through a bridge to another chain – the tracing analysis needs to follow. We have traced funds across multiple chains and through several jurisdictions in a single matter. The chain of custody does not break simply because the asset changes form or crosses a border.
The moment on-chain tracing identifies a regulated entity in the asset path, a legal application becomes viable. A disclosure order against that entity can confirm the identity of the account holder. A freezing order can stop the withdrawal. Both are urgent applications, made without prior notice to the defendant to avoid alerting the wrongdoer.
Where tracing confirms that funds have already left Bermuda's regulated environment, the question shifts to which other jurisdiction holds the next choke point. That is the cross-border coordination problem addressed later in this guide.
Explore our full guidance on crypto asset recovery, including on-chain tracing methodology and exchange choke points.Step 3 – Urgent Interim Relief: Which Orders Can Bermuda's Courts Grant?
Bermuda's Supreme Court can grant several forms of urgent interim relief relevant to crypto asset theft. The choice of instrument depends on who is being restrained, what is being frozen, and how much is known about the wrongdoer's identity.
A proprietary injunction protects assets on the basis that the claimant has a proprietary interest in the funds – they were never lawfully transferred. This is the correct instrument where the factual basis for a trust or unjust enrichment claim exists. A proprietary injunction can be granted against "persons unknown" where the wallet holder has not yet been identified – a feature that matters enormously in crypto theft where identity is initially concealed behind a pseudonymous address.
A worldwide freezing order is the broadest instrument. It restrains the defendant from dealing with assets up to the value of the claim, wherever in the world those assets are held. The order does not transfer title; it preserves the position while the main claim is advanced. To obtain a WFO, the applicant must show a good arguable case, a real risk of dissipation, and that granting the order is just and convenient. Each element must be supported by evidence – including, critically, the forensic trace report.
A Norwich Pharmal order compels a third party – typically an exchange or VASP – to disclose information that will identify the wrongdoer. Where the exchange holds know-your-customer data, this is the fastest route to attribution. Applications are typically made without notice. A gagging order can prevent the exchange from alerting the account holder that the request has been made.
Where the defendant is known and the funds are in a Bermudian account or custodial wallet, a domestic freezing injunction is often sufficient and faster to obtain than a WFO. The practical question is whether the defendant has assets outside Bermuda that need to be caught – if so, a WFO is the right scope.
A Chabra-style order can extend the freeze to third parties who hold assets on behalf of the wrongdoer – relevant where the proceeds have been layered through related entities or nominee accounts. We regularly advise on the factual threshold for Chabra relief, which requires careful evidence about the third party's connection to the main defendant.
All of these applications can be made on an urgent basis, often within a single working day of filing. The court lists for urgent interim relief in Bermuda are managed to accommodate genuine emergencies. The forensic evidence must, however, be ready before the application is issued.
How Do Cross-Border Complications Affect Bermuda Proceedings?
Cross-border complications are the defining challenge of crypto asset recovery – and Bermuda proceedings are not immune. Stolen crypto rarely rests in one wallet, on one chain, or in one jurisdiction. The recovery plan must account for assets that move.
The first complication is enforcement reach. A Bermudian freezing order binds parties subject to Bermuda's jurisdiction. If the wrongdoer is outside Bermuda and holds assets only in third countries, the order's practical effect depends on the courts of those countries recognising and enforcing it. That requires parallel proceedings or, where the relevant forum is a signatory, recognition under the New York Convention (for arbitral awards) or applicable bilateral enforcement treaties.
The second complication is speed. A WFO obtained in Bermuda does not automatically bind an exchange in a different jurisdiction. Local counsel in the relevant jurisdiction must move to register or enforce the order – or to obtain a parallel injunction – before the funds move further. We coordinate that process. We do not control the timeline once the matter is in a foreign court, but we manage the instruction chain to minimise delay.
The third complication is legal difference. A proprietary injunction that works in Bermuda may not have a direct counterpart in a civil-law jurisdiction where the funds have landed. In those cases, the cross-border strategy involves identifying the closest equivalent order and the evidence package that local counsel will need to obtain it quickly.
Where funds have bridged from one chain to another – for example, from a Bermudian-regulated exchange to an offshore decentralised protocol – the on-chain trail continues across the bridge. The forensic analysis does not stop at the jurisdictional border. The legal strategy, however, must pivot to wherever the next regulated choke point sits.
In a matter we coordinated in the Atlantic region during late 2024, funds moved from a regulated exchange in a common-law jurisdiction through two intermediate wallets before arriving at a centralised custodian in a second jurisdiction. The trace took under 48 hours. Coordinated applications in both forums produced a provisional freeze while the main claim was formulated. The cross-border element added complexity – but not insurmountable delay.
What Are the Limits and Honest Caveats in Bermuda Crypto Recovery?
No competent practitioner promises recovery. The tools described in this guide are real. Their effectiveness depends entirely on the facts.
The most common limiting factor is timing. By the time a victim instructs a specialist, the funds may have already left every regulated environment. A cash-out at an unregulated peer-to-peer exchange or a withdrawal to a self-custodied cold wallet cuts the traceable thread to a regulated entity. On-chain tracing can still follow the trail, but the legal choke point – the step where an order can actually interrupt the flow – may no longer exist.
The second limiting factor is identity. A proprietary injunction against persons unknown is a powerful tool, but the wrongdoer must eventually be identified to obtain final judgment and enforce it. If the Norwich Pharmal or VASP disclosure process produces no useful KYC data – because the account was opened with fraudulent documents – the identity problem persists. We have encountered this pattern. It narrows options but does not always eliminate them.
The third factor is proportionality. Urgent interim relief, forensic tracing, and coordinated cross-border proceedings involve real cost. That cost must be weighed against the realistic prospect of reaching the funds and the amount in dispute. We assess viability frankly at the outset. We do not encourage proceedings that the economics do not support.
One persistent myth needs addressing: the idea that a "recovery service" found online can retrieve funds quickly, for an upfront fee, without any legal process. That is a recovery scam. Real asset recovery requires courts, orders, and forensic evidence. It cannot be done by a third party who claims access to a "blockchain reversal" tool or a special relationship with an exchange. If you have already been approached by such a service after your loss, treat that contact as a second fraud attempt.
The steps above cover the typical pattern for Bermuda proceedings. Your matter turns on specific facts – where the money went, how fast, and which forums can act. A confidential case review tells you whether action is realistic.
To assess the viability of tracing and freezing your crypto assets, contact info@axiomtracel.com
Step-by-Step Summary: Freezing Crypto Assets in Bermuda
The steps below reflect the standard sequence we follow in a Bermuda crypto recovery matter. Each is prerequisite to the next.
- Hour 0 – Secure evidence. Capture all transaction records, wallet addresses, and platform communications. Do not move assets from the affected wallet.
- Hours 0–24 – Instruct a tracing specialist. Commission on-chain tracing to produce a wallet map and identify any regulated entity in the asset path.
- Hours 24–48 – Counsel review. Identify the correct legal instrument (proprietary injunction, WFO, Norwich Pharmal order, or combination). Prepare the evidence bundle.
- Day 2–3 – Without-notice application. File for urgent interim relief in Bermuda's Supreme Court, supported by forensic evidence. Apply for a gagging order to prevent the exchange alerting the wrongdoer.
- On grant of order – Serve on the VASP or exchange. Instruct local counsel in any parallel jurisdiction where funds are held. Monitor compliance.
- Weeks 1–4 – Disclosure and attribution. Use the Norwich Pharmal or VASP disclosure to confirm identity. Advance the main claim. Assess whether Chabra relief is needed for third-party assets.
- Ongoing – Cross-border enforcement. Where assets have moved outside Bermuda, coordinate recognition proceedings or parallel applications through allied counsel in the relevant forum.
This sequence is the starting point, not a fixed script. The specific facts – which chain, which exchange, which jurisdiction – determine where the plan deviates. We adjust in real time.
Read our related guide on enforcing a crypto fraud judgment in Turkey – relevant where assets have moved to that jurisdiction.Self-Assessment: Is Bermuda the Right Forum for Your Matter?
Bermuda is the right primary forum where one or more of the following is true: the wrongdoer holds a licensed digital-asset account in Bermuda; the exchange or custodian handling the funds is regulated by Bermuda's digital-asset authority; or the claimant has a connection to Bermuda that makes it the natural seat for proceedings.
Bermuda is a supporting forum – not the primary one – where funds have already transited through and left for a jurisdiction with stronger connections to the current asset location. In that scenario, the Bermuda proceedings may still be valuable for disclosure purposes (a Norwich Pharmal order against a Bermudian-regulated VASP), even while the primary freeze is sought elsewhere.
The worst outcome is initiating proceedings in the wrong forum. An injunction obtained in Bermuda cannot bind an exchange with no Bermudian presence. Choosing the right court requires knowing where the funds are now, not where they started.
If you are unsure which forum is correct, the place to start is a viability assessment. Our Asset Recovery Viability Check gives you a structured read on whether the facts support action and in which direction. It is not a commitment – it is triage.
We routinely coordinate proceedings with local counsel in Bermuda and across the forums that connect to its digital-asset environment. The assessment is confidential and without obligation.
Frequently Asked Questions
Q: Can stolen crypto really be traced and frozen in Bermuda?
A: Yes – subject to the specific facts. Public blockchains record every transaction; on-chain tracing tools can follow funds through wallets, bridges, and exchanges. Where the trail leads to a virtual-asset service provider regulated in Bermuda, Bermuda's courts can grant disclosure orders and freezing injunctions to interrupt the withdrawal. The outcome depends on speed, the quality of the forensic evidence, and whether a regulated choke point exists in the asset path. No recovery is guaranteed.
Q: How quickly do I need to act after a crypto theft?
A: Immediately. The decisive window is typically 24 to 72 hours from the moment of theft. If funds reach a cash-out point and are withdrawn from a regulated exchange before a freezing order is served, that exit point is lost. On-chain tracing can begin within hours of instruction. Without-notice injunction applications in Bermuda can be filed on an urgent basis within days. Every hour of delay narrows the realistic options.
Q: How is a real recovery specialist different from a recovery scam?
A: A legitimate cross-border recovery practice obtains court orders, commissions forensic analysis, and coordinates with admitted local counsel. It does not promise a specific percentage of return, charge large upfront fees for "blockchain reversals," or claim a special relationship with exchanges that bypasses legal process. If, after a theft, you are contacted by an unsolicited service offering quick recovery for an advance payment, that is almost certainly a second fraud. Real asset recovery is slower, court-dependent, and honest about uncertainty from the outset.
Related Guidance
- Crypto Asset Recovery – cluster overview: on-chain tracing, exchange choke points, and freezing digital assets.
- Bermuda as a recovery jurisdiction: VASP regulation, court procedures, and enforcement reach.
- Enforcing a crypto fraud judgment in Turkey: what to expect when assets have moved to that forum.
About Axiom Trace
Axiom Trace is an independent boutique focused on cross-border and crypto asset recovery. We trace assets that have moved across borders or on-chain and coordinate their freezing and recovery – working with defrauded principals, insolvency practitioners, and the lawyers and funders who refer them. We work lawfully and within applicable sanctions regimes, alongside local counsel where proceedings must be filed. We routinely coordinate proceedings with local counsel in Bermuda and across the forums that connect to its digital-asset environment. In our experience, the quality of the forensic foundation determines the outcome of the legal application. To discuss a matter, contact info@axiomtracel.com.
Disclaimer: This publication is for general information only and is not legal advice, nor a promise or prediction of recovery. No outcome is guaranteed. Asset recovery depends on the specific facts and on the law and procedure of each relevant jurisdiction, where local admitted counsel must act. Axiom Trace routinely coordinates proceedings with local counsel in Bermuda; local procedure governs the filing. Axiom Trace assumes no liability for actions taken or not taken based on this material. For advice on your situation, contact info@axiomtracel.com.
Recovering cross-border or crypto assets?
Confidential first review. We map tracing and recovery options and tell you honestly whether a matter is worth pursuing.
Request a case review