HOP 1/4 · SOURCE
Trace
Start at the exploit. Follow every hop, not just the big ones.
BLOCKCHAIN · RESEARCH · COMMUNITY · KUALA LUMPUR
Hao Xiang
I work at the intersection of blockchain forensics, crypto research, and community building.
HOVER A CLUSTER TO EXPLORESCROLL TO EXPLORE ↓
01 / ABOUT
Hello
I work at the intersection of blockchain forensics, crypto research, and community building. Currently doing onchain risk analysis at Bybit and growing the Solana ecosystem through Superteam Malaysia. Previously at CoinGecko and the Arbitrum Foundation.
// CS grad · speaker · builder · occasional shitposter
INVESTIGATINGOnchain risk at Bybit
BUILDINGHermes / OpenClaw agent stack
COMMUNITYDevRel & partnerships at Superteam Malaysia
WHAT I DO
Blockchain ForensicsFund TracingAML AnalysisCrypto ResearchContent & WritingDeveloper RelationsCommunity BuildingPublic SpeakingAPI DocumentationDune AnalyticsEVMSolanaTronMeme Creation
02 / INVESTIGATIONS
Investigations
Onchain risk, fund tracing and attribution.
HOP 2/4 · PEEL
Cluster
Group addresses by timing, behaviour and shared control until the noise becomes a shape.
HOP 3/4 · BRIDGE
Cross
Resolve bridges and swaps so a change of chain doesn’t end the trail.
HOP 4/4 · OFF-RAMP
Attribute
Land on the exchange, the deposit address and the freeze request.
WORK IN THIS AREA
BYBIT · DEC 2024 – PRESENT
Onchain risk monitoring
Risk monitoring frameworks for Bybit wallets, cross-chain bridges and internal DeFi integrations, plus fund tracing and DPRK attribution analysis.
FORENSICS · DPRK TRACKING
lazarusbounty.com ↗
Platform for tracking Lazarus Group stolen cryptocurrency.
TOOLING · FORENSIC VISUALISATION
Chainflow
Visualising large-scale crypto fund flows as interactive directed graphs.
03 / PROJECTS
Things I’ve built
01 · FORENSICS · DPRK TRACKING
lazarusbounty.com
Platform for tracking Lazarus Group stolen cryptocurrency. Aggregates fund flow intelligence, coordinates victims, and drives freeze requests with exchanges and law enforcement.
02 · TOOLING · FORENSIC VISUALISATION
Chainflow
React Flow + FastAPI + SQLite tool for visualising large-scale crypto fund flows as interactive directed graphs. Designed for investigators mapping multi-hop, cross-chain transactions.
React FlowFastAPISQLite
03 · AI · AGENT INFRASTRUCTURE
Hermes / OpenClaw Agent Stack
Self-hosted agent stack combining MCP servers, LLMs, Telegram/Lark bots, and playbook-driven automation. Runs on a Tencent VPS and Radxa Rock 5B+ SBC with a voice assistant layer (Whisper + Piper TTS).
MCPLLMsWhisperPiper TTS
04 · RESEARCH & CONTENT
Blockchain Writing & Talks
In-depth articles on blockchain, DeFi, and Solana published through Superteam Malaysia and APUBCC Substack. Presented at industry events and university sessions on Layer-2, cross-chain bridges, and crypto security.
04 / EXPERIENCE
Where I’ve worked
| Dates | Role | Org | Description |
|---|---|---|---|
| DEC 2024 – PRESENT | Onchain Risk Analyst | Bybit | Building risk monitoring frameworks for internal projects — Bybit wallets, cross-chain bridges, and internal DeFi integrations. Designing monitoring plans to detect anomalies and flag suspicious onchain activity across protocols. Also involved in fund tracing and DPRK attribution analysis on the side. |
| NOV 2023 – JUN 2024 | Product Assistant | CoinGecko | Led API documentation migration from Swagger to Readme.io — improved developer onboarding by 30% and reduced support tickets by 20%. Enhanced OpenAPI specs with interactive examples and community support on Discord and Twitter. |
| OCT 2023 – JUN 2024 | Ambassador | Arbitrum Foundation | Organised educational events and meetups on Layer-2 solutions, DApps, and hands-on coding sessions to grow the Arbitrum community in Malaysia. |
| APR – AUG 2023 | Operations Intern | CoinGecko | Data analytics, coin listings, market mappings, stablecoin classification, and data standardisation across platforms. |
05 / COMMUNITY
Community
| Dates | Role | Org | Description |
|---|---|---|---|
| AUG 2024 – PRESENT | DevRel & Partnerships | Superteam Malaysia | Writing about Solana, speaking at events, building university partnerships, and mentoring students through hackathons and project ideation. |
| SEP 2021 – JUN 2024 | Ext. Relations / Research Lead / Community Lead | APU Blockchain & Cryptocurrency Club | Secured partnerships with Starknet, Ethereum Foundation (Devcon), Pendle Finance, and Mantle Network. Ran hackathons, applied for blockchain grants, managed the Substack, and built the Discord community from scratch. |
06 / CONTACT
Let’s talk
Open to research collabs & consulting.