CipherBlade Founder Says Blockchain Sleuthing Firm 'Hijacked'

Members of the original CipherBlade entity – who no longer control its domain or social platforms – are suing the new ownership.

AccessTimeIconOct 23, 2023 at 4:01 p.m. UTC
Updated Oct 24, 2023 at 7:15 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now
  • Pennsylvania blockchain forensics firm CipherBlade claims that a group of employees executed a “hostile takeover,” in a lawsuit filed in Alaska.
  • The suit alleges misappropriation of trade secrets, unfair competition and racketeering, which the new management disputes.
  • This is the second attempt at suing the company’s new leadership; a previous filing was withdrawn from a New York court.

Blockchain forensics firm CipherBlade appears to be under new management – but court documents show the transition of power was far from peaceful.

The Pennsylvania firm claims that a group of employees executed a “hostile takeover” of the company earlier this year while its founder Richard Sanders was volunteering in war-torn Ukraine assisting local police with crypto investigations, according to a lawsuit. In his absence, the firm's clients and some staff were transferred to new CipherBlade entities in Alaska and Singapore, effectively emptying his business, Sanders told CoinDesk.

“Unfortunately, the CipherBlade domain (, social media pages (including Twitter and LinkedIn) and other CipherBlade property have been stolen from me and from CipherBlade LLC (PA) (my company) by people whom I trusted to uphold my values and keep the company running smoothly,” Sanders wrote in a Monday LinkedIn post.

Now, the company (from which Sanders has stepped away) is making a second attempt at suing’s new management. The firm withdrew a similar complaint from a New York court earlier this year.

A civil complaint filed last week with the U.S. District Court of Alaska seeks damages for a host of misdeeds including misappropriation of trade secrets, unfair competition and racketeering.

Paul Sibenik, former senior investigator at CipherBlade, and Sanders’ pick to run the Pennsylvania firm after the alleged takeover, said the lawsuit’s goal is to warn old and potential clients that the new CipherBlade does not represent the values of the company Sanders built – and that all of its original senior investigators have left the company.

“It's really about the ethics of what is happening. We don't want them to misrepresent themselves as us, as they have mostly brand new investigators with little to no experience at CipherBlade,” Sibenik said in an interview with CoinDesk. “We just don't want people to think what they're buying into, with CipherBlade now, in any way resembles what historically it would have been.”

Following the publication of this article, CipherBlade posted a statement to LinkedIn saying Sanders' company in Pennsylvania "was granted a license to the 'CipherBlade' trademark in 2021, as well as usage of certain web-related infrastructure."

"Over time, collaboration with Sanders became increasingly difficult, and eventually became conclusively impossible when his expressions of personal animosity reached the point of creating personal safety concerns for multiple individuals. For this and other reasons, the trademark owner revoked the trademark license to Sanders’ company," the statement said.

CipherBlade, under Sanders’ leadership, conducted numerous noteworthy investigations into the flow of funds through blockchains, including one that helped free two Venezuelan software engineers wrongly imprisoned over the hacking of a local crypto exchange.

Sanders told CoinDesk that the “hijacked or spin-off CipherBlade” still uses his reputation to draw clients and enhance the platform’s credibility.

“There are still mentions of me, my work and my credentials on cipherblade[.]com’s website despite my continued efforts to have them removed,” Sanders said in the LinkedIn post.

That is not to say Sanders hasn’t faced criticism in the past. In 2019, CipherBlade was accused by journalist and crypto critic Amy Castor of trying to fix the image of crypto exchange ShapeShift when the detective firm claimed the exchange had facilitated the laundering of $6 million less than what the Wall Street Journal had reported in an expose.

The New York court filings from the Pennsylvania firm’s first attempt to sue the new CipherBlade revealed the firm to be a tangled web of companies – which reporters like Castor and David Gerard had previously questioned – spanning the U.K., multiple U.S. states, Singapore and Cyprus.

After the New York court denied Sanders' company’s application for a temporary restraining order and the defendants argued lack of jurisdiction, the firm pulled its lawsuit to refile it in Alaska, home to one of the new entities as well as a defendant.

CipherBlade's new management denies allegations made by Sanders.

"We vigorously dispute Sanders’ allegations and believe that his claims are baseless, vexatious, and motivated by personal animosity. Our repeated efforts to bring about a more orderly and amicable separation have been consistently rebuffed," the company said in the LinkedIn statement.

Although CipherBlade Pennsylvania still exists, and Sibenik is still CEO, it's no longer taking on new clients, he told CoinDesk on Monday.

UPDATE (Oct. 24 07:13 UTC): Adds comment from CipherBlade and clarifies all original senior investigators have left the company, as told by Paul Sibenik following the publication of this article.

Edited by Nikhilesh De and Sheldon Reback.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk offers all employees above a certain salary threshold, including journalists, stock options in the Bullish group as part of their compensation.

Sandali Handagama

Sandali Handagama is CoinDesk's deputy managing editor for policy and regulations, EMEA. She does not own any crypto.

Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to to register and buy your pass now.