THE COMPLETE GUIDE TO TRINETRA
Everything you need to know about India’s autonomous, multi-agent cryptocurrency forensic engine: genesis, mathematical heuristics, 5-agent state machine, new BNSS/BSA criminal statutory compliance, and zero-dollar public architecture.
WHY TRINETRA WAS BUILT: THE ₹1,750+ CR CRISIS
Cyber crime syndicates have industrialized fraud across India. By shifting from traditional UPI mule bank accounts to cryptocurrency laundering chains, criminal networks evade bank freezes in minutes.
The Golden 2-Hour Window
When a victim reports a fraud on the 1930 helpline, money travels through 3-5 mule wallets in under 120 minutes before being deposited into Indian registered exchanges (CoinDCX, WazirX) or cashed out via P2P. Manual police tracing takes 2 to 4 weeks, during which stolen funds vanish.
The Tooling Cost Chasm
State police departments rarely have the $50,000/year annual subscriptions required for proprietary Western tools like Chainalysis Reactor or TRM Labs. Beat officers and district cyber cells need an enterprise-grade solution that costs ₹0 in recurring licenses.
The New Legal Mandates
In July 2024, the Indian legal code was fundamentally rewritten. Investigations can no longer rely on outdated Section 91 CrPC notices or Section 65B Evidence Act certificates. Officers must comply with Section 94 BNSS and Section 63 BSA electronic evidence standards.
CONCURRENT RESOLUTION: SIH26182 & SIH26183
Smart India Hackathon 2026 posed two tightly coupled challenges for the Ministry of Home Affairs. TRINETRA is engineered to solve both simultaneously in a single unified architecture.
Automated Attribution of Unknown Wallets to Nearest VASPs
The Challenge: Law enforcement receives an unlabelled crypto wallet address (e.g., TRON Base58 or Bitcoin SegWit) without knowing which exchange issued it or where funds are flowing.
Trinetra’s Solution: Executes bi-directional pathfinding. Traces UPSTREAM to identify originating hot wallet sweeps, and DOWNSTREAM to track multi-hop peeling chains into terminal cash-out deposit vaults. Calculates shortest topological graph distance and statistical confidence score.
Real-Time Identification of Fraud-Linked Exchanges from Victim Addresses
The Challenge: Victim calls the 1930 Cyber Crime Helpline or files an NCRP complaint. Investigators must identify which exchange holds the stolen funds before the criminal withdraws INR via P2P.
Trinetra’s Solution: Immediately triages the victim deposit address, tracks outbound smurfing across tranches, clusters terminal exchange deposit gateways, and synthesizes a binding Section 94 BNSS freezing order with direct nodal escalation within 3 seconds.
THE 5-AGENT AUTONOMOUS SWARM
Unlike static query tools that make linear database calls, TRINETRA executes a reactive multi-agent state machine. Five specialized autonomous agents collaborate in parallel via Server-Sent Events (SSE).
Seed Ingestion & Network Triage
Ingests suspect addresses from 1930 NCRP or Field Interceptor. Validates Base58/Bech32/Keccak checksums, detects blockchain protocol, checks sanctions blocklists, and queries live public explorer RPC nodes.
Multi-Hop Traversal Walker
Spawns recursive traversal workers to trace fund flows forward and backward. Prunes dead-ends, discards dusting noise ($< 0.50), and compiles transaction graphs into weighted node-edge networks.
Mathematical Heuristics
Evaluates transactions using deterministic mathematical typologies: UTXO Peeling Chain ratio calculation (Heuristic A) and Fan-Out Smurfing dispersion radar with Coefficient of Variation (Heuristic B).
Exchange Cluster Attribution
Matches terminal leaf nodes against the curated Indian VASP registry (CoinDCX, WazirX, ZebPay, Mudrex, Binance India). Identifies deposit sweepers, computes topological distance, and calculates confidence score.
Section 94 Notice & Hashing
Synthesizes court-admissible Section 94 BNSS freezing directives, generates cryptographic SHA-256 evidence certificates under Section 63 BSA, and dispatches emergency alerts to the exchange nodal compliance officer.
Server-Sent Events (SSE)
All 5 agents stream their internal thoughts, prune decisions, and confidence updates to the UI in real time via standard HTTP/2 Server-Sent Events with sub-50ms latency.
DETERMINISTIC AML MATHEMATICS
TRINETRA rejects unexplainable black-box machine learning for forensic attribution. Every risk score and laundering classification is derived from deterministic, court-defensible mathematical algorithms.
UTXO Peeling Ratio Formulation
In Bitcoin and UTXO-based transactions, syndicates peel small sums to mule wallets while returning the majority change to their own hot vault. TRINETRA evaluates the retained change ratio:
- Distinguishes legitimate commerce payments from criminal peeling
- Eliminates false positives on change address identification
Coefficient of Variation Dispersion
To bypass AML monitoring thresholds, syndicates fan out large sums into near-equal tranches across multiple mule addresses. TRINETRA computes the Coefficient of Variation:
- Detects structured smurfing designed to fly under mandatory reporting limits
- Identifies automated bot dispersal vs manual user transfers
100% ALIGNED WITH BNSS & BSA 2023
On 1 July 2024, the colonial Indian Penal Code (IPC), Code of Criminal Procedure (CrPC), and Indian Evidence Act (IEA) were replaced. TRINETRA is native to the new legal statutes.
Section 94 BNSS 2023
Section 94 of the Bharatiya Nagarik Suraksha Sanhita, 2023 empowers an Investigating Officer or court to issue a summons to produce documents, electronic devices, and execute an immediate administrative debit freeze on crypto accounts suspected of holding stolen proceeds.
Registered VASPs are legally bound to acknowledge receipt within 2 hours, enforce custodial freezes, and furnish full KYC, bank withdrawal logs, and IP access records within 24 hours.
Section 63 BSA 2023
Section 63 of the Bharatiya Sakshya Adhiniyam, 2023 governs the admissibility of electronic records. TRINETRA computes cryptographic SHA-256 hash seals over the entire pathfinding graph, raw explorer transaction dumps, and investigator notes.
Evidence seals ensure the prosecution can prove an unbroken, tamper-evident digital chain of custody from the first block query to the final court charge sheet.
₹0.00 RECURRING BUDGET: FREE PUBLIC RPC PIPELINE
How TRINETRA delivers enterprise-tier blockchain forensics for police forces without expensive multi-million dollar software contracts.
Bitcoin UTXO Pipeline
Connects directly to Blockstream.info public explorer API endpoints. Extracts raw inputs, outputs, script types, and locktimes with zero paid subscription keys required.
Tron TRC-20 USDT Pipeline
Queries public TronGrid community gateways and StrongMind public RPCs. Decodes transfer smart contract payloads and parses base58 addresses in client-side WebAssembly.
Ethereum & EVM Pipeline
Uses Cloudflare Public Ethereum RPC and public Polygon/BSC nodes to inspect ERC-20 stablecoin balances, approvals, and contract sweeps without Infura/Alchemy credit limits.
THE 60-SECOND PLATFORM CHEAT SHEET
Designed for SIH evaluators, police leadership, and judges who need every core fact in one view.
SIH 26182 & 26183
Attributing unknown suspect crypto addresses to registered Indian exchanges under 3 seconds.
5-Agent State Machine
Alpha (Triage), Beta (Pathfinder), Gamma (Typology), Delta (VASP), Epsilon (Legal Counsel).
Heuristics A & B
UTXO Peeling Ratio ($R \ge 0.85$) and Fan-Out Smurfing Coefficient of Variation ($CV < 0.50$).
BNSS 94 & BSA 63
Statutory freezing notice + SHA-256 evidence certificate for direct High Court admissibility.