Agentic on-chain hack tracer with executable evals, exposed as a read-only MCP server — live transaction tracing, real OFAC sanctions-list matching, evidence-cited LLM narration, and demand-letter drafting for cases too small for institutional vendors or law enforcement.