Etherscan Flow simplifies transaction mapping and tracing for onchain investigations

Etherscan just shipped a tool that turns blockchain forensics from a dark art into something closer to a Google search. The new Etherscan Flow agent skill, part of the company’s Build with AI suite, lets AI agents and coding assistants trace, verify, and visualize onchain money flows across more than 60 EVM-compatible chains. It got a real-world stress test almost immediately. Security researchers used Flow to map out exactly how the RedSonic Vault exploit unfolded around September 5, 2026, when an attacker used a flash loan to drain approximately 9.25 ETH, worth roughly $23,000, in a single transaction. How Etherscan Flow actually works Think of Flow as a translation layer between raw blockchain data and human understanding. The tool queries Etherscan’s live API data and generates what the company calls a “Flow Case” file, a structured output that can be imported into etherscan.io/flow for visual examination. The practical upshot: instead of manually hopping between block explorers, contract calls, and wallet addresses to piece together what happened in a complex transaction, Flow does the legwork. It traces transactions and addresses, profiles entities like DAOs or protocols, and...