Unlocking Trust: A Deep Dive into Forensics of Tron Transactions Through TRUST Wallet
摘要
As the use of cryptocurrencies in criminal activities continues to grow, it is essential for law enforcement agencies to deepen their knowledge of various cryptocurrencies and related digital forensics. This paper focuses on examining the digital forensic aspects of the Tron cryptocurrency within the Trust Wallet platform, a topic with limited prior research. The methodology involves executing a Tron transaction via Trust Wallet and capturing RAM, network, and disk images before and after the transaction for analysis. The findings are significant, identifying 12 digital artifacts in RAM, 2 in network data, and 8 in disk analysis. Furthermore, the study highlights 8 string patterns that precede Tron-related digital artifacts in RAM, which can assist in locating evidence when specific values are unknown. Network analysis also uncovered the server addresses of both Trust Wallet and the Tron server used by the wallet, offering a novel approach for law enforcement to analyze Internet Protocol Data Records (IPDR). This paper offers a new perspective on cryptocurrency digital forensics.