INCIDENT RESPONSE
The first hour after a hack matters most
We run containment, forensics, fund tracing and communications from a response checklist to limit further losses.
PRICE$7kfrom / year (retainer)
WHO IT IS FOR
- Projects under attack or that just spotted abnormal fund movements
- Teams wanting a retainer so someone takes over immediately
- Teams needing forensics and a post-mortem report
WHAT YOU GET
- 24/7 emergency channel
- Containment: pause contracts, freeze accounts and keys, cut off the intrusion path
- Forensics and attack path reconstruction
- Fund tracing and help contacting exchanges and stablecoin issuers
- Disclosure guidance and post-mortem report
HOW IT WORKS
- 01
Take over
Scope the incident and give the first containment actions.
- 02
Respond
Cut off the intrusion, preserve evidence, trace the funds.
- 03
Post-mortem
Reconstruct the attack path and deliver hardening recommendations.
FAQ
Can we contact you without a retainer?
Yes — click "Under attack?" to reach us. Retainer clients get priority response and a pre-built response plan.
Can you recover stolen funds?
We trace fund flows and help contact exchanges and stablecoin issuers to freeze assets, but we cannot promise recovery. Be wary of anyone who "guarantees" it.
What should we do first?
Pause suspicious contracts, freeze related accounts and API keys, do not shut down or wipe compromised machines, record suspicious transaction hashes and times — then contact us immediately.
INCIDENT RESPONSE · ASSESSMENT
Fix the gaps before attackers find them
Reply within 24 business hours · team@musesec.com
CONTACT
Tell us about your situation
Leave your contact details and needs and we will get back to you soon. You can also reach us on WeChat.
- WECHATwhit28
- EMAILteam@musesec.com
- X@MuseSec_Team
- ADDRNanshan, Shenzhen, China
