CCI Digital Asset Seizure and Recovery 2 — Questions and Answers
Question 1: What is a seed phrase (recovery phrase) and why is it critical in cryptocurrency seizures?
- A 12-24 word mnemonic that can fully restore a cryptocurrency wallet, granting complete access to all associated funds (Correct answer)
- A password used to log into a centralized exchange account
- A phrase used to encrypt individual transaction data on the blockchain
- A phrase used by mining pools to identify authorized miners
Correct answer: A 12-24 word mnemonic that can fully restore a cryptocurrency wallet, granting complete access to all associated funds
A BIP-39 seed phrase can fully restore any compatible cryptocurrency wallet on any device, giving whoever possesses it complete control over all associated funds.
Question 2: During a search warrant execution at a suspect's residence, investigators find a piece of paper with 24 words written in sequence. What is this most likely?
- A BIP-39 cryptocurrency wallet seed phrase (mnemonic recovery phrase) (Correct answer)
- A shopping list in a foreign language
- A social media account password list
- An encrypted cipher code
Correct answer: A BIP-39 cryptocurrency wallet seed phrase (mnemonic recovery phrase)
A 24-word sequence found during a search is almost certainly a BIP-39 mnemonic seed phrase, which can be used to recover and access a cryptocurrency wallet.
Question 3: What technique involves compelling a suspect to surrender cryptocurrency private keys, and what US constitutional challenge does it face?
- Compelled decryption; faces Fifth Amendment self-incrimination challenges (Correct answer)
- Voluntary disclosure; faces Fourth Amendment unreasonable search challenges
- Subpoena for keys; faces First Amendment free speech challenges
- Warrant seizure of keys; faces Second Amendment challenges
Correct answer: Compelled decryption; faces Fifth Amendment self-incrimination challenges
Compelling a suspect to surrender private keys (compelled decryption) faces Fifth Amendment challenges because it may constitute compelled testimonial self-incrimination.
Question 4: What is the key difference between criminal forfeiture and civil forfeiture in cryptocurrency cases?
- Criminal forfeiture requires a criminal conviction; civil forfeiture is an action against the property itself and does not require one (Correct answer)
- Civil forfeiture requires a conviction; criminal forfeiture does not
- They are identical legal processes with different names
- Criminal forfeiture applies only to Bitcoin; civil applies to all other assets
Correct answer: Criminal forfeiture requires a criminal conviction; civil forfeiture is an action against the property itself and does not require one
Criminal forfeiture requires a guilty verdict or plea before property is permanently seized, while civil forfeiture is an in rem action against the asset that can proceed without a conviction.
Question 5: When law enforcement seizes a cryptocurrency hardware wallet but does not know the PIN, what legal options exist?
- Seeking a court order compelling the suspect to disclose the PIN or using authorized forensic techniques to extract it (Correct answer)
- Immediately destroying the device as unusable evidence
- Returning the device to the suspect as inaccessible
- Selling the locked device at auction without accessing funds
Correct answer: Seeking a court order compelling the suspect to disclose the PIN or using authorized forensic techniques to extract it
Investigators may pursue compelled disclosure orders through the courts or employ authorized forensic techniques to extract the PIN, subject to applicable constitutional constraints.
Question 6: What does it mean when an exchange describes funds as held in 'cold storage'?
- Funds are kept in offline wallets disconnected from the internet, providing stronger security but less immediate liquidity (Correct answer)
- Funds are frozen by court order and unavailable for trading
- Funds are physically held in a temperature-controlled server room
- Funds are temporarily unavailable due to a scheduled maintenance window
Correct answer: Funds are kept in offline wallets disconnected from the internet, providing stronger security but less immediate liquidity
Cold storage refers to cryptocurrency held in offline wallets that are never connected to the internet, significantly reducing exposure to hacking while limiting transaction speed.
CCI Digital Asset Seizure and Recovery 2
What is a seed phrase (recovery phrase) and why is it critical in cryptocurrency seizures?