48. Smart contract incident forensics

Reconstruct exploits from transactions, traces, logs, token movements, and code changes. Produce an incident timeline, identify affected assets, estimate losses, and document evidence for technical and nontechnical audiences.