Chainalysis accuses ICE of unfairly steering $95 million blockchain contract to TRM Labs

Blockchain analytics firm Chainalysis is accusing U.S. Immigration and Customs Enforcement (ICE) of tailoring a nearly $95 million sole-source contract to rival TRM Labs, alleging in a newly public complaint that the agency judged Chainalysis against requirements ICE had not disclosed in the document the firm was instructed to address.

A redacted version of the complaint was filed publicly Friday in the U.S. Court of Federal Claims, after a sealed version was originally filed on July 27. Chainalysis Government Solutions (CGS), a wholly owned subsidiary of Chainalysis focused on U.S. government customers, alleges ICE improperly relied on criteria from an earlier Request for Information rather than the subsequent Statement of Need provided to TRM's rivals for the sole-source award. It further alleges several of those criteria closely tracked TRM's existing products and commercial relationships.

ICE awarded TRM a $94.66 million sole-source contract to provide forensic software and support services for Homeland Security Task Force investigations. The award has a period of performance from July 1, 2026, through June 30, 2027, according to federal contract records. Chainalysis describes the deal in its complaint as the largest blockchain analytics contract ever awarded by the U.S. government, and a review of federal blockchain contracts by The Block could find no larger counter-example. 

Two sets of requirements

According to the complaint, ICE issued a Request for Information (RFI) on May 28, with responses due June 2, asking respondents 18 questions, including whether they "own and operate a proprietary scam victim-reporting database of greater than one million records related to financial scams," operate an investigative platform that uses AI to support "agentic data retrieval and entity resolution," could automatically notify participating virtual asset service providers (VASPs) when flagged funds move downstream so the firms can execute voluntary holds without requiring "per-event human coordination," and "hold an operational partnership with stablecoin issuers for coordinating illicit asset freezes with global law enforcement."

The RFI itself stated that it was not a solicitation and was intended solely for market research and acquisition planning, according to the complaint.

ICE then issued a Notice of Intent to Sole Source the contract to TRM on June 8, though it allowed other interested companies to demonstrate that they could meet the agency's needs by responding to a separate Statement of Need. Those firms were given three days to submit capability statements limited to just one page, according to the complaint, which claims Chainalysis was the only firm to submit such a statement. 

That Statement of Need outlined three broader mission areas: scam disruption, cybercrime disruption (including state, local, tribal and territorial resilience), and "sextortion" disruption. Per the statement, ICE sought capabilities including AI-powered victim complaint triage, real-time scam wallet screening, asset tracing and recovery, ransomware detection and tools for identifying and disrupting sextortion networks.

"Critically ... a significant number of the requirements from the agency's RFI, issued on May 28, 2026, did not appear in the final Statement of Need, issued less than two weeks later," Chainalysis alleges. Nevertheless, ICE's market research later concluded that Chainalysis would not meet the government's needs because it lacked "automated, real-time disruption capabilities," integrated onchain and offchain intelligence, and scalable victim identification and notification, according to the complaint.

ICE's justification for the award cited a more specific set of capabilities than those laid out in the Statement of Need, according to the complaint. For example, the Statement of Need called for "real-time scam wallet screening for financial institutions and exchanges," while the earlier RFI asked whether vendors could automatically notify VASPs when flagged funds moved so those firms could execute voluntary holds without per-event human coordination. Chainalysis argues it was never told that the latter capability would be used to determine whether another vendor could compete.

Chainalysis also notes that “sextortion” did not appear anywhere in the earlier 18-question RFI, despite becoming one of the Statement of Need's three primary mission areas.

ICE's justification also identified TRM's "unique qualifications" as including a large proprietary scam-victim database, an AI-native investigative platform, automated asset-freeze capabilities through its Beacon Network, formal partnerships with stablecoin issuers and a cleared workforce. Chainalysis alleges several of those capabilities did not appear in the Statement of Need at all.

Others, the lawsuit says, were not actually unique to TRM. ICE's own market research allegedly acknowledged that both companies operated mature investigative platforms incorporating AI and recognized Chainalysis' law-enforcement experience and access to cleared personnel.

Three days and one page

Chainalysis Government Solutions submitted its one-page capability statement on June 11, per the lawsuit. "CGS addressed each primary mission area identified in the Agency's Statement of Need," the lawsuit claims.

However, the following day, ICE finalized market research determining that TRM was the only provider capable of satisfying all of its operational, technical and data needs.

Chainalysis alleges ICE did not ask it a single follow-up question about how its platform and cleared personnel could meet the Statement of Need before reaching that conclusion, nor did it seek clarification about its existing government work with HSI, the FBI, or the DEA. The firm's lawsuit argues the compressed process amounted to a "pro forma" exercise rather than a meaningful effort to determine whether another capable alternative to TRM existed.

The lawsuit complains in particular about the one-page limit imposed by ICE's Notice of Intent. "The Statement of Need itself ... spans one-and-a-half pages and encompasses three complex mission areas ... each containing numerous detailed sub-requirements," the lawsuit states. "As such, the record shows that [ICE] granted itself more space to articulate its needs than it permitted potential alternative sources like CGS to explain how they could meet them." 

Chainalysis acknowledges that it did not offer the exact automated broadcast-to-voluntary-hold mechanism described in ICE's RFI, though the firm claims its system instead emphasizes coordination with law enforcement before a VASP is asked to act, which it argues could more effectively achieve ICE's underlying goal. The firm alleges ICE did not analyze Chainalysis' proposed alternative or explain why it would fail to satisfy the agency's minimum needs.

Furthermore, the lawsuit alleges that the hold mechanism language used by ICE tracked TRM's proprietary product. "That question which tracks the architecture of a single vendor's proprietary product bore no resemblance to the corresponding language in the Statement of Need," the complaint states.

Chainalysis further alleges that, had ICE identified certain other RFI criteria as actual requirements, it could have obtained a scam victim dataset of the required size, integrated automated notifications into its program, and established the necessary operational partnership.

In essence, Chainalysis argues ICE's process was flawed in one of two possible ways: if the agency actually needed real-time scam-wallet screening, the firm alleges the narrower RFI question was designed around a capability only one vendor, TRM Labs, could provide. If the automated downstream notifications ICE described were actually required, Chainalysis argues the agency failed to disclose that requirement in the Statement of Need that Chainalysis and other potential alternative vendors were told would be used to evaluate them. 

Chainalysis' claims

Chainalysis first challenged ICE's decision to award TRM the contract at the Government Accountability Office on July 12. After ICE sought dismissal and provided its justification and market research report, Chainalysis withdrew its GAO protest on July 21 and moved the dispute to the Court of Federal Claims, according to the complaint.

Chainalysis raises seven counts against the government, including claims that ICE failed to meaningfully consider its capability statement, relied on unduly restrictive specifications, and improperly based its sole-source justification on the earlier RFI rather than the Statement of Need. It also challenges ICE's interpretation of procurement rules altered under the government's "Revolutionary FAR Overhaul" and argues inadequate procurement planning cannot justify avoiding competition.

Chainalysis is asking the court to declare the sole-source award unlawful, permanently block performance of the TRM contract and order ICE to conduct a full and open competition for the work.

TRM Labs has intervened in the case to defend the award, and the court has not yet ruled on the merits of Chainalysis' claims. Oral argument is currently scheduled for Sept. 2. TRM Labs and ICE did not immediately respond to requests for comment on the lawsuit from The Block.