Chainalysis Sues US Over TRM's $94.66M ICE Contract

TL;DR

• Chainalysis has sued the U.S. government over ICE’s $94.66 million sole-source blockchain analytics contract with TRM Labs.

• The company alleges ICE evaluated it using requirements that were not disclosed in the Statement of Need it was instructed to address.

• Potential competitors were given three days and limited to a one-page capability statement.

• Chainalysis claims some of ICE’s criteria closely matched TRM’s existing products and commercial partnerships.

Chainalysis Disputes Record-Setting TRM Contract

Blockchain analytics company Chainalysis is challenging U.S. Immigration and Customs Enforcement over its decision to award rival TRM Labs a $94.66 million sole-source contract.

In a complaint filed with the U.S. Court of Federal Claims, Chainalysis alleges that ICE structured the procurement process around TRM’s existing capabilities and evaluated potential competitors against requirements that were not disclosed in the document they were instructed to address.

A redacted version of the complaint was made public Friday after Chainalysis initially filed the case under seal on July 27.

The lawsuit was brought by Chainalysis Government Solutions, a wholly owned subsidiary that focuses on U.S. government customers.

ICE awarded TRM the contract to provide forensic software and support services for Homeland Security Task Force investigations. Federal records show that the agreement covers July 1, 2026, through June 30, 2027.

Chainalysis describes it as the largest blockchain analytics contract ever awarded by the U.S. government. A review by The Block did not identify a larger federal contract in the sector.

The dispute centers on differences between a Request for Information issued by ICE in May and a subsequent Statement of Need distributed to potential alternatives to TRM.

ICE issued the RFI on May 28, giving companies until June 2 to respond to 18 questions. The document asked whether vendors possessed several highly specific capabilities.

Among other requirements, ICE wanted to know whether a provider:

• Owned a proprietary database containing more than one million reports from scam victims.

• Operated an AI-based investigative platform capable of agentic data retrieval and entity resolution.

• Could automatically notify virtual asset service providers when flagged funds moved downstream.

• Could enable those providers to place voluntary holds on assets without human coordination for each event.

• Maintained an operational partnership with stablecoin issuers for coordinating asset freezes with international law enforcement.

The RFI stated that it was intended only for market research and acquisition planning and did not constitute a formal solicitation.

On June 8, ICE issued a notice declaring its intention to award the contract directly to TRM. Other companies were permitted to challenge that conclusion by demonstrating that they could satisfy the agency’s needs.

However, interested companies received only three days to submit their responses and were limited to a one-page capability statement. Chainalysis claims it was the only alternative provider to respond.

Final Statement Presented Broader Mission Areas

The Statement of Need given to potential competitors differed substantially from the earlier RFI, according to Chainalysis.

Rather than listing the same highly specific technical and commercial requirements, the statement outlined three broad mission areas:

• Scam disruption.

• Cybercrime disruption, including support for state, local, tribal, and territorial authorities.

• Sextortion disruption.

ICE said it needed capabilities such as AI-powered complaint triage, real-time scam-wallet screening, asset tracing and recovery, ransomware detection, and tools to identify and disrupt sextortion networks.

Chainalysis argues that many requirements in the May RFI were omitted from this final statement. Despite those omissions, ICE allegedly relied on the earlier, narrower criteria when determining whether Chainalysis could compete for the contract.

The agency’s subsequent market research reportedly concluded that Chainalysis lacked automated real-time disruption tools, integrated onchain and offchain intelligence, and scalable victim identification and notification capabilities.

Chainalysis claims those conclusions were based on criteria that it had not been told would determine eligibility for the award.

Chainalysis Alleges Criteria Closely Matched TRM Products

ICE’s justification for selecting TRM cited capabilities that were more specific than those listed in the Statement of Need, the lawsuit alleges.

For example, the final statement requested real-time scam-wallet screening for financial institutions and exchanges. The earlier RFI went further, asking whether a platform could automatically notify participating service providers as flagged funds moved downstream, enabling voluntary holds without event-specific human coordination.

Chainalysis argues it was not informed that this automated mechanism would be used to determine whether another vendor could satisfy ICE’s requirements.

The lawsuit claims the wording tracked the architecture of TRM’s Beacon Network, a product designed to facilitate rapid coordination among law enforcement agencies, exchanges, and other industry participants.

ICE’s justification also cited TRM’s proprietary scam-victim database, AI-native investigative platform, automated asset-freeze capabilities, stablecoin issuer partnerships, and cleared workforce as unique qualifications.

Chainalysis argues that several of those requirements never appeared in the Statement of Need. It also disputes that all of them were exclusive to TRM.

According to the complaint, ICE’s own market research recognized that both companies operated mature investigative platforms incorporating AI. The agency also reportedly acknowledged Chainalysis’ law-enforcement experience and access to personnel with the required security clearances.

Chainalysis also highlighted inconsistencies surrounding ICE’s sextortion-related requirements.

Sextortion did not appear in any of the 18 questions included in the May RFI. However, it became one of the three principal mission areas in the subsequent Statement of Need.

The company cites this change as further evidence that ICE shifted or applied its requirements inconsistently throughout the procurement process.

Chainalysis alleges the agency effectively evaluated vendors using a mixture of requirements drawn from two different documents without clearly identifying which criteria were mandatory.

Competitors Received Three Days and One Page to Respond

Chainalysis Government Solutions submitted its one-page capability statement on June 11. The company says its response addressed all three mission areas included in the Statement of Need.

The following day, ICE completed its market research and concluded that TRM was the only provider capable of meeting all its operational, technical, and data requirements.

Chainalysis claims the agency did not ask a single follow-up question before reaching that decision.

According to the lawsuit, ICE did not seek additional information about Chainalysis’ platform, its cleared personnel, or its existing work with agencies including Homeland Security Investigations, the FBI, and the Drug Enforcement Administration.

Chainalysis argues that the compressed timeframe and restrictive page limit transformed the process into a formality rather than a genuine attempt to determine whether another qualified provider could compete.

The company noted that ICE’s Statement of Need was itself approximately one and a half pages long, yet alternative providers received only one page to explain how they could satisfy three complicated mission areas and their associated technical requirements.

Chainalysis concedes that its platform does not offer the exact automated notification and voluntary-hold mechanism described in ICE’s RFI.

Instead, the company says its approach emphasizes coordination with law enforcement before a virtual asset service provider is asked to freeze or hold assets.

Chainalysis argues that this alternative could satisfy ICE’s underlying goal more effectively. However, the company alleges the agency neither evaluated the proposed approach nor explained why it was insufficient.

The lawsuit also claims Chainalysis could have obtained a scam-victim database of the required scale, developed automated notifications, and established the necessary partnerships if ICE had identified those features as mandatory requirements.

Lawsuit Presents Two Explanations for Alleged Procurement Flaws

Chainalysis argues ICE’s procurement was improper under either of two possible interpretations.

If ICE needed only the broader capability described in the Statement of Need—real-time scam-wallet screening—Chainalysis alleges the agency used a narrower RFI question designed around a proprietary feature offered by TRM.

Alternatively, if automated downstream notifications and voluntary asset holds were essential requirements, Chainalysis contends ICE failed to disclose them in the Statement of Need used by alternative vendors to prepare their submissions.

Under either scenario, Chainalysis argues it was not given a fair opportunity to demonstrate its ability to perform the work.

Chainalysis initially challenged ICE’s decision before the Government Accountability Office on July 12.

After ICE moved to dismiss the protest and provided its sole-source justification and market research report, Chainalysis withdrew the GAO challenge on July 21. It then moved the dispute to the Court of Federal Claims.

Chainalysis wants the court to declare the sole-source award unlawful, permanently prevent performance of the TRM contract, and order ICE to conduct a full and open competition.

TRM has intervened in the case to defend the contract. The court has not ruled on the merits of Chainalysis’ allegations, and oral arguments are scheduled for September 2.