# Hacken ## Docs - [Alerts History](https://docs.extractor.live/a3-documentation/alerts-history.md): Browse, filter, and resolve every alert fired across your portfolio in the Alerts History — a paginated log of detector and trigger events. - [Analytics](https://docs.extractor.live/a3-documentation/analytics.md): Build custom Analytics dashboards in Hacken Extractor with widgets that visualize on-chain risk, alerts, and detector data over time. - [Audit Trail](https://docs.extractor.live/a3-documentation/audit-trail.md): Review every user action in your Hacken Extractor organization with the Audit Trail — a tamper-evident log of logins, changes, and configuration updates. - [Dashboard](https://docs.extractor.live/a3-documentation/dashboard.md): The Dashboard is the main landing page after login — it shows a portfolio-wide risk or compliance summary, latest alerts, and per-category score trends. - [Introduction](https://docs.extractor.live/a3-documentation/intro.md): A3 is a Regulatory Compliance Intelligence Platform — a single source of truth for compliance, security, and economic risks across the Web3 ecosystem. - [Portfolios & Projects](https://docs.extractor.live/a3-documentation/portfolios-and-projects.md): The top-level grouping organizes related projects for collective monitoring. Each project represents a monitored protocol, asset, exchange, or entity. - [Resolving Alerts](https://docs.extractor.live/a3-documentation/resolving-alerts.md): Mark Hacken Extractor alerts as resolved individually, in bulk, or from the Alert Details panel — a guide to closing out detector and trigger events. - [Settings](https://docs.extractor.live/a3-documentation/settings.md): Manage your Hacken Extractor profile, enable two-factor authentication, and configure organization team members and permissions in the Settings page. - [Advanced Monitoring](https://docs.extractor.live/advanced-monitoring/intro.md): Define custom on-chain trigger conditions on your smart contracts with Hacken Extractor Advanced Monitoring and get alerted the moment they are met. - [Fungible Token (EIP-20 compatible)](https://docs.extractor.live/advanced-monitoring/recommendations-by-sc-type/fungible-token-eip-20-compatible.md): Recommended Hacken Extractor triggers for ERC-20 / EIP-20 fungible token contracts — monitor minting, transfers, and supply changes for exploits. - [Recommendations by SC type](https://docs.extractor.live/advanced-monitoring/recommendations-by-sc-type/index.md): Trigger recommendations by smart contract type — guidelines for monitoring tokens, NFTs, vesting, staking, lending, token sales, and yield farming. - [Lending](https://docs.extractor.live/advanced-monitoring/recommendations-by-sc-type/lending.md): Trigger setup recommendations for lending smart contracts — monitor borrow amounts, collateral transfers, and unusual repayment activity for exploits. - [Non-Fungible Token (EIP-721 compatible)](https://docs.extractor.live/advanced-monitoring/recommendations-by-sc-type/non-fungible-token-eip-721-compatible.md): Recommended Hacken Extractor triggers for ERC-721 / EIP-721 NFT contracts — monitor mints, transfers, and supply anomalies that signal exploits. - [Staking](https://docs.extractor.live/advanced-monitoring/recommendations-by-sc-type/staking.md): Trigger recommendations for staking smart contracts — monitor early withdrawals, reward emissions, and unusual unstake activity to detect exploits. - [Token Sale](https://docs.extractor.live/advanced-monitoring/recommendations-by-sc-type/token-sale.md): Trigger setup recommendations for token sale contracts — monitor early withdrawals, oversold limits, and suspicious transfers during fundraising rounds. - [Vesting](https://docs.extractor.live/advanced-monitoring/recommendations-by-sc-type/vesting.md): Trigger recommendations for vesting smart contracts — monitor cliff-period withdrawals, unexpectedly large releases, and other exploit indicators. - [Yield Farming](https://docs.extractor.live/advanced-monitoring/recommendations-by-sc-type/yield-farming.md): Trigger setup recommendations for yield farming contracts — monitor large deposits, oversize withdrawals, and reward anomalies that indicate exploits. - [Blacklisted Callers](https://docs.extractor.live/advanced-monitoring/triggers/blacklisted-callers.md): The Blacklisted Callers trigger fires whenever a transaction to your monitored smart contract is initiated by an address on your blacklist. - [ERC-20 Transfer](https://docs.extractor.live/advanced-monitoring/triggers/erc20-transfer.md): The ERC-20 Transfer trigger fires whenever an ERC-20 token transfer above your configured threshold occurs on the monitored smart contract. - [Event Advanced](https://docs.extractor.live/advanced-monitoring/triggers/event-advanced.md): Fires when an event matching a free-text signature is emitted from any contract address you specify — not limited to the monitored contract. - [Event Emitted](https://docs.extractor.live/advanced-monitoring/triggers/event-emitted.md): The Event Emitted trigger fires when a specific event is emitted from the monitored smart contract — select the event from the contract ABI. - [Failed Transaction](https://docs.extractor.live/advanced-monitoring/triggers/failed-transaction.md): The Failed Transaction trigger fires when any transaction to the monitored smart contract is reverted or fails on-chain, surfacing exploit attempts. - [Function Call](https://docs.extractor.live/advanced-monitoring/triggers/function-call.md): The Function Call trigger fires whenever a specific function is called on the monitored smart contract, optionally filtered by transaction value. - [Trigger types](https://docs.extractor.live/advanced-monitoring/triggers/index.md): Advanced monitoring triggers let you define precise on-chain conditions — function calls, events, transfers, and parameters — that fire real-time alerts. - [Transaction Parameters](https://docs.extractor.live/advanced-monitoring/triggers/transaction-parameters.md): The Transaction Parameters trigger fires when any transaction or block parameter matches one or more rules you define on the monitored contract. - [Whitelisted Callers](https://docs.extractor.live/advanced-monitoring/triggers/whitelisted-callers.md): The Whitelisted Callers trigger fires when a transaction is initiated by an address NOT on your whitelist, surfacing unauthorized access attempts. - [aggregate alerts](https://docs.extractor.live/api-reference/action-route/aggregate-alerts.md): Aggregate using fields from response dto - [Cost estimate](https://docs.extractor.live/api-reference/action-route/cost-estimate.md): Estimate cost of action execution - [create entity](https://docs.extractor.live/api-reference/action-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/action-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/action-route/get-entity-by-id.md) - [Run action](https://docs.extractor.live/api-reference/action-route/run-action.md): Execute action - [search action alerts](https://docs.extractor.live/api-reference/action-route/search-action-alerts.md): Search by params from response dto. Using tenant auth - [search action alerts per action](https://docs.extractor.live/api-reference/action-route/search-action-alerts-per-action.md): Search by params from response dto. Using action auth - [search contracts](https://docs.extractor.live/api-reference/action-route/search-contracts.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/action-route/update-entity-by-id.md) - [Change status of interceptors](https://docs.extractor.live/api-reference/admin-route/change-status-of-interceptors.md): Set status to all triggers from extractor or not from extractor - [Delete alert by id](https://docs.extractor.live/api-reference/admin-route/delete-alert-by-id.md): Delete alert by uid. Multiple deletions might occur, as alerts in different index groups could happen to have same uid. - [Sync entries on kafka](https://docs.extractor.live/api-reference/admin-route/sync-entries-on-kafka.md): Scroll entries from db and put them to kafka topic - [Sync trigger on interceptor](https://docs.extractor.live/api-reference/admin-route/sync-trigger-on-interceptor.md): Scroll triggers from db and put them to interceptor api - [delete entity by id](https://docs.extractor.live/api-reference/api-key-route/delete-entity-by-id.md): Deleted api keys receive "DELETED" status. Plan limitations do not count such api keys. - [generate api key](https://docs.extractor.live/api-reference/api-key-route/generate-api-key.md) - [get api key by id](https://docs.extractor.live/api-reference/api-key-route/get-api-key-by-id.md) - [get redis cache value by key](https://docs.extractor.live/api-reference/api-key-route/get-redis-cache-value-by-key.md): Redis entry key is api key jti claim (JWT unique identifier). Redis entry value is an api key ID in RDB. Cache contains only revoked api keys, that aren't expired naturally yet. Only admins can access this endpoint. - [search api keys](https://docs.extractor.live/api-reference/api-key-route/search-api-keys.md): Search by params from response dto. - [update api key](https://docs.extractor.live/api-reference/api-key-route/update-api-key.md): Only status and label updates are allowed. Allowed statuses are "ACTIVE" and "DISABLED". When status is updated to "DISABLED" - api key gets revoked. - [Keycloak auth configs for auth page](https://docs.extractor.live/api-reference/auth-route/keycloak-auth-configs-for-auth-page.md) - [create entity](https://docs.extractor.live/api-reference/contract-audit-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/contract-audit-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/contract-audit-route/get-entity-by-id.md) - [search entities](https://docs.extractor.live/api-reference/contract-audit-route/search-entities.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/contract-audit-route/update-entity-by-id.md) - [aggregate trigger alerts per contract](https://docs.extractor.live/api-reference/contract-route/aggregate-trigger-alerts-per-contract.md): Aggregate using fields from response dto. Using contract auth - [aggregate trigger events per contract](https://docs.extractor.live/api-reference/contract-route/aggregate-trigger-events-per-contract.md): Aggregate using fields from response dto. Using contract auth - [alerts histogram for this contract](https://docs.extractor.live/api-reference/contract-route/alerts-histogram-for-this-contract.md) - [create entity](https://docs.extractor.live/api-reference/contract-route/create-entity.md) - [delete abi override by entity id](https://docs.extractor.live/api-reference/contract-route/delete-abi-override-by-entity-id.md) - [delete entity by id](https://docs.extractor.live/api-reference/contract-route/delete-entity-by-id.md) - [delete proxy abi override by entity id](https://docs.extractor.live/api-reference/contract-route/delete-proxy-abi-override-by-entity-id.md) - [fetch any contract data](https://docs.extractor.live/api-reference/contract-route/fetch-any-contract-data.md) - [get contract with abi by id](https://docs.extractor.live/api-reference/contract-route/get-contract-with-abi-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/contract-route/get-entity-by-id.md) - [get labels for this contract from labels api](https://docs.extractor.live/api-reference/contract-route/get-labels-for-this-contract-from-labels-api.md) - [search action alerts per contract](https://docs.extractor.live/api-reference/contract-route/search-action-alerts-per-contract.md): Search by params from response dto. Using contract auth - [search contracts](https://docs.extractor.live/api-reference/contract-route/search-contracts.md): Search by params from response dto - [search contracts](https://docs.extractor.live/api-reference/contract-route/search-contracts-1.md): Search by params from response dto - [search resent alerts for this contract](https://docs.extractor.live/api-reference/contract-route/search-resent-alerts-for-this-contract.md) - [search score change per contract](https://docs.extractor.live/api-reference/contract-route/search-score-change-per-contract.md): Search by params from response dto - [search trigger alerts per contract](https://docs.extractor.live/api-reference/contract-route/search-trigger-alerts-per-contract.md): Search by params from response dto. Using contract auth - [search trigger events per contract](https://docs.extractor.live/api-reference/contract-route/search-trigger-events-per-contract.md): Search by params from response dto. Using contract auth - [update entity by id](https://docs.extractor.live/api-reference/contract-route/update-entity-by-id.md) - [aggregate alerts](https://docs.extractor.live/api-reference/detector-route/aggregate-alerts.md): Aggregate using fields from response dto - [aggregate detectors](https://docs.extractor.live/api-reference/detector-route/aggregate-detectors.md): !!!IMPORTANT!!! Use with caution, because usage with JOIN can require aggregate with 'distinct' - [aggregate events](https://docs.extractor.live/api-reference/detector-route/aggregate-events.md): Aggregate using fields from response dto - [create entity](https://docs.extractor.live/api-reference/detector-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/detector-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/detector-route/get-entity-by-id.md) - [search alerts](https://docs.extractor.live/api-reference/detector-route/search-alerts.md): Search by params from response dto - [search detectors](https://docs.extractor.live/api-reference/detector-route/search-detectors.md): Search by params from response dto - [search events](https://docs.extractor.live/api-reference/detector-route/search-events.md): Search by params from response dto - [Update all detectors of a particular schema id. Main usage is enabling/disabling all detectors of a particular schema id. Only for admin, use with caution!](https://docs.extractor.live/api-reference/detector-route/update-all-detectors-of-a-particular-schema-id-main-usage-is-enablingdisabling-all-detectors-of-a-particular-schema-id-only-for-admin-use-with-caution!.md) - [update entity by id](https://docs.extractor.live/api-reference/detector-route/update-entity-by-id.md) - [create entity](https://docs.extractor.live/api-reference/detector-schema-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/detector-schema-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/detector-schema-route/get-entity-by-id.md) - [search entities](https://docs.extractor.live/api-reference/detector-schema-route/search-entities.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/detector-schema-route/update-entity-by-id.md) - [API Reference](https://docs.extractor.live/api-reference/introduction.md): Interact with the Hacken Extractor REST API to manage projects, contracts, detectors, triggers, and alerts programmatically from your own services. - [delete entity by id](https://docs.extractor.live/api-reference/invite-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/invite-route/get-entity-by-id.md) - [Invite user to tenant](https://docs.extractor.live/api-reference/invite-route/invite-user-to-tenant.md) - [search entities](https://docs.extractor.live/api-reference/invite-route/search-entities.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/invite-route/update-entity-by-id.md) - [create entity](https://docs.extractor.live/api-reference/license-instance-meta-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/license-instance-meta-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/license-instance-meta-route/get-entity-by-id.md) - [search entities](https://docs.extractor.live/api-reference/license-instance-meta-route/search-entities.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/license-instance-meta-route/update-entity-by-id.md) - [aggregate score change per project](https://docs.extractor.live/api-reference/license-instance-route/aggregate-score-change-per-project.md): Aggregate using fields from response dto. Using contract auth - [create entity](https://docs.extractor.live/api-reference/license-instance-route/create-entity.md) - [Delete apiv1instance cleanup](https://docs.extractor.live/api-reference/license-instance-route/delete-apiv1instance-cleanup.md) - [delete entity by id](https://docs.extractor.live/api-reference/license-instance-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/license-instance-route/get-entity-by-id.md) - [search entities](https://docs.extractor.live/api-reference/license-instance-route/search-entities.md): Search by params from response dto - [search score change per project](https://docs.extractor.live/api-reference/license-instance-route/search-score-change-per-project.md): Search by params from response dto - [tokenomics table](https://docs.extractor.live/api-reference/license-instance-route/tokenomics-table.md): Tokenomics data aggregated from RDB and ScoreChange - [update entity by id](https://docs.extractor.live/api-reference/license-instance-route/update-entity-by-id.md) - [create entity](https://docs.extractor.live/api-reference/license-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/license-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/license-route/get-entity-by-id.md) - [search entities](https://docs.extractor.live/api-reference/license-route/search-entities.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/license-route/update-entity-by-id.md) - [create entity](https://docs.extractor.live/api-reference/license-score-group-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/license-score-group-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/license-score-group-route/get-entity-by-id.md) - [search entities](https://docs.extractor.live/api-reference/license-score-group-route/search-entities.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/license-score-group-route/update-entity-by-id.md) - [list of the event params for the network](https://docs.extractor.live/api-reference/network-route/list-of-the-event-params-for-the-network.md) - [list of the operation params for the network](https://docs.extractor.live/api-reference/network-route/list-of-the-operation-params-for-the-network.md) - [list of the transaction params for the network](https://docs.extractor.live/api-reference/network-route/list-of-the-transaction-params-for-the-network.md) - [list of the transaction params for the network](https://docs.extractor.live/api-reference/network-route/list-of-the-transaction-params-for-the-network-1.md) - [aggregate score change per organisation](https://docs.extractor.live/api-reference/organisation-route/aggregate-score-change-per-organisation.md): Aggregate using fields from response dto. Using contract auth - [create entity](https://docs.extractor.live/api-reference/organisation-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/organisation-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/organisation-route/get-entity-by-id.md) - [search entities](https://docs.extractor.live/api-reference/organisation-route/search-entities.md): Search by params from response dto - [search score change](https://docs.extractor.live/api-reference/organisation-route/search-score-change.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/organisation-route/update-entity-by-id.md) - [usage dashboard](https://docs.extractor.live/api-reference/organisation-route/usage-dashboard.md) - [create entity](https://docs.extractor.live/api-reference/plan-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/plan-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/plan-route/get-entity-by-id.md) - [search entities](https://docs.extractor.live/api-reference/plan-route/search-entities.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/plan-route/update-entity-by-id.md) - [create entity](https://docs.extractor.live/api-reference/project-documentation-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/project-documentation-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/project-documentation-route/get-entity-by-id.md) - [search entities](https://docs.extractor.live/api-reference/project-documentation-route/search-entities.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/project-documentation-route/update-entity-by-id.md) - [aggregate score change per project](https://docs.extractor.live/api-reference/project-route/aggregate-score-change-per-project.md): Aggregate using fields from response dto. Using contract auth - [create entity](https://docs.extractor.live/api-reference/project-route/create-entity.md) - [dashboard counters](https://docs.extractor.live/api-reference/project-route/dashboard-counters.md) - [dashboard metrics](https://docs.extractor.live/api-reference/project-route/dashboard-metrics.md) - [delete entity by id](https://docs.extractor.live/api-reference/project-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/project-route/get-entity-by-id.md) - [search projects](https://docs.extractor.live/api-reference/project-route/search-projects.md): Search by params from response dto - [search projects](https://docs.extractor.live/api-reference/project-route/search-projects-1.md): Search by params from response dto - [search resent alerts for this project](https://docs.extractor.live/api-reference/project-route/search-resent-alerts-for-this-project.md) - [search score change per project](https://docs.extractor.live/api-reference/project-route/search-score-change-per-project.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/project-route/update-entity-by-id.md) - [usage dashboard split by detector schema name, trigger type, source id](https://docs.extractor.live/api-reference/project-route/usage-dashboard-split-by-detector-schema-name-trigger-type-source-id.md) - [usage dashboard split by severity](https://docs.extractor.live/api-reference/project-route/usage-dashboard-split-by-severity.md) - [First user access](https://docs.extractor.live/api-reference/registration-route/first-user-access.md): Used in few ways: 1. If (tenantName and projectName) not empty. Register flow. Register new user with new tenant/project 2. If (tenantName or projectName) is empty. Invite flow. Looking for invite, creating new user to existing tenant - [Invite user to tenant](https://docs.extractor.live/api-reference/registration-route/invite-user-to-tenant.md) - [create entity](https://docs.extractor.live/api-reference/score-group-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/score-group-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/score-group-route/get-entity-by-id.md) - [search entities](https://docs.extractor.live/api-reference/score-group-route/search-entities.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/score-group-route/update-entity-by-id.md) - [Resolve score change](https://docs.extractor.live/api-reference/score-route/resolve-score-change.md): Resolve score change - [Resolve score change in bulk](https://docs.extractor.live/api-reference/score-route/resolve-score-change-in-bulk.md): Resolve score change in bulk - [Update score change](https://docs.extractor.live/api-reference/score-route/update-score-change.md): Update score change - [Update score change in bulk](https://docs.extractor.live/api-reference/score-route/update-score-change-in-bulk.md): Update score change in bulk - [create entity](https://docs.extractor.live/api-reference/subscription-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/subscription-route/delete-entity-by-id.md) - [expire subscriptions](https://docs.extractor.live/api-reference/subscription-route/expire-subscriptions.md): Check all the subscriptions for all the tenants and downgrade to Free subscription if needed - [get entity by id](https://docs.extractor.live/api-reference/subscription-route/get-entity-by-id.md) - [search subscriptions](https://docs.extractor.live/api-reference/subscription-route/search-subscriptions.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/subscription-route/update-entity-by-id.md) - [Get swagger specs openapi](https://docs.extractor.live/api-reference/swagger-specs-route/get-swagger-specs-openapi.md) - [delete syslog](https://docs.extractor.live/api-reference/syslog-route/delete-syslog.md): Delete extractor entity syslog by index and uid - [Marker endpoint for login syslog tracking](https://docs.extractor.live/api-reference/syslog-route/marker-endpoint-for-login-syslog-tracking.md) - [search syslog](https://docs.extractor.live/api-reference/syslog-route/search-syslog.md): Search A3 entity syslog by params - [search syslog](https://docs.extractor.live/api-reference/syslog-route/search-syslog-1.md): Search extractor entity syslog by params - [handle update](https://docs.extractor.live/api-reference/telegram-route/handle-update.md) - [create entity](https://docs.extractor.live/api-reference/tenant-destination-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/tenant-destination-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/tenant-destination-route/get-entity-by-id.md) - [handle update](https://docs.extractor.live/api-reference/tenant-destination-route/handle-update.md) - [search entities](https://docs.extractor.live/api-reference/tenant-destination-route/search-entities.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/tenant-destination-route/update-entity-by-id.md) - [create entity](https://docs.extractor.live/api-reference/tenant-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/tenant-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/tenant-route/get-entity-by-id.md) - [Networks of from contracts of this tenant](https://docs.extractor.live/api-reference/tenant-route/networks-of-from-contracts-of-this-tenant.md) - [search tenants](https://docs.extractor.live/api-reference/tenant-route/search-tenants.md): Search by params from response dto - [Telemetry data from Prometheus](https://docs.extractor.live/api-reference/tenant-route/telemetry-data-from-prometheus.md) - [Telemetry data from Prometheus. If start and end is set to millis, histogram response will 'extends bounds'](https://docs.extractor.live/api-reference/tenant-route/telemetry-data-from-prometheus-if-start-and-end-is-set-to-millis-histogram-response-will-extends-bounds.md) - [update entity by id](https://docs.extractor.live/api-reference/tenant-route/update-entity-by-id.md) - [usage dashboard](https://docs.extractor.live/api-reference/tenant-route/usage-dashboard.md) - [create entity](https://docs.extractor.live/api-reference/tokenomics-category-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/tokenomics-category-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/tokenomics-category-route/get-entity-by-id.md) - [search entities](https://docs.extractor.live/api-reference/tokenomics-category-route/search-entities.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/tokenomics-category-route/update-entity-by-id.md) - [create entity](https://docs.extractor.live/api-reference/tokenomics-schedule-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/tokenomics-schedule-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/tokenomics-schedule-route/get-entity-by-id.md) - [search entities](https://docs.extractor.live/api-reference/tokenomics-schedule-route/search-entities.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/tokenomics-schedule-route/update-entity-by-id.md) - [aggregate alerts](https://docs.extractor.live/api-reference/trigger-route/aggregate-alerts.md): Aggregate using fields from response dto - [aggregate events](https://docs.extractor.live/api-reference/trigger-route/aggregate-events.md): Aggregate using fields from response dto - [create entity](https://docs.extractor.live/api-reference/trigger-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/trigger-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/trigger-route/get-entity-by-id.md) - [search alerts](https://docs.extractor.live/api-reference/trigger-route/search-alerts.md): Search by params from response dto - [search events](https://docs.extractor.live/api-reference/trigger-route/search-events.md): Search by params from response dto - [search triggers](https://docs.extractor.live/api-reference/trigger-route/search-triggers.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/trigger-route/update-entity-by-id.md) - [configure OTP](https://docs.extractor.live/api-reference/user-route/configure-otp.md): Send email with OTP configuration link to the user - [Delete apiv1user](https://docs.extractor.live/api-reference/user-route/delete-apiv1user.md) - [Delete apiv1user cleanup](https://docs.extractor.live/api-reference/user-route/delete-apiv1user-cleanup.md) - [delete OTP](https://docs.extractor.live/api-reference/user-route/delete-otp.md): Delete OTP. TOTP code should be passed in payload to perform operation from non-admin roles. - [Get apiv1user](https://docs.extractor.live/api-reference/user-route/get-apiv1user.md) - [Get apiv1userme](https://docs.extractor.live/api-reference/user-route/get-apiv1userme.md) - [get OTP configuration](https://docs.extractor.live/api-reference/user-route/get-otp-configuration.md): Get QR code and Base32-encoded secret. Base32-encoded secret can be used in authenticator apps as-is, no decoding required. - [is OTP enabled](https://docs.extractor.live/api-reference/user-route/is-otp-enabled.md): Returns true if OTP is enabled, false if not - [list OTPs](https://docs.extractor.live/api-reference/user-route/list-otps.md): Get a list of all configured OTPs for given user - [Put apiv1user](https://docs.extractor.live/api-reference/user-route/put-apiv1user.md) - [search users](https://docs.extractor.live/api-reference/user-route/search-users.md): Search by params from response dto - [setup OTP](https://docs.extractor.live/api-reference/user-route/setup-otp.md): Setup OTP. Secret must be provided to OtpDataDto in base32-encoded format, just like it comes from GET /{id}/otp/setup method. Device name is arbitrary. Same secret could be used for multiple device names. Same secret could not be used for same device name. - [sync roles](https://docs.extractor.live/api-reference/user-route/sync-roles.md): Sync db user roles with keycloak - [validate OTP](https://docs.extractor.live/api-reference/user-route/validate-otp.md): Validate OTP. Returns true if OTP code is valid, and false if not. - [Cost estimate](https://docs.extractor.live/api-reference/wallet-route/cost-estimate.md): Estimate cost of action execution - [create entity](https://docs.extractor.live/api-reference/wallet-route/create-entity.md) - [delete entity by id](https://docs.extractor.live/api-reference/wallet-route/delete-entity-by-id.md) - [get entity by id](https://docs.extractor.live/api-reference/wallet-route/get-entity-by-id.md) - [Get wallet balance](https://docs.extractor.live/api-reference/wallet-route/get-wallet-balance.md) - [search contracts](https://docs.extractor.live/api-reference/wallet-route/search-contracts.md): Search by params from response dto - [update entity by id](https://docs.extractor.live/api-reference/wallet-route/update-entity-by-id.md) - [Withdraw cash](https://docs.extractor.live/api-reference/wallet-route/withdraw-cash.md) - [New and Beta Features](https://docs.extractor.live/beta-features/index.md): Preview of new and beta detectors available in Hacken Extractor — early-access monitoring features still being tested before general release. - [Common Configurations](https://docs.extractor.live/common-configurations.md): Shared configuration options available across all Hacken Extractor detectors and triggers — name, severity, alerts, cron, networks, and notifications. - [AML Monitor](https://docs.extractor.live/compliance-monitoring/detectors/aml-monitor.md): AML Monitor scans every transaction on your monitored contract for blacklisted address origins across sanctions, cybercrime, and suspicious lists. - [Aster DEX Monitor for compliance](https://docs.extractor.live/compliance-monitoring/detectors/asterdex-monitor.md): Track Aster DEX portfolio value changes and asset market prices for compliance reporting, with alerts when user-defined conditions are met. - [Balance Monitor for compliance](https://docs.extractor.live/compliance-monitoring/detectors/balance-monitor.md): Monitor native coin and ERC-20 balances of compliance-tracked accounts in real time, alerting when any balance falls at or below your threshold. - [Chainabuse Monitor](https://docs.extractor.live/compliance-monitoring/detectors/chainabuse-monitor.md): The Chainabuse Monitor analyzes reports from chainabuse.com with LLM filtering to flag phishing, ransomware, scams, and other malicious crypto activity. - [Circulation Supply Monitor for compliance](https://docs.extractor.live/compliance-monitoring/detectors/circulation-supply-monitor.md): Track token minting and burning in real time, maintaining a live circulating supply counter for compliance reporting and inflation-schedule alerts. - [Contract Hash Verification for compliance](https://docs.extractor.live/compliance-monitoring/detectors/contract-hash-verification.md): Verify proxy contract upgrades against expected bytecode hashes for compliance audit, alerting on any unexpected implementation deployment. - [DNS Monitor](https://docs.extractor.live/compliance-monitoring/detectors/dns-monitor.md): Monitor WHOIS and DNS records of your project's domains for hijacking attempts and upcoming expirations, with early-warning compliance alerts. - [Github Monitor](https://docs.extractor.live/compliance-monitoring/detectors/github-monitor.md): Track participation activity on a GitHub repository — weekly and monthly commit thresholds — for project maintenance and due-diligence compliance checks. - [Compliance detectors](https://docs.extractor.live/compliance-monitoring/detectors/index.md): The full catalog of Hacken Extractor Compliance Monitoring detectors — AML, DNS, hash verification, NIST alerts, multisig, supply, and price monitors. - [NIST Alerts Monitor](https://docs.extractor.live/compliance-monitoring/detectors/nist-alerts-monitor.md): Watch NIST NVD for new or updated CVE records affecting your stack, with LLM-driven enrichment that prioritises vulnerabilities for compliance follow-up. - [Price Monitor for compliance](https://docs.extractor.live/compliance-monitoring/detectors/price-monitor.md): Monitor token price changes for ERC-20 contracts via Chainlink on-chain feeds or CoinGecko, alerting on movements relevant to compliance reporting. - [Proof of Reserves Monitor for compliance](https://docs.extractor.live/compliance-monitoring/detectors/proof-of-reserves-monitor.md): Track configured tokens, denominate balances in USD, and alert when reserves fall below the configured threshold for proof-of-reserves compliance. - [Safe Multisig Monitor for compliance](https://docs.extractor.live/compliance-monitoring/detectors/safe-multisig-monitor.md): Track Safe (Gnosis Safe) multisig activity — signer changes, confirmations, and executions — for governance and compliance audit trails. - [Total Supply Monitor for compliance](https://docs.extractor.live/compliance-monitoring/detectors/total-supply-monitor.md): Track the total circulating supply of a token on-chain and alert when issued supply exceeds the expected threshold for compliance reporting. - [Total Supply Monitor by Allocations (compliance)](https://docs.extractor.live/compliance-monitoring/detectors/total-supply-monitor-by-allocations.md): Track on-chain balances per tokenomics allocation address and emit daily allocation reports, sourcing definitions from the Extractor API. - [Transfer Monitor for compliance](https://docs.extractor.live/compliance-monitoring/detectors/transfer-monitor.md): Monitor ERC-20 Transfer events in real time for compliance, alerting when a transfer involving a watched address crosses your configured threshold. - [Transfers Detector for compliance](https://docs.extractor.live/compliance-monitoring/detectors/transfers-detector.md): Detect anomalous ERC-20 and native token transfers — large or frequent movements — relevant to compliance reporting on monitored addresses. - [TVL Monitor for compliance](https://docs.extractor.live/compliance-monitoring/detectors/tvl-monitor.md): Track liquidity changes for ERC-20 tokens and native coins in a contract for compliance, alerting when balances drop beyond a threshold between blocks. - [Compliance Monitoring](https://docs.extractor.live/compliance-monitoring/intro.md): Align your project with DORA, MiCA, and ADGM regulations using Hacken Extractor's compliance monitors and detectors for on-chain risk reporting. - [Address Poison (legacy)](https://docs.extractor.live/detectors/AddressPoison/DetectorAddressPoison.md): The Address Poison detector identifies transaction-history poisoning attacks that use lookalike addresses to trick wallets and applications. - [Block Anomaly (legacy)](https://docs.extractor.live/detectors/BlockAnomaly/DetectorBlockAnomaly.md): Monitors blocks for Block anomalies. Anomalies includes transaction count (low/large), large block size, large number of Events, etc - [Bubblemap Monitor](https://docs.extractor.live/detectors/Bubblemaps/DetectorBubblemaps.md): The Bubblemap Monitor uses Bubblemaps data to detect token holder centralization anomalies, alerting when concentration risk patterns appear on-chain. - [Contract Call](https://docs.extractor.live/detectors/Call/DetectorCall.md): The Contract Call detector executes calls to a contract function, extracts return values, and evaluates conditions to fire scheduled monitoring alerts. - [Chainlink ACE Detector](https://docs.extractor.live/detectors/ChainlinkACE/DetectorChainlinkACE.md): The Chainlink ACE detector monitors contracts integrated with Chainlink's Automated Compliance Contract Engine for policy and rule violations. - [Contract Hash Verification (legacy)](https://docs.extractor.live/detectors/ContractHashVerification/DetectorContractHashVerification.md): Legacy Contract Hash Verification detector — watches contract bytecode for unexpected changes and alerts on mismatches against expected checksums. - [Cron](https://docs.extractor.live/detectors/Cron/DetectorCron.md): The Cron detector schedules periodic tasks or event triggers — wallet top-ups, subscription payments, and contract job execution on a defined interval. - [DNS Monitor (legacy)](https://docs.extractor.live/detectors/DNS/DetectorDNS.md): Legacy DNS Monitor — watches WHOIS and DNS records for hijacking attacks and domain expiration warnings on your project's web infrastructure. - [News Detector](https://docs.extractor.live/detectors/News/DetectorNews.md): The News Detector monitors RSS and Reddit feeds with tag-based filtering, surfacing security-relevant news that may affect your monitored contracts. - [Proof of Reserves Monitor (legacy)](https://docs.extractor.live/detectors/PoR/DetectorPoR.md): Legacy Proof of Reserves Monitor — tracks contract or address reserves via Chainlink or CoinGecko feeds and alerts on configured thresholds. - [Aave Monitor](https://docs.extractor.live/financial-monitoring/detectors/aave-monitor.md): The Aave Monitor tracks lending and borrowing activity on Aave markets, alerting on health-factor changes, liquidations, and large position movements. - [Aster DEX Monitor for financial monitoring](https://docs.extractor.live/financial-monitoring/detectors/asterdex-monitor.md): Track an Aster DEX account's portfolio value and asset market prices, alerting when user-defined financial conditions or thresholds are met. - [Balance Monitor for financial monitoring](https://docs.extractor.live/financial-monitoring/detectors/balance-monitor.md): Track native coin and ERC-20 balances across accounts in real time, alerting when any balance falls at or below your configured minimum threshold. - [Circulation Supply Monitor for financial monitoring](https://docs.extractor.live/financial-monitoring/detectors/circulation-supply-monitor.md): Track token minting and burning in real time with a live circulating supply counter, alerting on inflation or deflation schedule deviations. - [Financial monitoring detectors](https://docs.extractor.live/financial-monitoring/detectors/index.md): The full catalog of Hacken Extractor Financial Monitoring detectors — balances, transfers, TVL, total supply, Aave, multisig, price, and reserves. - [Price Monitor for financial monitoring](https://docs.extractor.live/financial-monitoring/detectors/price-monitor.md): Track ERC-20 token price changes via Chainlink on-chain feeds or CoinGecko, alerting on configured movement thresholds for financial monitoring. - [Proof of Reserves Monitor for financial monitoring](https://docs.extractor.live/financial-monitoring/detectors/proof-of-reserves-monitor.md): Track configured tokens denominated in USD and alert when reserves drop below the configured threshold to safeguard financial backing on-chain. - [Safe Multisig Monitor for financial monitoring](https://docs.extractor.live/financial-monitoring/detectors/safe-multisig-monitor.md): Track Safe (Gnosis Safe) multisig activity — signer changes, confirmations, and executions — for financial oversight of treasury operations. - [Total Supply Monitor for financial monitoring](https://docs.extractor.live/financial-monitoring/detectors/total-supply-monitor.md): Track the total circulating supply of a token on-chain and alert when the issued supply exceeds your expected threshold for financial monitoring. - [Total Supply Monitor by Allocations (financial)](https://docs.extractor.live/financial-monitoring/detectors/total-supply-monitor-by-allocations.md): Track on-chain balances per tokenomics allocation address and emit daily allocation reports for financial monitoring of vesting and unlock schedules. - [Transfer Monitor for financial monitoring](https://docs.extractor.live/financial-monitoring/detectors/transfer-monitor.md): Track ERC-20 Transfer events in real time for financial monitoring, alerting when a transfer involving a watched address exceeds a configured threshold. - [Transfers Detector for financial monitoring](https://docs.extractor.live/financial-monitoring/detectors/transfers-detector.md): Detect anomalous ERC-20 and native token transfers — large amounts or frequent movements — for financial oversight of monitored addresses. - [TVL Monitor for financial monitoring](https://docs.extractor.live/financial-monitoring/detectors/tvl-monitor.md): Monitor liquidity for ERC-20 tokens and native coins held by a contract, alerting when balances drop beyond a financial-monitoring threshold between blocks. - [Wallet detector for financial monitoring](https://docs.extractor.live/financial-monitoring/detectors/wallet.md): Track native coin and token balances of a wallet or contract address, generating info events on balance changes and alerts on configured conditions. - [Financial Monitoring](https://docs.extractor.live/financial-monitoring/intro.md): Enhance your project with Hacken Extractor financial monitors and detectors that track on-chain value, balances, reserves, and market conditions. - [Getting Started](https://docs.extractor.live/index.md): Get started with Hacken Extractor — real-time on-chain security monitoring that safeguards smart contracts, wallets, and DeFi protocols from hacks. - [Cookie Policy](https://docs.extractor.live/legal-documents/cookie-policy.md): Hacken Extractor cookie policy — how we use cookies and similar tracking technologies on our documentation and product surfaces. Updated 16 Mar 2023. - [Privacy Notice](https://docs.extractor.live/legal-documents/privacy-notice.md): Hacken Extractor privacy notice — what personal data we collect, how we use it, your rights, and contact details for data requests. Updated 16 Mar 2023. - [Terms of Service](https://docs.extractor.live/legal-documents/terms-of-service.md): Hacken Extractor terms of service — usage rights, account responsibilities, billing, warranties, and limitations of liability. Updated 18 July 2024. - [Monitoring and Detection](https://docs.extractor.live/monitoring-and-detection.md): Overview of the four monitoring types in Hacken Extractor — security, financial, compliance, and advanced monitoring — and how to choose between them. - [Address Poison](https://docs.extractor.live/security-monitoring/detectors/address-poison.md): Detects transaction history poisoning attacks where fake look-alike addresses are injected to trick users into sending funds to the wrong destination. - [AML Detector](https://docs.extractor.live/security-monitoring/detectors/aml-detector.md): The AML Detector scans blockchain transactions and flags addresses that appear on AML lists, sanctions registries, and known exploit databases. - [Block Anomaly](https://docs.extractor.live/security-monitoring/detectors/block-anomaly.md): The Block Anomaly detector monitors blocks for abnormal transaction counts, event counts, block sizes, and gas usage that may signal network attacks. - [Block Re-org](https://docs.extractor.live/security-monitoring/detectors/block-re-org.md): The Block Re-org detector monitors a blockchain for reorganizations, alerting when historical blocks are replaced and chain consistency is at risk. - [Chainabuse Monitor for security](https://docs.extractor.live/security-monitoring/detectors/chainabuse-monitor.md): Monitor reports from chainabuse.com for phishing, ransomware, scams, and exploits relevant to your watched addresses and smart contracts. - [Contract Hash Verification for security](https://docs.extractor.live/security-monitoring/detectors/contract-hash-verification.md): Verify proxy contract upgrades against expected bytecode hashes, alerting whenever an unexpected or unauthorized implementation is deployed. - [DNS Monitor for security](https://docs.extractor.live/security-monitoring/detectors/dns-monitor.md): Monitor WHOIS and DNS records of project domains for hijacking, unauthorized changes, and impending expirations — early warning for phishing attacks. - [Extractor Attack Detector](https://docs.extractor.live/security-monitoring/detectors/extractor-attack-detector.md): The Extractor Attack Detector activates automatically when you add an address to Security Monitoring, flagging suspicious accounts and contracts. - [Gas Monitor](https://docs.extractor.live/security-monitoring/detectors/gas-monitor.md): The Gas Monitor tracks network gas prices and fires alerts when the gas price crosses configured thresholds — useful for cost and congestion alerts. - [Github Monitor for security](https://docs.extractor.live/security-monitoring/detectors/github-monitor.md): Track participation activity on a GitHub repository — weekly and monthly commit thresholds — to spot abandoned projects or unexpected emergency patches. - [Security monitoring detectors](https://docs.extractor.live/security-monitoring/detectors/index.md): Choose from a suite of pre-built Hacken Extractor security detectors — AML, DNS, hash, attack, anomaly, gas, SSL, multisig — covering every threat vector. - [Network Monitor](https://docs.extractor.live/security-monitoring/detectors/network-monitor.md): The Network Monitor sends periodic HTTP requests to API endpoints and alerts on availability, status code, and response anomalies for your services. - [NIST Alerts Monitor for security](https://docs.extractor.live/security-monitoring/detectors/nist-alerts-monitor.md): Watch NIST NVD for new or updated CVE records affecting your stack, with LLM-driven enrichment that prioritises vulnerabilities for security patching. - [Safe Multisig Monitor for security](https://docs.extractor.live/security-monitoring/detectors/safe-multisig-monitor.md): Track Safe (Gnosis Safe) multisig activity — signer changes, transaction executions, and confirmations — to catch unauthorized governance changes. - [Security Sleuth](https://docs.extractor.live/security-monitoring/detectors/security-sleuth.md): The Security Sleuth detector monitors Twitter for security-related sentiment, surfacing attack chatter, exploits, and incidents relevant to your contracts. - [SSL Monitor](https://docs.extractor.live/security-monitoring/detectors/ssl-monitor.md): The SSL Monitor watches SSL/TLS certificates of project domains, alerting on expiration, issuer changes, and other certificate health issues. - [Tracker](https://docs.extractor.live/security-monitoring/detectors/tracker.md): The Tracker detector traces asset movements from a set of seed addresses and automatically labels every new address that funds touch on-chain. - [Wallet detector for security monitoring](https://docs.extractor.live/security-monitoring/detectors/wallet.md): Monitor native coin and token balance changes on a wallet or contract address, generating info events and alerts on configured threshold conditions. - [Security Monitoring](https://docs.extractor.live/security-monitoring/intro.md): Real-time Hacken Extractor protection for smart contracts and wallets against on-chain attacks, unauthorized changes, and suspicious activity. - [Action Details](https://docs.extractor.live/smart-contract-actions/action-details.md): View and manage the configuration, monitoring status, and execution history of a single smart contract action inside the Hacken Extractor app. - [Connect an Action Provider](https://docs.extractor.live/smart-contract-actions/action-providers/connect-action-provider.md): Grant an Action Provider the on-chain permissions it needs to execute functions on your smart contract — wiring up a wallet as an automated signer. - [Create an Action Provider](https://docs.extractor.live/smart-contract-actions/action-providers/create-action-provider.md): Step-by-step guide to registering a blockchain wallet as an Action Provider in Hacken Extractor — the signer that executes smart contract actions. - [Deposit Funds](https://docs.extractor.live/smart-contract-actions/action-providers/deposit.md): Fund a Hacken Extractor Action Provider with native tokens so it can pay gas fees when executing automated smart contract transactions on your behalf. - [Action Providers](https://docs.extractor.live/smart-contract-actions/action-providers/index.md): Action Providers connect a blockchain wallet to Extractor so it can execute smart contract actions and cover transaction gas fees. - [Provider Details](https://docs.extractor.live/smart-contract-actions/action-providers/provider-details.md): Understand the Action Provider detail view — transaction history, connected actions, deposit balance, and management options for the signing wallet. - [Withdraw Funds](https://docs.extractor.live/smart-contract-actions/action-providers/withdraw.md): Withdraw the remaining native token balance from an Action Provider back to your own wallet when retiring or rebalancing an automated signer. - [Actions overview](https://docs.extractor.live/smart-contract-actions/actions-overview.md): The Actions page for a monitored contract — view, manage, and track smart contract actions and their execution history across your portfolio. - [Smart Contract Actions](https://docs.extractor.live/smart-contract-actions/intro.md): Set up administrative smart contract actions in Hacken Extractor that execute automatically in response to monitoring events — pause, revoke, or rebalance. - [Create an Action](https://docs.extractor.live/smart-contract-actions/setup-action.md): Create a smart contract action that executes automatically in response to Hacken Extractor monitoring events, or manually on demand from the dashboard. - [Supported Networks](https://docs.extractor.live/supported-networks.md): Catalog of EVM-compatible and non-EVM blockchain networks supported by Hacken Extractor for monitoring smart contracts, wallets, and DeFi protocols. ## OpenAPI Specs - [openapi](https://docs.extractor.live/openapi.json) ## Optional - [Open App](https://extractor.hacken.dev)