Each detector targets a specific threat vector. Enable any combination on your monitored addresses — they run independently and can each have their own alert severity and configuration.Documentation Index
Fetch the complete documentation index at: https://docs.extractor.live/llms.txt
Use this file to discover all available pages before exploring further.
AML Detector
Checks addresses against AML, sanctions, and exploit databases.
Extractor Attack Detector
Detects known exploit patterns and attack signatures in real time.
Address Poison
Detects look-alike address injection attacks in transaction history.
Chainabuse Monitor
Flags interactions with addresses reported on Chainabuse.
Block Anomaly
Flags blocks with abnormal transaction counts, gas usage, or size.
Block Re-Org
Detects blockchain reorganizations that may indicate 51% attacks.
Contract Hash Verification
Alerts when deployed contract bytecode has changed.
DNS Monitor
Monitors DNS records for unauthorized changes.
Gas Monitor
Tracks gas price anomalies across the network.
GitHub Monitor
Watches GitHub repositories for security-relevant changes.
Network Monitor
Monitors network-level metrics and peer connectivity.
NIST Alerts Monitor
Tracks NVD/NIST vulnerability alerts relevant to your stack.
Safe Multisig Monitor
Monitors Safe multisig proposals and executions.
Security Sleuth
Analyzes on-chain patterns for signs of pre-attack behavior.
SSL Monitor
Monitors TLS certificate validity and expiry.
Tracker
Traces and labels addresses as funds move across hops.
Wallet
Monitors wallet balances and transaction activity.