> ## Documentation Index
> Fetch the complete documentation index at: https://docs.extractor.live/llms.txt
> Use this file to discover all available pages before exploring further.

# Tracker

> The Tracker detector traces asset movements from a set of seed addresses and automatically labels every new address that funds touch on-chain.

The Tracker follows the money. Starting from a set of seed addresses, it monitors all outgoing transfers and automatically labels every new address that receives funds — building a continuously expanding map of asset flows across hops.

<Info>
  The monitored contract address is always included as a seed address automatically. Additional addresses can be added in the configuration.
</Info>

## Use cases

<CardGroup cols={1}>
  <Card title="Stolen funds tracing" icon="magnifying-glass-dollar">
    After a security breach, input the hacker's known wallet address as a seed. Every time funds move to a new address, the Tracker labels it automatically — giving investigators a live map to coordinate freezes with exchanges and law enforcement.
  </Card>

  <Card title="High-risk address monitoring" icon="triangle-exclamation">
    Maintain a watchlist of addresses suspected in money laundering or fraud. Whenever those addresses send funds onward, the new destinations are flagged and tagged — continuously expanding the network of identified illicit actors.
  </Card>

  <Card title="Token distribution oversight" icon="coins">
    Monitor token flows from known release addresses. As tokens spread to new holders, the detector labels each with origin metadata (e.g., `Investor Release – Q1`), giving real-time insight into distribution patterns.
  </Card>
</CardGroup>

## Configuration

<Steps>
  <Step title="Name">
    Enter a descriptive name, e.g. `Bybit Hack Tracker`.
  </Step>

  <Step title="Track ID">
    A unique identifier used to group labeled addresses under one tracking campaign. Must be unique per tracker, e.g. `bybit`.
  </Step>

  <Step title="Tags list">
    Comma-separated tags applied to every newly detected address, e.g. `stolen, bybit, high-risk`.
  </Step>

  <Step title="Addresses list">
    Seed addresses to track, comma-separated. The monitored contract address is always included.

    ```
    0xAbc123..., 0xDef456...
    ```
  </Step>

  <Step title="Exclude addresses">
    Addresses to ignore, even if they receive funds from a tracked address. One per line or comma-separated:

    ```
    0xf1dA173228fcf015F43f3eA15aBBB51f0d8f1123, eXch
    ```
  </Step>

  <Step title="Native & ERC-20 thresholds">
    Set minimum transfer values to track for native tokens (e.g. ETH) and ERC-20 tokens. Transfers below the threshold are ignored to reduce noise.
  </Step>

  <Step title="Cron schedule">
    Define how frequently the tracker runs. Accepts cron expressions (Quartz syntax), millisecond intervals, or plain intervals:

    ```
    24 hours
    0 0 * * *
    86400000
    ```
  </Step>
</Steps>