We are currently undergoing maintenance. Some features may be temporarily unavailable.

Contract Monitor

Auto-detect malicious transactions on any EVM token contract

Overview

Contract Monitor lets you register a token contract address (e.g. USDT, JPYC) and automatically detects malicious transaction patterns involving that token. Unlike wallet monitoring, it doesn't assess the token's own risk — it detects fraudulent activity that abuses the token.

Contract Monitor does not display a risk score for the token itself. A legitimate token (e.g. JPYC) can have malicious transactions involving it — showing a high risk score would be misleading. Instead, it displays the count of suspicious pattern findings.

Wallet Monitoring vs Contract Monitoring

🔍 Wallet Monitoring

Periodically tracks a wallet address's risk score. Detects and notifies on risk level changes.

📋 Contract Monitoring

NEW

Monitors all transfers of a token and detects 5 types of malicious patterns. Findings are recorded as discoveries.

Detection Patterns

CRITICAL

🚨 Known Malicious

ScamDB-registered drainers or scam addresses involved in token transfers

Match sender/receiver addresses against ScamDB known malicious address list
CRITICAL

🎭 Address Poisoning

Zero or dust-value transfers using addresses with matching first/last characters of legitimate recipients

value == 0 or dust amount AND address prefix/suffix (4 chars) matches other legitimate transfer recipients
HIGH

🔗 Relay Chain

Addresses that forward received funds to another address within 1 hour

Forwards 90%+ of received amount to another address within 1 hour
HIGH

📡 Rapid Distribution

One address sending to 10+ recipients within 1 hour

Single address sends to 10+ distinct addresses within a 1-hour window
MEDIUM

💰 Large Transfer

Statistically anomalous large transfers (top 0.1 percentile)

Transfer amount exceeds the 99.9th percentile of all transfers

Supported Chains

ChainAPIStatus
EthereumEtherscan V2 (chainid=1)Supported
PolygonEtherscan V2 (chainid=137)Supported
AvalancheRoutescan APISupported

Uses the Etherscan/Routescan contractaddress parameter to fetch all transfers for a specific token.

How It Works

  1. Fetch Transfers — Retrieves recent token transfers via Etherscan API (up to 5,000)
  2. Pattern Analysis — Analyzes each transfer against 5 detection patterns
  3. Discovery Registration — Records suspicious addresses as discoveries (deduplicated)
  4. Notifications — Email + webhook alerts for new findings
  5. Incremental Updates — Next scan only fetches transfers after the last processed block

Use Cases

  • Stablecoin Monitoring — Detect misuse of USDT/USDC and other stablecoins
  • Protect Your Token — Catch poisoning attacks targeting your issued token early
  • Compliance — Monitor suspicious fund movements for specific tokens

Pricing

PlanContract Monitor
Free-
Starter ($4.99/mo)-
Pro ($19.99/mo)
Enterprise

Setup

  1. Go to Watchlist and click "+ Add Address"
  2. Switch monitor type to "Token Contract"
  3. Select an EVM chain (Ethereum/Polygon/Avalanche)
  4. Enter the token contract address
  5. Click "Add" — automatic detection starts on the regular scan schedule

© 2026 ChainAnalyzer. All rights reserved.