Track, analyze, and monitor addresses, transactions, and blocks across Bitcoin, Ethereum, and more — with real-time alert intelligence. Built for law enforcement, compliance teams, and security researchers.
Multi-Chain
BTC · ETH · More
Real-time
Alert Engine
10+
Event Types
Platform Architecture
A Complete Forensics Intelligence Platform
neuTracker is a full-stack multi-chain blockchain forensics solution combining high-performance server-side indexing with an intuitive desktop client. Supports Bitcoin-based chains, Ethereum-based chains, and expanding to additional networks. From raw blockchain data to real-time investigative alerts — all in one system.
🗄
Server — Multi-Chain IndexerIndexes blockchain data from BTC-based and ETH-based chains into a high-performance database backend. Runs a background monitoring service for continuous cross-chain tracking. Hosts a secure REST API and real-time push notification server.
🖥
Client — Desktop ApplicationConnects remotely via typed REST API. No local database or blockchain access required. Full feature set available for remote investigators.
⚡
Real-Time WebSocket AlertsPush alert notifications to registered group devices the instant a monitored transaction is indexed — ahead of any public explorer.
👥
Multi-Group Access ControlAdmin and Member roles. Each Tracking Group has private tags, notes, and alert subscriptions invisible to other groups.
🌐
Multi-Chain ExpansionConfigurable chain support — Bitcoin-based chains today, Ethereum-based chains now in preview, with Solana, NFTs, and DeFi token tracking coming soon. One platform, every chain.
// system architecture
// BTC, ETH-based chains + more Blockchain Data Files │ ▼ Server (TrackerService) │ indexes & monitors ▼ Database Backend │ ▼ Secure REST API │ ┌────┴────┐ ▼ ▼ Client UI WebSocket // queries // push alerts
Seven purpose-built modules covering the complete blockchain forensics workflow — across chains, asset types, and investigative disciplines.
🔍
Address Explorer
Search, inspect, and navigate addresses across supported chains. View all counterparty inputs and outputs in Panels, Grids, or Map view. Supports all major address formats across BTC and ETH-based networks.
BTC · ETH · EVM · Cross-Chain
🔗
Transaction Explorer
Search transactions by TxId, name, group tag, or date range. Full UTXO inspection with input/output breakdown, miner fee calculation, and raw script analysis.
UTXO · Script · Fee Analysis
⛓
Block Explorer
Browse and search every indexed block across supported chains by height, date range, name, or tag. View all confirmed transactions with sortable columns. Multi-chain block archives supported.
By Height · Date Range · Tags
🚨
Tracking & Alerts
Flag addresses, public keys, transactions, or blocks for continuous monitoring. The TrackerService classifies every new transaction and dispatches priority alerts instantly.
LOWMEDIUMHIGHCRITICAL
🔑
PubKey Tracking
Track at the EC public key level — catches ALL sibling addresses sharing that key, including formats not yet seen on-chain. Keys recovered from spending transactions cascade alerts across every linked address automatically.
Cascade Tracking · Auto-Discovery
⏮
Back Trace & History
Retroactively reconstruct the complete historical activity for any tracked object. Synthesize events within any date window as if tracking had always been active — silent or with push notification replay.
Historical Rebuild · Silent Mode
🌐
Multi-Chain Support
The server is configurable to index any BTC-based chain and most Ethereum-based EVM chains today. Support for Solana, NFT tracking, and DeFi token analysis is on the roadmap — enabling cross-chain ownership identification from one unified platform.
BTC · ETH · EVM · Solana ↗
Use Cases
Built for the Professionals Who Follow the Money
neuTracker delivers actionable intelligence across every discipline that depends on blockchain transparency.
⚖️
Law Enforcement
OFAC sanctions screening & SDN address monitoring
Darknet market takedown evidence building
Ransomware fund tracing & seizure monitoring
Critical-level alerts on Known address interactions
Full transaction audit trails with human-readable events
Per-group private tags & notes for case management
Documentation
Everything You Need to Get Started
Comprehensive guides covering every feature of the neuTracker platform, from initial setup to advanced forensic workflows.
Platform Documentation
neuTracker's documentation covers all modules in depth — Address, Transaction, and Block explorers, the Tracking & Alert system, PubKey cascade tracking, Back Trace history reconstruction, and multi-group administration.
Building the Intelligence Layer Across Every Blockchain
neuMedia develops cutting-edge blockchain forensics and intelligence software designed to bring transparency and accountability across distributed ledgers. We believe in empowering those who protect financial integrity — investigators, compliance professionals, and security researchers — with tools that match the sophistication of the threats they face.
Our flagship product, neuTracker, represents years of forensic domain expertise encoded into a professional-grade platform. Starting with deep Bitcoin support, the platform now extends to Ethereum-based chains and is expanding to cover additional networks, NFTs, and DeFi assets — all from one unified investigative interface.
"Our mission is to make blockchain forensics accessible to every organization that needs it — turning the immutability of distributed ledgers from an obstacle into the most powerful audit trail in the history of finance."
Get In Touch
Contact neuMedia
Questions about neuTracker, demo requests, or partnership inquiries — we'd love to hear from you.
Reach Us Directly
We're available for live demonstrations at industry events and online via Microsoft Teams or Zoom. Contact us to schedule a session tailored to your use case.
Live Demo — Consensus MiamiMeet us at Consensus by CoinDesk in Miami, FL. Schedule a live product demonstration at the event.
💻
Online Demo — MS Teams / Zoom~45 minute live walkthrough of all platform features, tailored to your organization's needs.
Send Us a Message
✅
Thank you! We'll be in touch within one business day.
🗓 Schedule a Demo
₿
Consensus by CoinDesk — Miami, Florida
The world's largest and most influential gathering of cryptocurrency and blockchain professionals. neuTracker will be demonstrating live forensic analysis capabilities at the event.
✅
Your Consensus demo request has been received! We'll confirm your time slot by email.
ℹOnline demos run approximately 45 minutes via Microsoft Teams or Zoom, covering all platform modules including live address tracking, real-time alert demonstration, and a Q&A session tailored to your use case.
Schedule an Online Live Demo
✅
Your online demo request has been received! We'll send a calendar invite within 24 hours.
❓ Frequently Asked Questions
🔭 About neuTracker
neuTracker is a professional multi-chain blockchain forensics and transaction tracking platform developed by neuMedia. It consists of two applications: a Server that indexes blockchain data from supported chains and runs continuous background monitoring, and a Client — a desktop application that connects remotely to the server via a secure REST API. Together they provide explorers for addresses, transactions, and blocks, a real-time alert engine, and multi-group access control for investigative teams. Current chain support includes Bitcoin-based networks and Ethereum-based EVM chains, with Solana and additional networks on the roadmap.
neuTracker is built for professionals who need to follow money across blockchains, including:
Law enforcement — tracing funds, sanctions screening, seizure monitoring
Financial compliance teams — AML/KYC verification, exchange wallet monitoring
Market intelligence analysts — whale movement and dormant address alerts
The Server is a high-performance application that hosts the REST API, manages the database backend, indexes blockchain data from configured chains, and runs the background monitoring service. It must be installed on a machine with access to the chain's data files. The server is configurable to parse and index any BTC-based chain as well as most Ethereum-based EVM chains.
The Client is a lightweight desktop application with no local database or blockchain data. It connects to the server remotely over an encrypted connection and provides the full investigative UI. Any team member can run the client from any machine with network access to the server.
neuTracker is locally hosted — you run the server on your own infrastructure, giving you full control over your investigative data. No blockchain data, tracked targets, case notes, or alert configurations are ever transmitted to third parties. This is critical for law enforcement and compliance use cases where data sovereignty and chain-of-custody integrity are mandatory.
🚨 Tracking & Alerts
neuTracker supports four tracked object types, across all configured chains:
Address — any chain address (BTC P2PKH/P2SH/Bech32/Taproot, ETH/EVM hex addresses, and more). Generates an event on every transaction output that touches it.
PubKey — a raw EC public key. Catches all sibling addresses derived from that key, across all formats.
Transaction — a specific transaction hash. Useful for case-file pinning and notes.
Block — a specific block height. Used to bookmark landmark blocks (halvings, fork activations, seizure blocks).
Every tracked event is assigned one of four severity levels:
LOW (White) — Received from anonymous counterparty, SentToSelf, ReceivedFromSelf. Informational.
MEDIUM (Yellow) — Sent to anonymous counterparty, Consolidation, Distribution, PubKeyIdentified.
HIGH (Orange) — SentToNamed, ReceivedFromNamed, ActivityTimeThreshold (dormant wallet alert).
CRITICAL (Red) — SentToKnown, ReceivedFromKnown. Interaction with a flagged "Known" address (OFAC SDN, seizure wallet, etc.).
When you mark a tracked object as Is Known, you are designating it as a canonical, real-world-identified address — for example a published exchange hot wallet, a confirmed OFAC SDN-listed address, a law enforcement seizure wallet, or a known mixer deposit address.
When any other tracked address sends to or receives from a Known address, the resulting event is automatically escalated to Critical severity — the highest alert level. This makes "Is Known" a force-multiplier: marking a single exchange address can generate Critical alerts across every target in your watch list that interacts with it.
ActivityTimeThreshold is a High-severity event generated when a tracked address moves funds after a period of dormancy longer than your Tracking Group's configured threshold. This is the classic "sleeping whale wakes up" alert — historically one of the strongest early signals of an impending large sale, a law enforcement seizure release, an heir claiming an estate, or a hacker finally moving stolen funds.
The alert fires the moment the TrackerService indexes the first spending transaction, often hours before the movement appears on public block explorers or social media.
Consolidation (Medium) — the tracked address participated in a transaction with many inputs collapsing into few outputs. Classic indicators: pre-sweep preparation, cold-storage transfers, exchange sweeping deposit addresses into an omnibus wallet, or an attacker consolidating across stolen-fund wallets before a final move.
Distribution (Medium) — the tracked address participated in a transaction with few inputs fanning out to many outputs. Common indicators: exchange withdrawals, payroll batch payments, airdrop dispersals, or mixer post-processing (funds being dispersed to many recipients after tumbling).
A single EC public key can derive multiple address formats — on Bitcoin this includes P2PKH (1…), wrapped SegWit (3…), native SegWit (bc1q…), and Taproot (bc1p…); on EVM chains, the same key maps to an Ethereum-style 0x… address. A wallet may rotate across formats and chains, generating addresses that look completely unrelated.
When you track at the public key level, neuTracker monitors every address derived from that key simultaneously — including across chains. Public keys are only revealed when an output is spent, so the moment a spending transaction is indexed, the server recovers the key and a PubKeyIdentified event fires, automatically cascading the tracking (and any assigned names) to every linked address on every configured chain.
When you add a new target, its event table is empty for everything that happened before it was flagged. Back Trace walks the address's historical transactions within a user-specified date window and synthesizes events as if tracking had been active the whole time.
Use it when:
You are building a case file and need the complete historical activity of a newly discovered address
A misconfigured run produced incorrect events and you need a clean rebuild (Update Events mode)
Your team is onboarding a new target mid-investigation and needs historical context immediately
Run in silent mode (Notify unchecked) to avoid spamming registered devices with back-dated push alerts.
Admin — sees every tracked object on the server, can edit names and tags across all groups, can view and manage Subscriptions for any group, and can run Back Trace for any tracked object.
Member — sees only tracked objects their Tracking Group is subscribed to, cannot see other groups' subscriptions or notes, and can only flag new objects (which subscribes their group rather than creating a new tracked item). Back Trace is available to Members only when connected directly through the server application, not from a remote client.
🔍 Explorers
Panels — card-based layout showing full detail for each counterparty transaction. Best for visual inspection of individual transactions.
Grids — tabular DataGrid with sortable columns (Address, Transaction, Date, Amount). Best for quickly scanning large numbers of counterparties.
Map — visual relationship map of the address's transaction connections via the Dashboard control. Nodes are sized by value and colored by Alert Level.
In any Explorer (Address, Transaction, Block) or the Tracking Page, select By Group Tag as your search mode. Enter one or more hashtags starting with # and separated by # — for example #exchange#mixer#2026-case. The search returns all objects whose per-group notes contain any of those tags.
Tags are scoped to your Tracking Group and are invisible to other groups, so different investigative teams can independently tag the same address without visibility into each other's case work.
The flag icon's behavior depends on your role and the current state of the address:
Grey (untracked) — clicking adds the address to the server's tracked items list (Admin) or subscribes your group to it if it's already tracked (Member).
Colored (tracked, not subscribed) — clicking subscribes your group to receive alerts for this address.
Bright (tracked and subscribed) — clicking navigates to the Tracking Page for this item.
neuTracker indexes from the genesis block of any configured chain forward. For Bitcoin, this goes back to Block 0 (January 3, 2009) — over 800,000 blocks. For Ethereum-based chains, full history from their respective genesis blocks is supported. The depth of coverage depends on the blockchain data available on the server machine.
⛓ Blockchain Fundamentals
neuTracker's server is configurable to index and monitor:
Any BTC-based chain — Bitcoin mainnet, testnet, and forks that share the Bitcoin block file format
Most Ethereum-based EVM chains — Ethereum mainnet, and EVM-compatible chains (e.g. Polygon, BNB Chain, Avalanche C-Chain)
The same investigative interface, alert engine, and multi-group access control applies across all configured chains, enabling rapid cross-chain ownership correlation from a single platform.
neuTracker supports address formats across all configured chains. For Bitcoin-based chains:
1…P2PKH — original Pay-to-Public-Key-Hash format
3…P2SH — Pay-to-Script-Hash; multisig and wrapped SegWit
bc1q…Bech32 — native SegWit (P2WPKH/P2WSH)
bc1p…Bech32m — Taproot (P2TR)
For Ethereum-based chains: standard 0x… hex addresses. Additional formats are added as new chains are configured.
UTXO (Unspent Transaction Output) — used by Bitcoin and similar chains. Value is stored in discrete outputs rather than account balances. Each transaction consumes UTXOs as inputs and creates new UTXOs as outputs. When an address spends a UTXO, the spending transaction reveals its public key — which is why neuTracker can recover keys (and cascade cross-format tracking) only from addresses that have sent funds.
Account model — used by Ethereum and EVM chains. Each address has a persistent balance and nonce. Transactions directly debit/credit balances. neuTracker handles both models, applying the appropriate forensic heuristics for each chain type.
A private key is a randomly generated 256-bit number. The corresponding public key is derived via elliptic curve multiplication (secp256k1 for Bitcoin and Ethereum). Crucially, the same key pair generates addresses on both Bitcoin-based and Ethereum-based chains — a P2PKH address on Bitcoin and an 0x… address on Ethereum may be controlled by the same private key.
neuTracker's PubKey tracking exploits this: once a public key is recovered from a spending transaction on any chain, it can be used to identify the corresponding address on every other configured chain — enabling cross-chain ownership correlation without any manual address enumeration.
On Bitcoin-based chains, the coinbase transaction is always the first transaction in every block. It has no real inputs — it creates new coins as the block subsidy plus collected transaction fees. The current Bitcoin subsidy is 3.125 BTC (since the April 2024 halving). Coinbase outputs cannot be spent for 100 confirmations.
The Bitcoin Genesis Block coinbase contains Satoshi's famous message: "The Times 03/Jan/2009 Chancellor on brink of second bailout for banks." Ethereum uses a similar concept for block rewards, though the mechanics differ. neuTracker's Block Explorer identifies and displays coinbase/reward transactions for all supported chains.
NFTs (Non-Fungible Tokens) are unique on-chain assets representing ownership of digital or physical items, issued primarily on Ethereum (ERC-721/1155) and Solana. DeFi tokens are fungible smart-contract tokens (ERC-20 and equivalents) used in decentralized finance protocols — lending, trading, staking, and more.
Upcoming neuTracker releases will extend the tracking engine to:
Track NFT ownership transfers and flag interactions with sanctioned or suspicious wallets
Monitor DeFi token flows through protocols, bridges, and mixers
Correlate on-chain token activity with tracked wallet clusters across chains
This will make neuTracker the first unified forensics platform spanning native coins, tokens, and NFTs across multiple chains.
⚖️ Forensics & Compliance
Import OFAC SDN (Specially Designated Nationals) addresses — on any supported chain — into neuTracker and mark each one as Is Known. From that moment, every other tracked address that sends to or receives from any of those addresses automatically generates a Critical (SentToKnown / ReceivedFromKnown) event — with the OFAC-listed address and the full transaction ID captured in the alert payload for immediate regulatory filing.
This works across all configured chains. A sanctioned Ethereum wallet and a sanctioned Bitcoin address are both flagged as Known, and interactions from any tracked address on any chain generate Critical alerts in near-real-time.
neuTracker provides powerful heuristics for mixer detection. Distribution events (few inputs → many outputs) are the signature pattern of mixer post-processing. By naming known mixer deposit addresses (e.g., "Sinbad Deposit", "Chipmixer Input") and flagging them as tracked objects, subsequent interactions generate High-severity SentToNamed events that write the human-readable label directly into the audit trail.
The SentToSelf / ReceivedFromSelf event pair helps distinguish intra-wallet shuffles from true third-party transfers, allowing investigators to separate genuine tumbling from simple wallet reorganization.
Public blockchains are pseudonymous, not anonymous. Every transaction is permanently recorded on a public ledger visible to anyone. While addresses are not directly tied to real-world identities in the protocol, blockchain forensics tools like neuTracker can:
Cluster addresses controlled by the same entity via common-input-ownership heuristics and public key recovery
Identify interactions with known entities (exchanges, law enforcement wallets, OFAC-listed addresses)
Reconstruct complete fund-flow histories going back to the Genesis Block
High-profile cases — including the $3.6B Bitfinex hack seizure and the Silk Road forfeitures — have demonstrated that even sophisticated laundering attempts can be traced years later using blockchain analysis.
neuTracker produces structured, timestamped event records sourced directly from the blockchain — an immutable public ledger. The platform maintains a complete audit trail including UTC timestamps (block time), counterparty addresses, transaction IDs, chain identifiers, and event type classifications.
Whether this data qualifies as admissible evidence depends on jurisdiction, how it was collected, and expert testimony establishing the methodology. neuTracker's locally-hosted model (no third-party cloud) preserves chain-of-custody integrity. For legal proceedings, consult a qualified blockchain forensics expert who can testify to the analysis methodology.
Several landmark cases illustrate the power of blockchain analysis:
Bitfinex Hack (2016) — 119,756 BTC stolen; $3.6B seized by DOJ in 2022 after tracing funds through years of layering attempts.
Silk Road (2013) — FBI seized 144,000+ BTC by tracing transactions to identified wallets.
Colonial Pipeline Ransomware (2021) — FBI recovered $2.3M in Bitcoin by tracing ransom payments through the blockchain.
Mt. Gox (2014) — 850,000 BTC lost; trustee recovered ~140,000 BTC through forensic tracing, with creditor repayments beginning in 2024.
⚙️ Technical
neuTracker Server requires:
Windows Server or Windows 10/11 on the host machine
Supported database backend — installed and accessible on the server (contact sales for database requirements)
Blockchain data files — native chain data files for each configured chain, accessible on the server machine
Storage — a full Bitcoin archive is ~600+ GB; a full Ethereum archive is several TB; indexing is incremental so partial archives are supported
Network — a secure HTTPS endpoint must be accessible to client machines on your network
Full installation and configuration requirements are covered in the deployment guide, available to licensed customers. Contact sales@neumediasoftware.com for details.
The server maintains persistent connections to all active clients and pushes alert notifications in real-time the moment a monitored transaction is indexed. Clients subscribed to a Tracking Group receive the alert instantly in the UI — no polling required.
In addition to in-app alerts, the server can dispatch email and MMS notifications to all registered devices in the Tracking Group, ensuring investigators are reached even when the client application is not running.
The server progresses through startup phases tracked by the InitStatus enum:
Startup — server is initializing, database connection being established
FileIndexing — parsing and indexing blockchain data for all configured chains
TxScan — scanning transactions to build the address relationship graph
Running — fully operational; all features available
The client UI gates certain features (particularly tracking and alert functions) until InitStatus.Running is reached. For large archives, the initial indexing pass may take several hours or days.
All settings are persisted in a local configuration file in the application directory. This includes server connection details, database settings, chain data paths, SMTP settings for email/MMS alerts, tracking group credentials, and UI preferences. Settings are loaded on startup and saved whenever they change. No cloud accounts or external configuration services are required.
No questions match your search. Try different keywords.
