PyPI - crypttrace - Versions diffs - 0.2.0__py3-none-any.whl - Mend

crypttrace 0.2.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (38) hide show

crypttrace/__init__.py +2 -0
crypttrace/addresses.py +132 -0
crypttrace/analysis.py +222 -0
crypttrace/assess.py +273 -0
crypttrace/assets.py +68 -0
crypttrace/bridges.py +90 -0
crypttrace/chains.py +254 -0
crypttrace/cli.py +795 -0
crypttrace/config.py +27 -0
crypttrace/fetchers/__init__.py +0 -0
crypttrace/fetchers/bitcoin.py +186 -0
crypttrace/fetchers/etherscan.py +114 -0
crypttrace/fetchers/http.py +139 -0
crypttrace/fetchers/solana.py +97 -0
crypttrace/fetchers/tron.py +128 -0
crypttrace/funder.py +76 -0
crypttrace/investigate.py +204 -0
crypttrace/labels/__init__.py +0 -0
crypttrace/labels/audit.py +102 -0
crypttrace/labels/known.json +148 -0
crypttrace/labels/labels.py +199 -0
crypttrace/labels/partial.json +15 -0
crypttrace/offramp.py +58 -0
crypttrace/prices.py +90 -0
crypttrace/render.py +241 -0
crypttrace/report.py +175 -0
crypttrace/store.py +215 -0
crypttrace/trace.py +165 -0
crypttrace/verify.py +153 -0
crypttrace/watch.py +138 -0
crypttrace/web/index.html +660 -0
crypttrace/webapp.py +292 -0
crypttrace-0.2.0.dist-info/METADATA +503 -0
crypttrace-0.2.0.dist-info/RECORD +38 -0
crypttrace-0.2.0.dist-info/WHEEL +5 -0
crypttrace-0.2.0.dist-info/entry_points.txt +2 -0
crypttrace-0.2.0.dist-info/licenses/LICENSE +21 -0
crypttrace-0.2.0.dist-info/top_level.txt +1 -0

crypttrace/web/index.html ADDED Viewed

@@ -0,0 +1,660 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>crypttrace — on-chain investigation</title>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/vis-network/9.1.9/dist/vis-network.min.js"></script>
+<style>
+  :root{
+    --bg:#080b12; --glass:rgba(22,27,34,.55); --glass-2:rgba(38,45,58,.45);
+    --stroke:rgba(255,255,255,.09); --stroke-2:rgba(255,255,255,.16);
+    --text:#e8eef7; --dim:#93a1b5;
+    --green:#3fdf87; --purple:#c48cff; --red:#ff6b60; --cyan:#3fd8e8; --accent:#4d9dff;
+  }
+  *{box-sizing:border-box}
+  html{height:100%;overflow:hidden}
+  html,body{height:100%}
+  /* flex column: every row takes its natural height, the stage gets the rest.
+     A fixed calc() height broke as soon as a new row (the tabs) was added. */
+  body{
+    margin:0;font-family:-apple-system,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;
+    color:var(--text);background:var(--bg);overflow:hidden;
+    height:100vh;display:flex;flex-direction:column;
+  }
+  header,.bar,.tabs,.legend{flex:0 0 auto}
+  /* animated aurora backdrop — the light that the glass refracts */
+  .aurora{position:fixed;inset:0;z-index:0;overflow:hidden}
+  .aurora i{position:absolute;border-radius:50%;filter:blur(90px);opacity:.5;animation:drift 22s ease-in-out infinite}
+  .aurora i:nth-child(1){width:520px;height:520px;background:#1e4bd8;top:-120px;left:-80px}
+  .aurora i:nth-child(2){width:460px;height:460px;background:#7b2ff7;bottom:-140px;right:10%;animation-delay:-7s}
+  .aurora i:nth-child(3){width:380px;height:380px;background:#0e8f8f;top:35%;right:-100px;animation-delay:-14s}
+  @keyframes drift{0%,100%{transform:translate(0,0) scale(1)}33%{transform:translate(60px,40px) scale(1.12)}66%{transform:translate(-40px,20px) scale(.94)}}
+  .glass{
+    background:var(--glass);backdrop-filter:blur(22px) saturate(160%);
+    -webkit-backdrop-filter:blur(22px) saturate(160%);
+    border:1px solid var(--stroke);
+    box-shadow:0 8px 32px rgba(0,0,0,.38), inset 0 1px 0 rgba(255,255,255,.10);
+  }
+  header{position:relative;z-index:2;display:flex;align-items:center;gap:12px;padding:14px 22px;
+    border-bottom:1px solid var(--stroke);background:rgba(10,14,22,.5);backdrop-filter:blur(18px)}
+  header h1{margin:0;font-size:18px;font-weight:700;letter-spacing:-.02em}
+  header .tag{color:var(--dim);font-size:13px}
+  .bar{position:relative;z-index:2;display:flex;gap:10px;flex-wrap:wrap;align-items:center;padding:14px 22px}
+  input,select,button{
+    color:var(--text);font-size:14px;border-radius:12px;padding:10px 13px;
+    background:var(--glass-2);border:1px solid var(--stroke);
+    backdrop-filter:blur(14px);-webkit-backdrop-filter:blur(14px);
+    transition:all .25s cubic-bezier(.22,1,.36,1);outline:none;
+  }
+  input:focus,select:focus{border-color:var(--accent);box-shadow:0 0 0 4px rgba(77,157,255,.16);transform:translateY(-1px)}
+  input#addr{flex:1;min-width:340px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;letter-spacing:.2px}
+  select{cursor:pointer}
+  select option{background:#161b22;color:var(--text)}
+  button{cursor:pointer;font-weight:650;
+    background:linear-gradient(135deg,rgba(77,157,255,.92),rgba(123,47,247,.85));
+    border:1px solid rgba(255,255,255,.22);
+    box-shadow:0 6px 20px rgba(77,157,255,.30), inset 0 1px 0 rgba(255,255,255,.35)}
+  button:hover{transform:translateY(-2px);box-shadow:0 10px 28px rgba(77,157,255,.42), inset 0 1px 0 rgba(255,255,255,.45)}
+  button:active{transform:translateY(0) scale(.98)}
+  button.ghost{background:var(--glass-2);box-shadow:none;font-weight:500;border:1px solid var(--stroke)}
+  button.ghost:hover{border-color:var(--stroke-2);box-shadow:0 6px 18px rgba(0,0,0,.3)}
+  /* Tabs live inside the graph column, never in the header stack — that way they
+     cannot collide with the search row regardless of window size. */
+  .main{flex:1 1 auto;display:flex;flex-direction:column;min-width:0;min-height:0}
+  .tabs{flex:0 0 auto;display:flex;gap:6px;margin-bottom:10px}
+  .tab{font-size:13px;font-weight:600;padding:8px 15px;border-radius:12px;cursor:pointer;
+    background:var(--glass-2);border:1px solid var(--stroke);color:var(--dim);
+    backdrop-filter:blur(12px);transition:.25s cubic-bezier(.22,1,.36,1)}
+  .tab:hover{color:var(--text);transform:translateY(-1px)}
+  .tab.on{color:#fff;border-color:rgba(255,255,255,.28);
+    background:linear-gradient(135deg,rgba(77,157,255,.9),rgba(123,47,247,.8));
+    box-shadow:0 6px 18px rgba(77,157,255,.28)}
+  .view{position:absolute;inset:0;overflow:auto;padding:18px 20px;display:none;animation:rise .4s both}
+  .view.on{display:block}
+  #graph.on{display:block}
+  .stat{display:flex;gap:22px;flex-wrap:wrap;margin-bottom:16px;font-size:13px;color:var(--dim)}
+  .stat b{color:var(--text);font-size:15px;display:block}
+  .verdict{padding:13px 16px;border-radius:14px;margin-bottom:16px;font-size:13.5px;line-height:1.6;
+    background:rgba(255,193,86,.09);border:1px solid rgba(255,193,86,.30);color:#ffd591}
+  .verdict.calm{background:var(--glass-2);border-color:var(--stroke);color:var(--dim)}
+  /* verification badge — says whether the numbers reconcile with the chain */
+  .vfy{display:inline-flex;align-items:center;gap:7px;padding:6px 12px;border-radius:999px;
+    font-size:12px;font-weight:650;border:1px solid currentColor;backdrop-filter:blur(10px)}
+  .vfy-verified{color:var(--green);background:rgba(63,223,135,.10)}
+  .vfy-consistent{color:var(--cyan);background:rgba(63,216,232,.10)}
+  .vfy-partial{color:#ffc857;background:rgba(255,200,87,.10)}
+  .vfy-mismatch{color:var(--red);background:rgba(255,107,96,.12)}
+  .vfy-unchecked,.vfy-unavailable{color:var(--dim);background:rgba(147,161,181,.10)}
+  .vfy-note{font-size:12px;color:var(--dim);line-height:1.55;margin-top:9px}
+  /* assessment: a stated conclusion and what it rests on */
+  .concl{padding:18px 20px;border-radius:16px;margin-bottom:18px;font-size:14.5px;line-height:1.65;
+    border:1px solid currentColor;backdrop-filter:blur(14px)}
+  .concl-high{color:var(--red);background:rgba(255,107,96,.09)}
+  .concl-med{color:#ffc857;background:rgba(255,200,87,.08)}
+  .concl-low{color:var(--green);background:rgba(63,223,135,.07)}
+  .concl b{color:var(--text)}
+  .sig{padding:13px 15px;border-radius:14px;margin-bottom:10px;
+    background:var(--glass-2);border:1px solid var(--stroke);transition:.25s}
+  .sig:hover{border-color:var(--stroke-2);transform:translateY(-1px)}
+  .sig-head{display:flex;align-items:center;gap:9px;margin-bottom:7px}
+  .sig-name{font-weight:650;font-size:13.5px}
+  .sig-conf{font-size:11px;font-weight:700;padding:2px 9px;border-radius:999px;
+    border:1px solid currentColor}
+  .conf-high{color:var(--green)} .conf-medium{color:#ffc857} .conf-low{color:var(--dim)}
+  .sig-line{font-size:12.5px;color:var(--dim);line-height:1.55}
+  .sig-line b{color:var(--text);font-weight:600}
+  .meters{display:flex;gap:20px;margin:6px 0 18px;font-size:12.5px;color:var(--dim)}
+  .meters b{display:block;color:var(--text);font-size:16px;margin-top:2px}
+  .caveat{padding:12px 15px;border-radius:13px;margin-top:16px;font-size:12.5px;line-height:1.6;
+    color:#ffd591;background:rgba(255,193,86,.08);border:1px solid rgba(255,193,86,.28)}
+  .vfy-rows{margin-top:10px;font-size:12px}
+  .vfy-rows div{display:flex;justify-content:space-between;gap:10px;padding:3px 0}
+  table.grid{width:100%;border-collapse:collapse;font-size:12.5px}
+  table.grid th{text-align:left;color:var(--dim);font-weight:600;padding:7px 9px;
+    border-bottom:1px solid var(--stroke);position:sticky;top:0;background:rgba(12,16,24,.95);
+    backdrop-filter:blur(8px)}
+  table.grid td{padding:7px 9px;border-bottom:1px solid rgba(255,255,255,.045)}
+  table.grid tr:hover td{background:rgba(255,255,255,.035)}
+  table.grid td.num{text-align:right;font-variant-numeric:tabular-nums}
+  .bars{display:flex;flex-direction:column;gap:5px}
+  .barrow{display:grid;grid-template-columns:132px 46px 1fr;align-items:center;gap:10px;font-size:12px}
+  .barrow .t{color:var(--dim)}
+  .barrow .n{text-align:right;color:var(--text);font-variant-numeric:tabular-nums}
+  /* histogram column — must NOT be called .bar, that class is the search row */
+  .tlbar{height:16px;border-radius:5px;background:linear-gradient(90deg,var(--accent),var(--purple));
+    box-shadow:0 0 12px rgba(77,157,255,.35);min-width:3px;transition:width .5s cubic-bezier(.22,1,.36,1)}
+  .legend{position:relative;z-index:2;display:flex;gap:8px;flex-wrap:wrap;align-items:center;padding:0 22px 12px}
+  .chip{display:flex;align-items:center;gap:6px;font-size:12px;color:var(--dim);
+    padding:5px 11px;border-radius:999px;background:var(--glass-2);border:1px solid var(--stroke);
+    backdrop-filter:blur(12px);transition:.25s}
+  .chip:hover{color:var(--text);border-color:var(--stroke-2);transform:translateY(-1px)}
+  .dot{width:9px;height:9px;border-radius:50%;box-shadow:0 0 10px currentColor}
+  .wrap{position:relative;z-index:1;display:flex;gap:16px;padding:0 22px 18px;
+    flex:1 1 auto;min-height:0}
+  .stage{flex:1 1 auto;min-height:0;position:relative;border-radius:20px;overflow:hidden;
+    background:rgba(12,16,24,.42);backdrop-filter:blur(20px);-webkit-backdrop-filter:blur(20px);
+    border:1px solid var(--stroke);box-shadow:0 12px 40px rgba(0,0,0,.42), inset 0 1px 0 rgba(255,255,255,.08);
+    animation:rise .6s cubic-bezier(.22,1,.36,1) both}
+  #graph{position:absolute;inset:0;opacity:0;transition:opacity .7s ease}
+  #graph.on{opacity:1}
+  .hint{position:absolute;inset:0;display:flex;align-items:center;justify-content:center;
+    color:var(--dim);font-size:14px;text-align:center;padding:30px;pointer-events:none;transition:.4s}
+  .hint.hide{opacity:0}
+  .loader{position:absolute;top:0;left:0;height:2px;width:0;background:linear-gradient(90deg,var(--accent),var(--purple));
+    box-shadow:0 0 12px var(--accent);transition:width .4s ease;border-radius:2px}
+  /* floating zoom controls over the graph */
+  .zoomctl{position:absolute;right:14px;bottom:14px;display:flex;flex-direction:column;gap:6px;z-index:3}
+  .zoomctl button{width:38px;height:38px;padding:0;font-size:16px;font-weight:600;border-radius:12px;
+    background:var(--glass);border:1px solid var(--stroke);box-shadow:0 4px 16px rgba(0,0,0,.35);
+    backdrop-filter:blur(16px);-webkit-backdrop-filter:blur(16px);display:flex;align-items:center;justify-content:center}
+  .zoomctl button:hover{background:var(--glass-2);border-color:var(--stroke-2);transform:translateY(-2px)}
+  .scaleview{position:absolute;left:14px;bottom:14px;z-index:3;font-size:11.5px;color:var(--dim);
+    padding:6px 11px;border-radius:999px;background:var(--glass);border:1px solid var(--stroke);
+    backdrop-filter:blur(14px);-webkit-backdrop-filter:blur(14px)}
+  .side{width:352px;overflow-y:auto;border-radius:20px;padding:16px;
+    background:var(--glass);backdrop-filter:blur(22px) saturate(160%);-webkit-backdrop-filter:blur(22px) saturate(160%);
+    border:1px solid var(--stroke);box-shadow:0 12px 40px rgba(0,0,0,.42), inset 0 1px 0 rgba(255,255,255,.10);
+    animation:rise .6s .08s cubic-bezier(.22,1,.36,1) both}
+  .side::-webkit-scrollbar{width:8px}
+  .side::-webkit-scrollbar-thumb{background:rgba(255,255,255,.12);border-radius:10px}
+  @keyframes rise{from{opacity:0;transform:translateY(14px)}to{opacity:1;transform:none}}
+  .card{border-radius:16px;padding:14px 15px;margin-bottom:13px;
+    background:var(--glass-2);border:1px solid var(--stroke);
+    box-shadow:inset 0 1px 0 rgba(255,255,255,.08);
+    animation:rise .45s cubic-bezier(.22,1,.36,1) both;transition:.3s}
+  .card:hover{border-color:var(--stroke-2);transform:translateY(-2px);box-shadow:0 10px 26px rgba(0,0,0,.28)}
+  .card:nth-child(2){animation-delay:.05s} .card:nth-child(3){animation-delay:.1s}
+  .card:nth-child(4){animation-delay:.15s} .card:nth-child(5){animation-delay:.2s}
+  .card h3{margin:0 0 11px;font-size:11px;text-transform:uppercase;letter-spacing:.09em;color:var(--dim);font-weight:700}
+  .kv{display:flex;justify-content:space-between;gap:10px;padding:5px 0;font-size:13px;
+    border-bottom:1px solid rgba(255,255,255,.045)}
+  .kv:last-child{border-bottom:0}
+  .kv .k{color:var(--dim)}
+  .kv .v{text-align:right}
+  .mono{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12.5px}
+  .pill{display:inline-block;padding:3px 10px;border-radius:999px;font-size:11.5px;font-weight:700;
+    border:1px solid currentColor;backdrop-filter:blur(8px)}
+  .t-exchange{color:var(--green);background:rgba(63,223,135,.12)}
+  .t-mixer{color:var(--purple);background:rgba(196,140,255,.12)}
+  .t-sanctioned,.t-scam{color:var(--red);background:rgba(255,107,96,.12)}
+  .t-bridge{color:var(--cyan);background:rgba(63,216,232,.12)}
+  .t-unknown,.t-offramp{color:var(--dim);background:rgba(147,161,181,.12)}
+  .muted{color:var(--dim);font-size:13px;line-height:1.55}
+  .err{color:var(--red);font-size:13px}
+  .alert{border-color:rgba(255,107,96,.4);background:rgba(255,107,96,.08)}
+  a.btnlink{display:inline-block;margin-top:9px;font-size:12.5px;color:var(--accent);text-decoration:none;
+    padding:7px 12px;border-radius:10px;background:rgba(77,157,255,.10);border:1px solid rgba(77,157,255,.28);transition:.25s}
+  a.btnlink:hover{background:rgba(77,157,255,.2);transform:translateY(-1px)}
+  .status{margin-left:auto;font-size:12px;color:var(--dim)}
+  .spin{display:inline-block;width:11px;height:11px;margin-right:6px;vertical-align:-1px;
+    border:2px solid rgba(255,255,255,.2);border-top-color:var(--accent);border-radius:50%;animation:sp .7s linear infinite}
+  @keyframes sp{to{transform:rotate(360deg)}}
+</style>
+</head>
+<body>
+<div class="aurora"><i></i><i></i><i></i></div>
+<header>
+  <h1>🔎 crypttrace</h1>
+  <span class="tag">trace stolen crypto — on-chain investigation</span>
+</header>
+<div class="bar">
+  <input id="addr" placeholder="0x…  paste an address to investigate" spellcheck="false">
+  <select id="chain" title="Chain">
+    <option value="eth">eth</option><option value="bsc">bsc</option>
+    <option value="polygon">polygon</option><option value="arbitrum">arbitrum</option>
+    <option value="optimism">optimism</option><option value="base">base</option>
+    <option value="btc">btc</option><option value="tron">tron</option><option value="sol">sol</option>
+  </select>
+  <select id="asset" title="Asset to trace">
+    <option value="native">ETH (native)</option>
+  </select>
+  <select id="direction" title="Which way to follow the money">
+    <option value="out">→ where funds went</option>
+    <option value="in">← where funds came from</option>
+  </select>
+  <select id="depth" title="Depth"><option>2</option><option selected>3</option><option>4</option><option>5</option></select>
+  <button id="go">Investigate</button>
+  <button id="fit" class="ghost" title="Fit graph to view">Fit</button>
+</div>
+<div class="legend">
+  <span class="chip"><span class="dot" style="color:var(--green);background:var(--green)"></span>exchange</span>
+  <span class="chip"><span class="dot" style="color:var(--purple);background:var(--purple)"></span>mixer</span>
+  <span class="chip"><span class="dot" style="color:var(--red);background:var(--red)"></span>sanctioned / scam</span>
+  <span class="chip"><span class="dot" style="color:var(--cyan);background:var(--cyan)"></span>bridge</span>
+  <span class="chip"><span class="dot" style="color:var(--dim);background:var(--dim)"></span>unknown</span>
+  <span class="status" id="status"></span>
+</div>
+<div class="wrap">
+ <div class="main">
+  <div class="tabs">
+    <button class="tab on" data-view="graph">Flow graph</button>
+    <button class="tab" data-view="assess">Assessment</button>
+    <button class="tab" data-view="timeline">Timeline</button>
+    <button class="tab" data-view="victims">Who sent funds here</button>
+  </div>
+  <div class="stage">
+    <div class="loader" id="loader"></div>
+    <div id="graph"></div>
+    <div class="hint" id="hint">Paste an address above and hit <b style="color:var(--text);margin:0 4px">Investigate</b><br>
+      — flow runs left → right. Click a node to inspect it, click a transfer line to open it on the explorer.</div>
+    <div class="view" id="v-assess"></div>
+    <div class="view" id="v-timeline"></div>
+    <div class="view" id="v-victims"></div>
+    <div class="scaleview" id="scaleview" style="display:none">100%</div>
+    <div class="zoomctl" id="zoomctl">
+      <button id="zin"  title="Zoom in">+</button>
+      <button id="zout" title="Zoom out">−</button>
+      <button id="zroot" title="Centre on the investigated address">⌖</button>
+    </div>
+  </div>
+ </div>
+  <div class="side" id="side">
+    <div class="card"><h3>How it works</h3>
+      <div class="muted">The graph maps where funds moved, hop by hop. Nodes are coloured by what
+      they are — exchanges are cash-out points, mixers break the trail. Click any node for its
+      profile, first-funder chain and off-ramp check.</div>
+    </div>
+  </div>
+</div>
+<script>
+const COLORS={exchange:'#3fdf87',mixer:'#c48cff',sanctioned:'#ff6b60',scam:'#ff6b60',bridge:'#3fd8e8',unknown:'#93a1b5'};
+const EXPLORER={eth:'https://etherscan.io',bsc:'https://bscscan.com',polygon:'https://polygonscan.com',
+  arbitrum:'https://arbiscan.io',optimism:'https://optimistic.etherscan.io',base:'https://basescan.org'};
+const NON_EVM={btc:a=>`https://mempool.space/address/${a}`,
+               tron:a=>`https://tronscan.org/#/address/${a}`,
+               sol:a=>`https://solscan.io/account/${a}`};
+const $=s=>document.querySelector(s);
+let network=null, lastGraph=null, rootId=null;
+const MIN_SCALE=0.42;   // below this, nodes/labels become unreadable dots
+function showScale(){
+  if(!network) return;
+  const v=$('#scaleview');
+  v.style.display='block';
+  v.textContent=Math.round(network.getScale()*100)+'%';
+}
+// Fit the whole graph, but never zoom out past readability — if the trace is
+// too wide, stay at MIN_SCALE and centre on the investigated address instead.
+function fitNice(){
+  if(!network) return;
+  // Measure first (no animation), so the decision is made on the real scale.
+  network.fit();
+  const s=network.getScale();
+  if(s<MIN_SCALE){
+    const opts={scale:MIN_SCALE,animation:{duration:500,easingFunction:'easeInOutQuad'}};
+    if(rootId){ const p=network.getPositions([rootId])[rootId]; if(p) opts.position=p; }
+    network.moveTo(opts);
+    setTimeout(showScale,520);
+  }else{
+    showScale();
+  }
+}
+function zoomBy(f){
+  if(!network) return;
+  network.moveTo({scale:Math.min(3,Math.max(0.15,network.getScale()*f)),
+                  animation:{duration:220,easingFunction:'easeInOutQuad'}});
+  setTimeout(showScale,240);
+}
+const chain=()=>$('#chain').value;
+const explorer=()=>EXPLORER[chain()]||EXPLORER.eth;
+const addrUrl=a=>NON_EVM[chain()]?NON_EVM[chain()](a):`${explorer()}/address/${a}`;
+// EVM: advanced filter shows all transfers A→B. Non-EVM: fall back to the recipient's page.
+const edgeUrl=(f,t)=>NON_EVM[chain()]?NON_EVM[chain()](t):`${explorer()}/advanced-filter?fadd=${f}&tadd=${t}`;
+function setStatus(t,err,busy){
+  const s=$('#status');
+  s.innerHTML=(busy?'<span class="spin"></span>':'')+esc(t);
+  s.style.color=err?'var(--red)':'var(--dim)';
+}
+function loader(p){ $('#loader').style.width=p+'%'; if(p>=100) setTimeout(()=>$('#loader').style.width='0',500); }
+async function api(path){
+  const r=await fetch(path);
+  const raw=await r.text();
+  let j;
+  try{ j=JSON.parse(raw); }
+  catch{ throw new Error(raw.slice(0,140).replace(/<[^>]*>/g,'').trim()||('HTTP '+r.status)); }
+  if(!r.ok||j.error) throw new Error(j.error||('HTTP '+r.status));
+  return j;
+}
+const fmtUsd=v=>v==null?'—':(Math.abs(v)>=1e6?'$'+(v/1e6).toFixed(2)+'M':Math.abs(v)>=1e3?'$'+(v/1e3).toFixed(1)+'K':'$'+v.toFixed(2));
+const fmtTs=t=>t?new Date(t*1000).toISOString().slice(0,16).replace('T',' '):'—';
+const short=a=>a.slice(0,10)+'…'+a.slice(-6);
+// Everything from the backend is data: token symbols and names come straight
+// from the chain, where anyone can deploy a token called whatever they like.
+const esc=s=>String(s??'').replace(/[<>&"']/g,c=>({'<':'&lt;','>':'&gt;','&':'&amp;','"':'&quot;',"'":'&#39;'}[c]));
+const safeUrl=u=>/^https?:\/\//i.test(String(u??''))?esc(u):'#';
+const q=encodeURIComponent;
+function renderGraph(g){
+  lastGraph=g;
+  const nodes=g.nodes.map(n=>{
+    const c=COLORS[n.type]||COLORS.unknown;
+    return {
+      id:n.id,
+      label:(n.label?n.label+'\n':'')+n.short,
+      title:`${n.label||n.type}\n${n.id}\n(click to inspect · double-click opens explorer)`,
+      shape:'dot', size:n.root?26:(n.terminal?18:14),
+      color:{background:c,border:n.root?'#ffffff':c,
+             highlight:{background:c,border:'#ffffff'},hover:{background:c,border:'#ffffff'}},
+      borderWidth:n.root?4:2,
+      shadow:{enabled:true,color:c+'88',size:n.root?26:14,x:0,y:0},
+      level:n.level,          // our own hop distance — keeps the layout compact
+      font:{color:'#e8eef7',size:12,face:'-apple-system, Segoe UI, sans-serif',
+            strokeWidth:4,strokeColor:'rgba(8,11,18,.85)',multi:false}
+    };
+  });
+  const edges=g.edges.map(e=>({
+    from:e.from,to:e.to,arrows:{to:{enabled:true,scaleFactor:.7}},
+    label:`${e.value} ${g.symbol}${e.usd!=null?'  ≈'+fmtUsd(e.usd):''}`,
+    title:`${e.value} ${g.symbol} in ${e.tx} tx — click to open on explorer`,
+    font:{color:'#93a1b5',size:10.5,strokeWidth:4,strokeColor:'rgba(8,11,18,.85)',align:'horizontal'},
+    color:{color:'rgba(255,255,255,.18)',highlight:'#4d9dff',hover:'#4d9dff'},
+    width:1.2, hoverWidth:2.4, selectionWidth:2.4,
+    smooth:{type:'cubicBezier',forceDirection:'horizontal',roundness:.5}
+  }));
+  const data={nodes:new vis.DataSet(nodes),edges:new vis.DataSet(edges)};
+  // tighten spacing as the graph grows, so wide traces stay readable
+  const n=g.nodes.length;
+  const lvl = n>40?200 : n>20?240 : 300;
+  const gap = n>40?70  : n>20?90  : 130;
+  const opts={
+    // Ordered flow, using the hop levels we computed server-side.
+    // 'out' → investigated address on the left; 'in' → sources on the left.
+    layout:{hierarchical:{enabled:true,direction:(g.direction==='in'?'RL':'LR'),
+            levelSeparation:lvl,nodeSpacing:gap,treeSpacing:gap+40,
+            blockShifting:true,edgeMinimization:true,parentCentralization:true}},
+    physics:false,
+    interaction:{hover:true,tooltipDelay:120,navigationButtons:false,zoomView:true,dragView:true},
+    nodes:{borderWidthSelected:4},
+    edges:{selectionWidth:2.4}
+  };
+  const el=$('#graph');
+  el.classList.remove('on');
+  network=new vis.Network(el,data,opts);
+  rootId=(g.nodes.find(x=>x.root)||g.nodes[0]||{}).id;
+  network.on('zoom',showScale);
+  network.once('afterDrawing',()=>{ el.classList.add('on'); fitNice(); });
+  network.on('click',p=>{
+    if(p.nodes.length){ inspect(p.nodes[0]); return; }
+    if(p.edges.length){                       // click a transfer line → open on explorer
+      const e=data.edges.get(p.edges[0]);
+      window.open(edgeUrl(e.from,e.to),'_blank','noopener');
+    }
+  });
+  network.on('doubleClick',p=>{ if(p.nodes.length) window.open(addrUrl(p.nodes[0]),'_blank','noopener'); });
+}
+const card=(t,r,cls='')=>`<div class="card ${cls}"><h3>${t}</h3>${r}</div>`;
+const kv=(k,v)=>`<div class="kv"><span class="k">${k}</span><span class="v">${v}</span></div>`;
+const pill=(t,l)=>`<span class="pill t-${esc(t)}">${esc(l||t)}</span>`;
+async function inspect(addr){
+  const c=chain();
+  $('#side').innerHTML=`<div class="card"><div class="muted"><span class="spin"></span>Loading ${esc(short(addr))}…</div></div>`;
+  try{
+    const [p,f,o]=await Promise.all([
+      api(`/api/profile?address=${q(addr)}&chain=${c}`),
+      api(`/api/funder?address=${q(addr)}&chain=${c}`).catch(()=>({hops:[]})),
+      api(`/api/offramp?address=${q(addr)}&chain=${c}`).catch(()=>({offramp:null}))
+    ]);
+    // A label is a claim about who controls an address — show what backs it.
+    let ev={known:false};
+    try{ ev=await api(`/api/evidence?address=${q(addr)}`); }catch{}
+    const basis = ev.known
+      ? (ev.source
+          ? `<div class="vfy-note"><b>basis:</b> ${esc(ev.source)}</div>`
+          : `<div class="vfy-note" style="color:#ffc857">No source recorded for this label —
+             it is inherited, not evidenced. Verify before acting on it.</div>`)
+      : '';
+    let h='';
+    h+=card('Address',
+      kv('address',`<span class="mono">${esc(short(addr))}</span>`)+
+      (p.label?kv('label',pill(p.type,p.label)):kv('type',pill(p.type)))+
+      kv('risk',`${p.risk||0}/100`)+
+      basis+
+      `<a class="btnlink" href="${safeUrl(addrUrl(addr))}" target="_blank" rel="noopener">Open on explorer ↗</a>`);
+    h+=card('Profile',
+      kv('balance',`${esc(p.balance)} ${esc(p.symbol||'')} ≈ ${fmtUsd(p.balance_usd)}`)+
+      kv('transfers',p.txs)+
+      kv('first seen',fmtTs(p.first_seen))+
+      kv('last seen',fmtTs(p.last_seen)));
+    if(o.offramp){
+      h+=card('⚠ Off-ramp detected',
+        `<div class="muted">~${Math.round(o.offramp.fraction*100)}% of outgoing funds forwarded to
+        <b style="color:var(--green)">${esc(o.offramp.exchange)}</b> — likely a deposit address, i.e. a
+        <b>KYC identification point</b>.</div>`,'alert');
+    }
+    if(f.hops&&f.hops.length){
+      h+=card('First-funder chain',
+        f.hops.map(x=>kv('◀ funded by',
+          `<span class="mono">${esc(short(x.funder))}</span> · ${x.value.toFixed(3)} ${x.terminal?pill(x.funder_type,x.funder_label||x.funder_type):''}`)).join(''));
+    }
+    $('#side').innerHTML=h;
+  }catch(e){ $('#side').innerHTML=card('Error',`<div class="err">${esc(e.message)}</div>`); }
+}
+async function run(){
+  const a=$('#addr').value.trim();
+  if(!a){ setStatus('enter an address',true); return; }
+  setStatus('tracing the chain…',false,true); loader(35);
+  $('#hint').classList.add('hide');
+  loaded={};                       // new address -> other views must reload
+  $('#v-timeline').innerHTML=''; $('#v-victims').innerHTML=''; $('#v-assess').innerHTML='';
+  try{
+    const dir=$('#direction').value;
+    const g=await api(`/api/trace?address=${q(a)}&chain=${chain()}&depth=${$('#depth').value}&asset=${q($('#asset').value)}&direction=${dir}`);
+    loader(80); renderGraph(g);
+    setStatus(`${g.nodes.length} addresses · ${g.edges.length} transfers`);
+    // BTC/Tron/Solana addresses are case-sensitive — never lowercase them
+    inspect(NON_EVM[chain()] ? a : a.toLowerCase()); loader(100);
+    if(!g.edges.length){                     // explain an empty graph instead of showing nothing
+      const other=dir==='out'?'← where funds came from':'→ where funds went';
+      $('#hint').innerHTML=dir==='out'
+        ? `This address has no <b>outgoing</b> transfers — it only ever received funds.<br>
+           Switch the direction to <b>${other}</b> to trace where its money came from.`
+        : `This address has no <b>incoming</b> transfers on record.<br>
+           Try <b>${other}</b> instead.`;
+      $('#hint').classList.remove('hide');
+    }
+  }catch(e){ setStatus(e.message,true); loader(100); $('#hint').classList.remove('hide'); }
+}
+// The asset list depends on the chain (USDT on Tron ≠ USDT on Ethereum),
+// so ask the backend which assets it can actually trace here.
+async function syncAssets(){
+  const sel=$('#asset'), c=chain();
+  $('#addr').placeholder = c==='btc' ? 'bc1… / 1… / 3…  Bitcoin address'
+    : c==='tron' ? 'T…  Tron address'
+    : c==='sol'  ? 'Solana account address'
+    : '0x…  paste an address to investigate';
+  try{
+    const r=await api(`/api/assets?chain=${c}`);
+    sel.innerHTML=r.assets.map(o=>`<option value="${esc(o.value)}">${esc(o.label)}</option>`).join('');
+    sel.disabled=r.assets.length<2;
+    sel.style.opacity=sel.disabled?.55:1;
+    sel.title=sel.disabled?'No tokens on this chain':'Asset to trace';
+  }catch{ /* keep whatever is there if the backend is unreachable */ }
+}
+$('#chain').addEventListener('change',syncAssets); syncAssets();
+// ---------- views: flow graph / timeline / victims ----------
+let currentView='graph', loaded={};
+function showView(v){
+  currentView=v;
+  document.querySelectorAll('.tab').forEach(t=>t.classList.toggle('on',t.dataset.view===v));
+  $('#graph').style.display   = v==='graph'?'block':'none';
+  $('#zoomctl').style.display = v==='graph'?'flex':'none';
+  $('#scaleview').style.display = (v==='graph'&&network)?'block':'none';
+  $('#v-assess').classList.toggle('on',v==='assess');
+  $('#v-timeline').classList.toggle('on',v==='timeline');
+  $('#v-victims').classList.toggle('on',v==='victims');
+  const a=$('#addr').value.trim();
+  if(a && !loaded[v+a]) {
+    loaded[v+a]=true;
+    if(v==='timeline') loadTimeline(a);
+    if(v==='victims') loadVictims(a);
+    if(v==='assess') loadAssessment(a);
+  }
+}
+document.querySelectorAll('.tab').forEach(t=>t.onclick=()=>showView(t.dataset.view));
+const dstamp=t=>t?new Date(t*1000).toISOString().slice(0,16).replace('T',' '):'—';
+async function loadTimeline(a){
+  const el=$('#v-timeline');
+  el.innerHTML='<div class="muted"><span class="spin"></span>Reading transfer history…</div>';
+  try{
+    const t=await api(`/api/timeline?address=${q(a)}&chain=${chain()}&asset=${q($('#asset').value)}&buckets=24`);
+    if(!t.events){ el.innerHTML='<div class="muted">No dated transfers found.</div>'; return; }
+    const peak=Math.max(...t.buckets.map(b=>b.count),1);
+    const bars=t.buckets.filter(b=>b.count).map(b=>`
+      <div class="barrow"><span class="t">${dstamp(b.start)}</span><span class="n">${b.count}</span>
+        <div class="tlbar" style="width:${Math.max(3,b.count/peak*100)}%"></div></div>`).join('');
+    const calm=!(t.verdict||'').includes('automated');
+    el.innerHTML=`
+      <div class="stat">
+        <div>transfers<b>${t.events}</b></div>
+        <div>received<b>${t.in_total.toFixed(6)} ${esc(t.symbol)}</b></div>
+        <div>sent<b>${t.out_total.toFixed(6)} ${esc(t.symbol)}</b></div>
+        <div>first<b>${dstamp(t.first_ts)}</b></div>
+        <div>last<b>${dstamp(t.last_ts)}</b></div>
+      </div>
+      ${t.verdict?`<div class="verdict ${calm?'calm':''}">${esc(t.verdict)}</div>`:''}
+      <div class="bars">${bars}</div>
+      ${t.dust_skipped?`<div class="muted" style="margin-top:14px">${t.dust_skipped} dust-sized transfers ignored (spam sent to well-known addresses).</div>`:''}`;
+  }catch(e){ el.innerHTML=`<div class="err">${esc(e.message)}</div>`; }
+}
+// The assessment: what the evidence supports, how strongly, and on what basis.
+// This is the part that separates a conclusion from a data dump, so every
+// signal shows its observation and its meaning rather than just a score.
+async function loadAssessment(a){
+  const el=$('#v-assess');
+  el.innerHTML='<div class="muted"><span class="spin"></span>Weighing the evidence…</div>';
+  try{
+    const r=await api(`/api/assess?address=${q(a)}&chain=${chain()}&asset=${q($('#asset').value)}`);
+    const band = r.risk>=60?'high' : r.risk>=25?'med' : 'low';
+    const sigs=(r.signals||[]).map(s=>`
+      <div class="sig">
+        <div class="sig-head">
+          <span class="sig-name">${esc(s.name)}</span>
+          <span class="sig-conf conf-${esc(s.confidence)}">${esc(s.confidence)} confidence</span>
+        </div>
+        <div class="sig-line"><b>observed</b> — ${esc(s.observed)}</div>
+        <div class="sig-line"><b>means</b> — ${esc(s.implication)}</div>
+      </div>`).join('') ||
+      '<div class="muted">No distinguishing signals. That is not a clearance — an address with unremarkable flows is simply unknown.</div>';
+    el.innerHTML=`
+      <div class="concl concl-${band}">${esc(r.assessment)}</div>
+      <div class="meters">
+        <div>risk<b>${r.risk}/100</b></div>
+        <div>confidence<b>${esc(r.confidence)}</b></div>
+        <div>arithmetic<b>${esc(r.verification?.status||'—')}</b></div>
+        <div>received<b>${(r.totals?.received??0).toFixed(8)}</b></div>
+        <div>sent<b>${(r.totals?.sent??0).toFixed(8)}</b></div>
+      </div>
+      <h3 style="font-size:11px;letter-spacing:.09em;color:var(--dim);margin:0 0 11px">WHAT THIS RESTS ON</h3>
+      ${sigs}
+      ${(r.caveats||[]).length?`<div class="caveat"><b>Read this before quoting the above.</b><br>
+        ${r.caveats.map(c=>esc(c)).join('<br>')}</div>`:''}`;
+  }catch(e){ el.innerHTML=`<div class="err">${esc(e.message)}</div>`; }
+}
+let victimRows=[], victimSym='';
+async function loadVictims(a){
+  const el=$('#v-victims');
+  el.innerHTML='<div class="muted"><span class="spin"></span>Walking the money backwards…</div>';
+  try{
+    const v=await api(`/api/victims?address=${q(a)}&chain=${chain()}&asset=${q($('#asset').value)}&depth=1`);
+    victimRows=v.rows; victimSym=v.symbol;
+    if(!v.count){ el.innerHTML='<div class="muted">Nothing fed this address.</div>'; return; }
+    verifyInto(el, a);                       // is this list trustworthy?
+    const rows=v.rows.slice(0,300).map(r=>`
+      <tr><td class="mono">${esc(r.address.slice(0,18))}…${esc(r.address.slice(-6))}
+            ${r.label?`<span class="pill t-${esc(r.type)}" style="margin-left:6px">${esc(r.label)}</span>`:''}</td>
+          <td class="num">${r.hop}</td><td class="num">${r.value}</td><td class="num">${r.txs}</td>
+          <td>${dstamp(r.first_seen)}</td>
+          <td><a class="btnlink" style="padding:3px 9px;margin:0" href="${safeUrl(r.explorer)}" target="_blank" rel="noopener">open ↗</a></td></tr>`).join('');
+    el.innerHTML=`
+      <div class="stat">
+        <div>addresses<b>${v.count}</b></div>
+        <div>total sent in<b>${esc(v.total)} ${esc(v.symbol)}</b></div>
+        <div>&nbsp;<button class="ghost" id="csv" style="padding:7px 13px">Download CSV</button></div>
+      </div>
+      <table class="grid"><thead><tr>
+        <th>Address</th><th style="text-align:right">Hop</th>
+        <th style="text-align:right">Sent (${esc(v.symbol)})</th><th style="text-align:right">Txs</th>
+        <th>First seen (UTC)</th><th></th></tr></thead><tbody>${rows}</tbody></table>
+      ${v.count>300?`<div class="muted" style="margin-top:12px">Showing the first 300 of ${v.count}; the CSV contains all.</div>`:''}`;
+    $('#csv').onclick=downloadCsv;
+  }catch(e){ el.innerHTML=`<div class="err">${esc(e.message)}</div>`; }
+}
+// Ask the backend whether our own totals reconcile with the chain, and show it
+// next to any figure a user might quote. A silent miscount is the worst failure
+// mode for a tool like this.
+const VFY_ICON={verified:'✓',consistent:'≈',partial:'◐',mismatch:'✗',unchecked:'–',unavailable:'–'};
+async function verifyInto(container, addr){
+  const slot=document.createElement('div');
+  slot.style.margin='0 0 14px';
+  slot.innerHTML='<span class="vfy vfy-unchecked">checking…</span>';
+  container.prepend(slot);
+  try{
+    const v=await api(`/api/verify?address=${q(addr)}&chain=${chain()}&asset=${q($('#asset').value)}`);
+    const rows=(v.checks||[]).map(c=>`<div><span>${esc(c.name)}</span>
+        <span class="mono">${c.computed.toFixed(8)} vs ${c.chain.toFixed(8)} ${esc(v.symbol)} ${c.ok?'✓':'✗'}</span></div>`).join('');
+    slot.innerHTML=`
+      <span class="vfy vfy-${esc(v.status)}">${VFY_ICON[v.status]||''} ${esc(v.status)}</span>
+      <div class="vfy-note">${esc(v.headline)}</div>
+      ${rows?`<div class="vfy-rows">${rows}</div>`:''}
+      ${(v.notes||[]).slice(0,2).map(n=>`<div class="vfy-note">• ${esc(n)}</div>`).join('')}`;
+  }catch(e){ slot.innerHTML=`<span class="vfy vfy-unavailable">verification unavailable</span>`; }
+}
+function downloadCsv(){
+  const head=['address','hop',`amount_sent_${victimSym}`,'transactions','first_seen_utc','last_seen_utc','label','explorer'];
+  const body=victimRows.map(r=>[r.address,r.hop,r.value,r.txs,dstamp(r.first_seen),dstamp(r.last_seen),
+    (r.label||'').replace(/,/g,';'),r.explorer].join(','));
+  const blob=new Blob([[head.join(','),...body].join('\n')],{type:'text/csv;charset=utf-8'});
+  const u=URL.createObjectURL(blob), l=document.createElement('a');
+  l.href=u; l.download=`sources_${chain()}_${$('#addr').value.trim().slice(0,12)}.csv`;
+  l.click(); URL.revokeObjectURL(u);
+}
+$('#go').onclick=run;
+$('#fit').onclick=()=>network&&fitNice();
+$('#zin').onclick=()=>zoomBy(1.35);
+$('#zout').onclick=()=>zoomBy(1/1.35);
+$('#zroot').onclick=()=>{
+  if(!network||!rootId) return;
+  network.moveTo({position:network.getPositions([rootId])[rootId],
+                  scale:Math.max(network.getScale(),0.8),
+                  animation:{duration:500,easingFunction:'easeInOutQuad'}});
+  setTimeout(showScale,520);
+};
+$('#addr').addEventListener('keydown',e=>{ if(e.key==='Enter') run(); });
+</script>
+</body>
+</html>