WATAM DeFi Intelligence
WATAM Live Pro

Know what happened in your token's pools — within minutes, with the evidence.

Live Pro reads your token's DEX pools from confirmed blocks about every 5 minutes. When something unusual happens, you get a pre-alert with the transactions behind it. Later, each pre-alert is checked against our verified data: confirmed, or not confirmed with the difference.

Request Live Pro for your token Start with a free 7-day evidence report

Live Pro is quoted per token, in writing. It is not part of the self-serve checkout.

  1. On-chainA swap lands in a block

    Live Pro waits for the chain's confirmation depth. It never reads the mempool.

  2. About 1–9 minutesPre-alert

    By email or webhook, with the transaction and a link to the raw swaps.

  3. Usually 12–36 hoursVerified run covers the window

    Our verified pipeline reads the same blocks on its own schedule.

  4. VerdictConfirmed or not confirmed

    Not confirmed comes with the difference, and you get a correction.

Six checks, every 5 minutes, on the last 15 minutes

Each rule is compared with your token's own history, not a fixed market-wide number. The baseline is the median of the verified, covered hours of the last 7 days, scaled to 15 minutes.

Large trade

One swap worth at least your threshold. The minimum is $1,000.We suggest one per token: the top 0.5% of its single trades over the last 7 days (usually $1,000–5,000). High severity at 4× your threshold.

What it is for
Seeing a big buy or sell as it happens, with the trader's address and the router it went through.
Who cares
  • Token teams
  • Funds

Volume burst

Valued volume in 15 minutes is at least max(5× baseline, $5,000), or the swap count is at least max(5× baseline, 30).

What it is for
Knowing early when trading in your pools suddenly runs far above its usual pace.
Who cares
  • Token teams
  • Listing & risk desks
  • Funds

Trading went quiet

Swaps fall to 10% of the baseline or less.Only for tokens whose baseline is at least 20 swaps per 15 minutes.

What it is for
Catching a stalled pool, a routing change or a venue that stopped trading your token.
Who cares
  • Token teams
  • Listing & risk desks

One-sided flow

At least 95% of the token volume is on one side (buys or sells), over at least 10 swaps, with valued volume of at least max(baseline, $2,000).Only if the token's usual hourly one-sidedness is below 80%.

What it is for
Seeing sustained buying or selling pressure in your pools, not just a single trade.
Who cares
  • Token teams
  • Funds
  • Listing & risk desks

One address dominates

One receiving address takes at least 80% of the token volume, over at least 5 swaps, with valued volume of at least max(baseline, $2,000).Only if the token's usual top-recipient share is below 50%. High severity at 95%.

What it is for
Spotting one participant or one automated strategy taking most of the flow in a short window.
Who cares
  • Listing & risk desks
  • Token teams
  • Funds

Pool liquidity drop

Both token balances of a pool are at least 50% below their median of the previous 6 hours (at least 3 readings).Both sides must drop: a swap moves the balances in opposite directions, a withdrawal lowers both. Uniswap v4 and PancakeSwap Infinity pools are not checked.

What it is for
Knowing when liquidity leaves one of your pools, which makes every later trade move the price more.
Who cares
  • Token teams
  • Listing & risk desks
  • Funds

After an alert, the same check for the same pool, address or side waits 60 minutes before it fires again. USD values come from a stablecoin leg counted at $1, or the counter amount times DefiLlama's current price; a swap with neither stays unvalued, never $0.

How to read an alert

A real pre-alert from 1 November 2026, rebuilt here from its stored values. Read it top to bottom.

Live Pro, high pre-alert

One address dominates volume

LINK (0x5149…86ca) on Ethereum

Window (UTC)
1 Nov 2026, 06:43 → 06:58
Blocks
26,318,246 – 26,318,275
Detected
07:01 UTC

The 15-minute window, swap by swap

134 swaps of LINK in the window; 62 of them paid this address.

Who is this address

0x51c7…2a7f, a contract

Trades like: automated trader (likely market making or arbitrage)high confidence

About 26,000 swaps a day, on 5 networks and 79 pools; bought and sold the same token on 100% of its active days.

Unusual for this address on LINK: 6.2× its usual pace, buyingWindow 248 swaps an hour, usual 40 an hour. It bought 100% of the amount (usually 97%).

What happened next

Verification

Verification pendinglater becomesConfirmedorNot confirmed + difference
  1. Measured against two lines

    95.3% of LINK's volume in the window went to one receiving address. The check fires at 80%. For LINK, the usual top-recipient share is 40.5%. The gap is the reading: +54.8 points above usual.

  2. The window itself

    On the alert page, every swap of those 15 minutes is plotted by time and size, and the ones this check counted are marked: here 62 of 134. You see the shape, not only the number.

  3. Who the address is, in facts

    On-chain facts and a behaviour label with its reasons: here a contract that trades on 5 networks like an automated trader. Then the question that matters: is this unusual for that address? Here, yes: 6.2× its usual pace for LINK, one-sided buying.

  4. What happened next

    Volume and the main pool price in the hour and the day after, against the token's usual level, plus 24 hours of charts around the window.

  5. The verdict comes later

    When a verified run covers the window, the pre-alert is confirmed only if the verified swaps equal the live ones. Otherwise it is marked not confirmed with the difference.

What this alert does not mean

  • It does not say anyone did something wrong. It is a statistical observation, not a claim of intent or manipulation.
  • It does not identify a person. The receiving address is often a router, an aggregator or a market maker; the behaviour label is a rule over counts, not an identification.
  • It covers only the watched pools, not LINK's whole market.
  • It is not a signal to buy or sell.

The same alert, on screen

From the alert email to the verified check: the gauge, the window, the address card, what happened next, every swap with its explorer link, and the questions you can ask about it, on desktop, tablet and phone.

Everything shown is the real product and real alerts from 1 November 2026.

WATAM Live Pro demo: 95.3% of LINK's volume went to one address in 15 minutes, shown on the live pre-alert page
3 min 25 s, with subtitles in nine languages. The video loads from YouTube only when you press play; without JavaScript the still links to the video on YouTube.

What you get with every alert

One page per pre-alert, linked from every message. It shows the evidence, not just the number.

On the alert page

  • Gauge: measured value against the threshold and your token's usual level.
  • Window chart: every swap of the 15 minutes by time and size, with the counted ones marked.
  • 24 hours around the alert: hourly volume against the usual level and the main pool's price, 12 hours either side.
  • Who is this address: contract or wallet, activity across networks and pools, a behaviour label with its reasons, and "Unusual for this address?".
  • What happened next: volume and pool price in the hour and the day after.
  • Verification badge: pending, confirmed, not confirmed (with the difference) or not verifiable after 7 days.
  • Raw swaps: each with its explorer link, the address the pool paid and the account that actually sent the transaction (tx.from).

Ask about this alert

  • Four preset questions in English and Turkish, answered straight from the alert's stored facts, with no AI model involved: explain it, router or wallet, has it happened before, what it does not mean.
  • Your own questions can be answered by your organization's own AI provider: Anthropic, OpenAI, or any OpenAI-compatible endpoint, including a model you host yourself behind a public HTTPS endpoint. You pay your provider directly.
  • Every number is checked. Each number in an answer must match a fact from the alert, and the answer lists the facts it uses. If a model answer fails that check, you get the answer built from the facts instead.
  • No advice. Questions asking for advice, a price view or who is behind an address are declined.

Delivery and history

  • Email or webhook, with the transaction link and a link to the raw swaps. A correction is sent if a pre-alert is not confirmed.
  • Alerts list with filters for period, check, status and token.
  • CSV export of the same list: values, thresholds, baselines, blocks, pools, transaction hashes, explorer links and, for large trades, the trader.
  • Watched pools for each token, with how far they are read and since when without a gap.
  • Reliability report: we measure detection and delivery latency (median and p95, per network), verdicts and the correction rate, and delivery coverage. Ask us for the current numbers.

How fast, and on which networks

Live Pro reads confirmed blocks only, so each network's confirmation depth is part of the time. It is best effort on free public RPC, with no SLA.

NetworkConfirmation depthTrade to pre-alert email
Base, OP Mainnet30 blocks (about 60 s)about 2–7 min
Arbitrum One120 blocks (about 30 s)about 1–6 min
BNB Smart Chain30 blocks (about 15 s)about 1–6 min
Ethereum12 blocks (about 2.5 min)about 3–9 min

Expected range with a read every 5 minutes. Live Pro covers EVM tokens in our catalog; Solana and TON tokens get the verified reports, not pre-alerts.

  • A statistical observationNot a claim of intent or manipulation. Addresses are never labelled by intent.
  • IndependentWATAM is not affiliated with the tokens, exchanges or pools it watches.
  • Not investment adviceNo signals, no price views, no recommendations.
  • Only what the chain showsNo third-party claims. Every number links back to its transactions.

Questions

What counts as confirmed?

A pre-alert is confirmed only when the verified swaps it rests on are the same as the live ones: the same transactions, the same log positions and the same raw amounts. Any difference makes it not confirmed, the difference is recorded, and you get a correction. A liquidity drop is confirmed when a second RPC endpoint returns the same two balances at the same block. If no verified data covers the window within 7 days, it is marked not verifiable.

How fast is a pre-alert, and how fast is the verdict?

A pre-alert usually arrives a few minutes after the trade: about 1–9 minutes depending on the network (see the table above). In our first measured tests, the trade-to-email time was 5.4 minutes on Base and 8.6 minutes on BNB Smart Chain. The verdict comes when our verified run covers the window, usually 12–36 hours later.

Which networks and tokens?

EVM tokens in our catalog, on networks such as Ethereum, Arbitrum One, OP Mainnet, Base and BNB Smart Chain. Live Pro watches the token's verified pools; you can see the list of pools for each watched token in the app. Solana and TON tokens get verified reports but no pre-alerts.

What about false positives and automated traders?

Every pre-alert is checked against verified data, and we track the share that is not confirmed. Thresholds are relative to your token's own baseline, and checks like "one address dominates" stay silent for tokens where that pattern is normal. Many alerts involve routers, aggregators or market-making bots; the address card says so, with the facts behind the label, and shows whether the activity is unusual for that address. A busy bot doing what it always does is still worth knowing about, but it is not news.

Do I need an AI subscription to ask questions?

No. The four preset questions, in English and Turkish, are answered directly from the alert's facts with no AI model. For your own questions, your organization can connect its own provider (Anthropic, OpenAI or an OpenAI-compatible endpoint, including a self-hosted model). Answers must match the alert's facts, and no answer gives advice.

What happens to our data?

Live Pro uses public on-chain data only. Your alerts are visible only to your organization. Pre-alerts are kept; the raw live swaps behind them are kept for 35 days. Every CSV export is written to an audit log. If you connect your own AI provider, an organization administrator must first accept that the alert's facts are sent to that provider under your own account.

Request Live Pro

Tell us the token and network. We reply within one business day with the pools we would watch and a written quote.

Prefer email? Write to admin@wearetheartmakers.com. Live Pro is quoted per token, in writing.

See Live Pro on your token

Tell us the token and network. We reply with the pools we would watch and a written quote.