READ THIS FIRST: HOW TO READ TRACKBTC ALERTS TrackBTC surfaces high-value Bitcoin behavior and evidence by recent movement, retained value, balances, and consolidation behavior. A public alert means worth inspecting. It does not prove identity, ownership, intent, or off-chain control. If you upload this report to an analyst tool or LLM, include this file first. It defines the behavior terms and prevents common misreads. CORE RULES 1. Alerts are daily. The public BTC Alerts feed is scoped to the current 1-day block range. Treat an alert as a daily triage item, not an all-time global ranking. 2. Wallet group does not always mean actor. TrackBTC groups related addresses when the chain evidence supports it. A group can still be a wallet surface, exchange system, custody flow, or operational pattern rather than one person. 3. Evidence is the proof path. The public alert is the triage layer. Paid reports expand the alert into addresses, transactions, values, selected evidence, and plain-language context. 4. Moved BTC is not the same as retained BTC. High movement can be flow-through activity. High retained value means more of the observed BTC remained visible at the report block. 5. Balances are block-specific. Balances are measured at the report block. A live explorer may differ later because the wallet kept moving. 6. Alert types are behavior names, not accusations. Movement, Retention, Storage, and Consolidation cards describe observable chain behavior. They do not prove motive. 7. Follow the report height. Cross-check claims against the report block first, then compare live explorer state if you need current status. ALERT FAMILIES Movement Alerts Bitcoin moved quickly through these wallet groups during the daily alert period. These addresses are active flow points, not necessarily final holders. Retention Alerts Bitcoin flowed in and remained visible at the report block. High retained value means the address still holds much of what arrived. Storage Alerts Large balances showed little outgoing movement during the daily alert period. They are storage-like addresses where the bitcoin is mostly sitting, not circulating. Consolidation Alerts Scattered bitcoin was pulled together. High values mean many inputs or fragments were gathered into fewer wallet surfaces. HOW TO INSPECT A ROW 1. Start with the daily period. The public site shows the current 1-day alert period. Longer comparisons belong in paid reports. 2. Read the alert type first. The alert type tells you whether the card is about fast flow, retained BTC, storage-like balance, or consolidation. 3. Use BTC scale and footprint together. Rounded BTC value shows scale. The wallet-group footprint shows whether the behavior is concentrated or spread across many addresses. 4. Treat the public card as triage. Paid reports expand the public card into address-level evidence, transactions, values, and selected context. 5. Compare at the report block. If explorer balances or activity differ, check whether the difference happened after the report height. COMMON MISREADS - A Movement Alert does not mean the same owner bought or sold the bitcoin; it means fast movement through observed wallet surfaces. - A Retention Alert does not prove final ownership; it means value was retained at the report block. - A Storage Alert does not prove cold storage or an institution; it means the chain pattern is storage-like in the daily alert period. - A Consolidation Alert does not prove one owner controlled every input; it means scattered value was pulled together on-chain. - A live explorer mismatch is not automatically a report error. Check the report block first. MAIN TERMS Daily Alert Period The current 1-day block range used for the public alerts. Wallet Group The public wallet group being ranked. Treat it as chain evidence, not confirmed real-world identity. Moved BTC BTC observed moving through the wallet group during the daily alert period. Retained BTC BTC still held by the wallet group at the report block. Balance At Block The balance at the exact report height. Input Groups The number of input-side wallet groups or input fragments involved in a consolidation behavior. Address Evidence Drilldown evidence for public addresses tied to ranked activity. Transaction Evidence Drilldown evidence for highlighted transactions, values, participants, and behavior context. Report Height The block height where the behavior snapshot was generated. CROSS-CHECK WITH MEMPOOL Mempool is best for raw tx anatomy, timestamps, current balance checks, and confirming whether activity happened before or after the report height. TrackBTC is best for daily behavior alerts, retained-value context, consolidation context, and wallet-group evidence. Programmatic checks: - /api/tx/: inputs, outputs, transaction fee, block height, timestamp. - /api/address/: current chain stats and live balance context. - /api/block-height/: block hash for snapshot anchoring. For current explorer checks, prefer mempool over label or balance aggregator sites. For TrackBTC claims, compare against the report block height first. ROUGH SCALE GUIDE These are reading aids, not thresholds. - Block time is about 10 minutes. A 144-block window is about one day; 1,008 blocks is about one week; 4,320 blocks is about one month. - Transaction scale below 100 BTC can be routine, 100-1,000 BTC is notable, 1K-10K BTC is large, and above 10K BTC is usually custody, treasury, or exchange-scale movement. - Retained BTC matters most when it remains visible at the report block; moved BTC matters most when the evidence shows fast or repeated flow. PUBLIC HANDLES Evidence pages expose public addresses and txids where the report links to drilldown evidence. If a list view uses compact display for space, open the evidence page before drawing conclusions. BOTTOM LINE TrackBTC is a triage tool. It surfaces where high-value Bitcoin movement or storage behavior deserves attention. The right next step is inspection, not assumption.