What happens inside the QorTrace scanner: address walk, exposure tiering, score formula, rendering, optional Atlas pin.
1. Visit qortrace.com/scan (no login required)
Free-tier limits:
- 1 scan / 30 seconds per IP (rate cap).
- 1 scan / day per email (anonymous; tighter for repeated abuse).
- Paid tiers lift the per-IP cap and remove the daily cap.
2. Pick chain, paste address
Currently supported: Bitcoin, Ethereum, Solana, Monad, Sui, Aptos, Base.
Cosmos, Polkadot, and a privacy-coin family are roadmapped.
3. We walk the address history
For every transaction the address has sent (or signed) we record:
- Whether the public key was broadcast (the moment a signature hits the chain, the pubkey is forever-recorded — that's the HNDL surface).
- The held value at the time of broadcast (in USD-equivalent at the price oracle snapshot).
- The age of the exposure (older = more HNDL-relevant).
4. Each address gets an exposure tier
| Tier | Meaning |
|---|---|
| Critical | Exposed pubkey + non-zero held value. Migrate now. |
| High | Exposed pubkey + recommend sweep to a quasi-resistant address. |
| Medium | Multi-sig with ≥ 1 exposed member. Sweep partially compromised. |
| Low | Pubkey never broadcast (e.g. unrevealed P2WPKH). Quantum-safe until first spend. |
5. The QorTrace Score
Score = 100 − (max_tier_penalty + history_weighted_exposure_penalty),
clamped 0..100.
The full formula + per-tier weights live at
/docs/methodology/how-the-score-is-computed.
Lower score = more exposure. 90+ is what most enterprises target post-migration.
6. Render
The report renders inline with:
- Tier breakdown.
- Held-value-at-risk in USD.
- Per-tier "what to do next" guidance.
- A shareable URL for the result.
7. Optional — email me the PDF
Requires a free QorTrace account (also unlocks Qelli). The PDF carries the methodology version + a SHA-256 so it's audit-trail-friendly.
8. Optional — pin to Atlas
If you have any paid tier, the "Pin to Atlas" button adds the address to your continuous-monitoring portfolio. We re-score weekly (Team) or daily (Enterprise) and alert on tier downgrades.
What we DON'T do during a scan
- We do not transact on your behalf — read-only RPC only.
- We do not require seed phrases or private keys, ever. Anyone asking for those isn't us.
- We do not store the scanned address against your account unless you explicitly pin it to Atlas.