dev environmentdev.heystifl.xyz · same backend as prod
stifl
tools
Tracked Users
Keyword Monitor
Community Watch
Join Watch
Add a watch
Monitors a community and notifies when watched handles join.
Follower Tracker
Tracks who follows and unfollows your X accounts. First check seeds a baseline — alerts start from the next tick.
Track a handle
Add your own X account (or any public account) to watch for follow / unfollow activity.
Mention Tracker
Watch specific X accounts' tweets and replies for your keywords or any contract address. Only you (and anyone who subscribes) get alerted — not the whole team. Adding a handle you already track merges into its bubble. Double-click a word or the "any CA" chip to remove it; when nothing's left to match, the handle drops off. First scan seeds a baseline; alerts start from the next scan. CA hits include GMGN · Axiom · BullX · pump.fun links.
New mention watch
Enter X handles to scan, plus the words to match. Toggle "all CAs" to catch any Solana/EVM contract address.
X Trends
Tracked Keywords
Word Rankings
Trending Tokens (1h)
Recent CA Detections
AI Suggestions
TikTok Trends
Wallet Drain
Changes applying — picked up by the drainer within ~2 s. No restart needed.
Global setting changed. Restart the service for it to take effect (wallet edits apply automatically).
Your destination wallet
Every SOL drained from your wallets below is swept to this address. Required before the drainer will monitor your wallets.
To enable Defensive Lock, paste the destination's private key instead of its address — it then doubles as the gas wallet that pays lock rent + sweep fees (fund it with ~0.05 SOL). A plain address still works for the classic drainer, but locking will be unavailable.
Your source wallets
0 configured
⚠ Private keys you add are stored on this server (mode 0600, root-only). The transport is HTTPS with HSTS, so keys submitted from the browser stay encrypted in flight — but the at-rest storage means root on the box equals full key access.
+ Add wallet
Events
Defensive Wallet Lock
anti-takeover primitive
ⓘ Inverse of the recovery flow. Pre-emptively convert a wallet you own into a System Program nonce account whose withdrawal authority is your cold/hardware wallet. After lock: the wallet receives SOL normally, but no one (not even the wallet's own private key) can drain it — only your authority key can, signed externally on a HW wallet. Same primitive the J5h attacker used, applied to your own future hot wallets so they're immune to the same attack.
Irreversible in the sense that the wallet's owner-program semantics change permanently to nonce-account state. To "unlock," sweep the full balance via the authority key (closes the nonce; account can be re-created on fresh deposit).
+ Register wallet to lock
⚠ The authority pubkey is your cold/hardware wallet's PUBLIC ADDRESS only. Never paste the authority's private key. The server will reject a 64-byte private key input. The authority key must stay on your HW wallet — that's the entire point of this feature.
ℹ Keep a small SOL balance (a few thousand lamports) on the authority wallet — it pays the fee when you later sign a withdrawal. A completely empty cold wallet can't sign the withdraw tx.
All users admin only
Every private-key reveal below is recorded in the audit log (wallet_drain_admin_key_reveal).
Global settings admin only
—
Pump Fee Tracker
Fires a Telegram alert every time a creator claims social fees on a pump.fun coin (via the pfee program). Only claims above the mcap floor in Admin config get through; everything else is stored in the event log but silent.
My alert preferences
Personal filters applied on top of the global gate. All three stack — a claim must pass all of them to alert.
No personal filters active — receiving every alert that passes the global gate.
Skip alerts on coins below this market cap. Stacks on top of the global floor.
0 / 100
Blocks all coins with these tickers (case-insensitive, leading $ optional). Comma or newline separated. Note: ticker is not unique — `$FROG` blocks every coin using that symbol.
Skip alerts on coins younger than this. Age = earliest on-chain signature on the mint.
Top performers from the last 24h, ranked by mcap % change since the bot's alert. Only includes coins your filters above let through.
Admin config admin only
—
———
On the first observed claim per creator PDA, walks ~100 prior signatures to build the set of mints ever claimed on that PDA, then suppresses alerts for any mint already in the set. Multi-coin creators still get one alert per coin (each coin's first claim).
Anchor discriminators = first 8 bytes of sha256("global:collect_creator_fee"). Leave empty to use the "program-involved + signer received SOL" heuristic alone.
Daily digest
post-alert top performers, sent once a day
Quality floors all default to 0 (every alert eligible). Raise any to filter low-mcap noise. Test the rendered output before users see it via the dry-run button.
Event log
click to expand
X Realtime
disconnected
Manage0 handles
loading…
no handles match the filter
Connecting to live feed…
User Management
Add user
Creates a standard user. Toggle permissions below.
Capacity
Service accounts & rate-limit usage
Audit Log
SOL Movement
delivery
Your Telegram alerts
Off by default — seeing this tab never sends you messages. Which
movements count is set once per wallet in the watchlist below; this switch
only decides whether they reach you.