Large XRP transfers and any activity by accounts we recognize. The watchlist is hand-curated and public — see about for sourcing.
How this works: a long-running process subscribes to every validated XRPL transaction and records two things — XRP transfers above the floor (set by the size pill), and any transaction that touches an address on our public watchlist.
The size pills above filter large XRP transfers by magnitude — whale (≥100K XRP) is the definition used across the site; blue whale (≥1M) narrows to the rare ones; all (≥50K) widens the lens. Tagged and watchlisted activity is held to the same size cutoff as everything else — only new-trustline events bypass it, because the who makes those the signal.
The watchlist combines 90 hand-curated first-party entries (sourced from disclosures like Ripple's xrp-ledger.toml) with a broader reference layer drawn from public lists (XRPSCAN well-known names, derived AMM pool and MPT issuer labels). Curated labels take priority; reference labels fill the rest. Each label is shown with its source so you can tell which is which.
All addresses shown are public on the XRP Ledger by design — they appear in every block explorer (XRPSCAN, Bithomp). No private information is surfaced.