Blockchain Risk Detection and Instant Alerting - n8n Workflow

Cryptocurrency Analysts & Researchers: Need real-time visibility into high-value block activity across multiple chains.
Security Teams: Require instant alerts for potentially suspicious or large volume transactions.
DevOps/Data Engineers: Looking for advanced n8n templates that combine webhooks, AI, and conditional alerting.
n8n Automation Specialists: Users seeking a technical example of how to integrate third-party AI services like ScrapeGraphAI within an n8n workflow.

This robust n8n workflow provides critical infrastructure for real-time blockchain monitoring. It starts with an external event captured by an n8n trigger, processes the raw data, and then leverages ScrapeGraphAI to perform deep, AI-powered extraction of transaction details from blockchain explorers like Etherscan or BscScan.

Unlike simple monitoring tools, this n8n template applies custom risk logic, scoring blocks based on high-value transfers (e.g., transactions over $10,000) and failure rates. Only events categorized as medium or high risk proceed to the final step, ensuring that your team only receives actionable Slack notifications. This efficient n8n workflow minimizes noise while maximizing responsiveness to critical market or network events.

This automation initiates with the 🔗 Blockchain Webhook n8n trigger, ready to receive block data from external sources like blockchain nodes or third-party APIs.

1. Normalization: The incoming data is passed to the 🔄 Normalize Data code n8n node. This custom code ensures compatibility across chains (Ethereum, Bitcoin, BSC, Polygon) and dynamically generates the correct explorer URL needed for scraping.


2. AI Data Extraction: The core extraction happens in the 🤖 ScrapeGraphAI n8n node. It uses the generated explorer URL and an explicit user prompt to accurately scrape and structure detailed transaction data (hashes, values, fees, status) into a clean JSON format.


3. Risk Calculation: The ⚡ Risk Analyzer code n8n node processes the extracted data. It calculates key metrics like total volume and high-value transaction counts, assigning a numeric riskscore and a text risklevel (low, medium, high).


4. Filtering: The 🚨 Risk Filter n8n node (an If node) acts as a flow control mechanism. It checks if the calculated risk_level is not 'low'. If the block is medium or high risk, the n8n workflow continues on the true path.


5. Instant Alerting: Finally, the filtered data is sent to the 📱 Slack Alert n8n node, which formats and delivers a comprehensive, real-time alert to the designated Slack channel, including the risk score and summary statistics. This complete n8n workflow provides end-to-end monitoring.

To deploy and run this specialized n8n workflow, follow these steps:

1. Import: Copy the provided JSON data and paste it directly into your n8n instance via the 'New' menu -> 'Import from JSON'.


2. Webhook Setup: Activate the 🔗 Blockchain Webhook n8n trigger node. Copy the generated Webhook URL and configure your external blockchain data source (e.g., node, API) to POST data to this endpoint.


3. ScrapeGraphAI Credentials: Edit the 🤖 ScrapeGraphAI n8n node and set up your ScrapeGraphAI API credential.


4. Slack Setup: Configure the 📱 Slack Alert n8n node. You will need to set up a Slack credential (OAuth or Webhook) associated with the channel where alerts should be posted.


5. Activation: Ensure all credentials are set up correctly, then set the n8n workflow to 'Active' to start monitoring.

🔗 Blockchain Webhook (n8n trigger):
Function: Serves as the real-time entry point for the n8n workflow, receiving block data payloads via HTTP POST requests.
Key Configuration: Configured with a unique path (eed656b3-6a7f-4460-92e0-802bca2522d0) for the n8n trigger endpoint.
🔄 Normalize Data (Code n8n node):
Function: Standardizes disparate block data formats into a common schema and dynamically calculates the correct block explorer URL based on the detected blockchain (ethereum, bitcoin, bsc, polygon).
🤖 ScrapeGraphAI (ScrapeGraphAI n8n node):
Function: Performs AI-driven web scraping on the block explorer page URL passed from the previous n8n node, extracting highly specific, structured transaction details as defined in the user prompt.
Key Configuration: Uses an expression ={{ $json.explorerurl }} to dynamically target the website to be scraped.
⚡ Risk Analyzer (Code n8n node):
Function: Executes custom logic to calculate risk based on transaction volume and count. Assigns a risk score (0-100) and sets the risklevel to 'low', 'medium', or 'high'.
🚨 Risk Filter (If n8n node):
Function: A crucial flow control n8n node that only allows execution to continue if the risk level is not equal to 'low', effectively filtering out non-critical blocks.
📱 Slack Alert (Slack n8n node):
Function: Sends a structured alert message to a designated Slack channel for all blocks that meet the medium or high-risk criteria defined in this n8n workflow.