background

Ensuring a Secure
and Seamless Web3 World

Full-Stack Blockchain Security Service Provider

Uniswap Foundation
Puffer
Compound Finance
Pancakeswap
Radiant
Mantle
Merlin
FBTC
Prisma
Magpie
Polygon ZKEVM
Telcoin
Cobo
Bybit
crypto.com
EOS Network Foundation
Polyhedra Network
1intro
Filecoin
Kava
NEAR Foundation
EVMOS
Stader
ApeX
Amber
Tectonic
LiNEAR
Burrow
Matrixport
Alpaca Finance
VVS Finance
Meta Pool
Aurora
Izumi
Lista DAO
Mage Finance
Pre-launch Security

Security Code Auditing Service

  • Comprehensive audits for smart contracts and EVM chains
  • Thorough audits covering technical, business, and financial aspects
  • Professional reports with actionable solutions for every issue identified in our audits
  • Superior audit quality drives high client satisfaction and helps our clients win their users' trust
See Representative Audit Reports
Post-Launch Security
Phalcon

Phalcon

A Platform to Monitor and Block Hacks

Gain Early Access to Precise Attack Intelligence

Early Detection:

Scan transactions early at the mempool stage to detect hacks before they happen.

Precise Detection:

Scrutinize over 200 typical hacking characteristics to achieve the highest precision. Discover Our Research

Comprehensive Risk Coverage:

The system not only detects attacks but also identifies operational, interaction, and financial risks, etc., addressing the vast majority of threats that protocols may encounter.

Early Detection

Automatically Block Hacks to Prevent Any Loss

Automated Actions:

Automatically initiate response actions to counteract hacks.

Gas-bidding Strategy:

Place our transaction on the chain ahead of the attack's to block the hack before it can be executed.

Enhanced Authority Control:

Provide diverse triggering modes supporting both EOA and multi-sig wallets, offering enhanced flexibility and strict protocol authority controls.

Simplified Configuration for Effective Risk Management

Simplified Configuration:

Easily import addresses via protocol or CSV, and the system will automatically generate monitors tailored to the associated risks of your addresses.

Flexible Configuration:

You can create monitors using templates. Additionally, you can customize rules, combine different rule types and adjust parameters for complex scenarios.

MetaSleuth

Crypto Tracking and Investigation Platform

Gain immediate support with intelligent analysis, cross-chain investigation, and real-time monitoring

background

Unveil hacker identities by matching transactions in anonymous cryptocurrency exchanges and mixers

background

Ideal tools for DYOR, stolen fund tracking, compliance, and forensic analysis

background

MetaSuites

Builders' Swiss Army Knife

A powerful browser extension seaminglessly integrated efficient and security features into 10+ major blockchain explorers like Etherscan. Streamlining the workflow between popular tools.

The only security partner you need!

Security Code Auditing | Phalcon | MetaSleuth | MetaSuites and more
Testimonials and Endorsements

The Forta Community uses Phalcon and the broad range of Blocksec's investigative tooling (MetaSuites/ MetaSleuth) every day. BlockSec is a leader in this space and a crucial Forta partner securing the broader web3 ecosystem.

avatar
Christian Seifert
Research, Forta Foundation

BlockSec is a critical partner for Cobo. Their Phalcon platform is groundbreaking and marks a huge step forward in DeFi security. We're enthusiastic about partnering with such a dedicated team to develop robust security solutions for investors.

avatar
Discus Fish
CEO, Cobo

From a long-term security professional’s perspective, the Phalcon platform developed by BlockSec empowers us to respond to contingency security incidents with ease. The BlockSec team truly understands the real-world needs of us security engineers working on the frontlines.

avatar
Chiachih Wu
Research, Amber Group

We appreciate our partnership with BlockSec, enhancing Web3 security together. Their commitment to innovation has made a significant impact. As users of BlockSec's Phalcon - we can truly appreciate how these collaborations can push Web3 security forward together, as a community.

avatar
Or Dadosh
CEO, Ironblocks

Integrating BlockSec Phalcon with the Merlin chain has been a defining moment for us. As Merlin continues to grow and prosper, BlockSec Phalcon has been instrumental in creating a strong security shield for it. For anyone looking to secure their protocols and assets, Phalcon is unrivaled — I highly recommend it.

avatar
Jeff
Core Contributor, Merlin

BlockSec has shown remarkable professionalism in smart contract audits. Their expertise in blockchain and smart contract technology, along with a meticulous approach, ensures thorough identification and resolution of security risks. We highly commend their professionalism and anticipate continued collaboration.

avatar
Frederick
Security Lead, Matrixport

It's been a fantastic experience collaborating with BlockSec. You have shown your professionalism in the audit field, especially on the smart contract side.

avatar
Marco Sun
CEO, Ref Labs

With a keen eye for detail, the team identify potential vulnerabilities and provide robust solutions, ensuring our contracts are secure and optimized. For anyone in need of expert smart contract auditing, I cannot recommend BlockSec highly enough.

avatar
Rivers Yang
Core Developer, Octopus Network

The BlockSec team is very knowledgeable, punctual, responsive, and diligent during the entire audit process. We highly recommend BlockSec for any smart contract protocols who are seeking great value for money in the audit field.

avatar
Gillian Wu
Co-Founder, Neptune Mutual

I want to extend my sincerest appreciation to BlockSec for conducting a thorough audit of the Stratos project. Their meticulous approach and insightful feedback have significantly contributed to enhancing our project's security and reliability.

avatar
Bin Zhu
CEO, Stratos Network

It's also worthwhile to look into trustworthy auditing companies like @BlockSecTeam. Such audit reports are a gold mine of knowledge ⛏️🕯️

avatar
Adrian ⛩️ Hetman 🐺⚔️
@adrianhetman

I really like how MetaSleuth and Phalcon make it easier to investigate and understand on-chain attacks and hacks. The products work in a simple way but allow you to dig deep. Very happy with both.

avatar
Pablo Sabbatella
Head of Security Research, Blockfence

Committed to NFT-Fi security, we're partnering with the BlockSec team, security experts who helped save 2,909 ETH.

avatar
ParaSpace
@ParaSpace_NFT

We have successfully recovered the 2.4 million USDC from the attacked contract. We would like to express our gratitude to the BlockSec team for their time and effort in helping us achieve a successful outcome.

avatar
Platypus
@Platypusdefi

With the help of BlockSec, about $246K attacked by the 4th attacker has been fully refunded.

avatar
Transit Swap
@TransitFinance

Thanks to the BlockSec team, who has intercepted 100% of the fund from the attacker that once took the unclaimed rewards from Trade Mining pool on Oct 1st.

avatar
BabySwap
@babyswap_bsc

The attack has been mitigated and all affected metapools have been paused. User funds are safe. Special thx to the BlockSec team for securing the 3.8m in vulnerable funds.

avatar
Saddle
@saddlefinance

Frequently Asked Questions

Why is there a need for real-time monitoring with Phalcon even after a code audit has been completed?

icon
Firstly, code audits typically focus on issues of the code within the protocol itself, but the composability of DeFi introduces dependencies on external protocols, which can lead to security issues that are difficult to detect during audits and can result in protocol attacks. Secondly, minor code upgrades and configuration changes by project teams can trigger new security risks. Therefore, real-time monitoring after a project goes live is very important to effectively prevent security risks during its operation.

What sets Phalcon apart from other monitoring services in the market?

icon
  • Speed & Accuracy: Phalcon stands out with swift and precise monitoring, extending beyond on-chain transaction detection to include mempool transactions, contracts, and proposals.
  • Automated Attack Blocking: The platform's automated response system activates immediately during attacks, eliminating the need for manual intervention and significantly reducing potential financial losses.
  • User-Friendly Platform: Phalcon provides an easy-to-use, no-code interface on its SaaS platform, enabling clients to effortlessly set up 24/7 security.
  • Proven Track Record: Prior to its release, Phalcon's technology has been tested in over 20 white-hat interventions, successfully recovering more than $15 million for various projects, demonstrating its reliability and effectiveness.

Can Phalcon conduct automated response actions for protocols managed by multi-sig wallets?

icon
Absolutely. Phalcon supports automated responses for multi-signature managed protocols. You're welcome to sign up and try it out, or book a demo for further details.

Will Phalcon detect attacks originating from private transactions, such as those sent via Flashbot?

icon
  • Firstly, only Ethereum includes privacy transaction services, so attack transactions on other chains can be detected in advance. Secondly, due to anonymity considerations, attackers prefer broadcasting over sending privacy transactions. According to our statistics, only about 3% of losses are through privacy transactions. Last but not least, Phalcon has the ability to early detect attack contracts, which allows it to sense risks in advance and respond automatically.
  • Additionally, even if the first attack transaction is not detected before it is added to the blockchain due to privacy transactions, Phalcon can still take immediate action after the transaction is added to the blockchain, thereby preventing subsequent losses.

With no mempool on Layer 2, how does Phalcon block attacks?

icon
While it's not possible to reverse the initial attack transaction, over 95% of attacks consist of multiple transactions. Phalcon can detect the first transaction and swiftly respond to prevent subsequent ones, effectively preventing further losses.

As a client of Blocksec code audit, am I eligible for a discount on Phalcon?

icon
Of course! We appreciate your trust in our services. Please contact us to discuss your eligibility for special discounts.

I run a blockchain and want Phalcon to monitor it for security. How can we get support fast?

icon
You're making a wise decision! Enhancing the security of your chain and its ecosystem can bolster the confidence of LPs and investors, thereby increasing the total value locked (TVL) within your ecosystem. To expedite support, please book a call with us for a rapid assessment.

How do I choose the right Blocksec tool—MetaSuites, MetaSleuth, or Phalcon Explorer—as an on-chain user?

icon
  • MetaSuites is a browser extension designed to enhance on-chain user experience and analytical efficiency. It modifies the UI of blockchain explorers like Etherscan, adding over 20 quick links to common products (e.g., debank, daub, evmstorage), provides access to over 300 million exclusive address tags from BlockSec, and supports transaction explanations with GPT, making it a life-saver for on-chain navigation.
  • MetaSleuth is ideal for analyzing the flow of funds between addresses. It meets the needs of institutional clients for criminal investigation and compliance, and for regular users, it offers insights into the wallets of hackers, whales, and celebrities, revealing hidden patterns and secrets.
  • Phalcon Explorer is a transaction analysis tool tailored for security researchers and developers. Unlike traditional explorers such as Etherscan, Phalcon Explorer reveals more transaction details, such as fund flows, balance changes and traces, and offers simulation and debugging features for in-depth analysis.