Back to Blog

BlockSec Phalcon Secures Solana Ecosystem with Enhanced Real-Time Protection

Phalcon Security
February 26, 2025
4 min read
Key Insights

Since early 2024, Solana has rapidly become a preferred blockchain due to its high throughput, smooth trading experience, and low fees. This has led to a significant increase in on-chain activity and explosive growth of decentralized applications (dApps). According to DefiLlama data, Solana's Total Value Locked (TVL) has now surpassed $7.3 billion, firmly holding the second position in public blockchain rankings. This growth underscores the urgent need for robust Solana security solutions.

To meet the evolving Solana security needs of developers and users, BlockSec Phalcon, our flagship security platform, has now fully integrated support for Solana! This expansion brings BlockSec's advanced real-time monitoring and automated blocking capabilities to the vibrant Solana ecosystem.

Real-Time Solana Security Monitoring with BlockSec Phalcon

Starting today, projects and liquidity providers on Solana can leverage Phalcon's comprehensive monitoring capabilities to track on-chain activities associated with their protocols. BlockSec Phalcon provides instant alerts for critical events, enabling rapid response to mitigate potential losses.

Key monitoring features for Solana dApps include:

  • Operational Risk Alerts: Receive immediate notifications for program upgrades, authority changes, and other critical operational events that could indicate a security vulnerability or unauthorized access.
  • Security Risk Alerts: Get real-time alerts on suspicious fluctuations in token amounts, abnormal price movements, or unusual transaction patterns that might signal an ongoing attack or exploit.
  • Attack Transaction Monitoring: Phalcon's advanced engine continuously monitors for known attack patterns and emerging threats, providing early warnings of malicious activity.
  • Flexible Monitoring: Customize monitoring rules for key variables, sensitive events, and specific function invocations relevant to your Solana smart contracts.
  • Expert Custom Solutions: Our security experts can design bespoke monitoring solutions tailored to the unique architecture and risk profile of your Solana project.

Risk Scenarios Covered by BlockSec Phalcon for Solana Security Image: BlockSec Phalcon's comprehensive coverage of risk scenarios, now extended to Solana.

Over two years of internal operation, BlockSec has intercepted over 20 attacks through white-hat rescues, preventing more than $20 million in potential losses. Backtesting data from 2024 shows that Phalcon detected over 99.99% of attacks with an exceptionally low false positive rate below 0.0001%. This proven track record highlights Phalcon's effectiveness in providing robust blockchain security.

Currently, Phalcon fully supports multiple mainstream blockchain networks, including Ethereum (ETH), BNB Smart Chain (BSC), Solana, Arbitrum, Avalanche, Optimism, Manta, Mantle, Merlin, Base, Sei, Bitlayer, Core, and BoB. With 24/7 real-time monitoring, a detection engine defined by over 200 attack characteristics, and millisecond-level automatic blocking technology, Phalcon empowers project teams to shift from a "passive response 🔴" to a "proactive prevention 🟢" approach against various security risks.

Get Started with Phalcon Security

Detect every threat, alert what matters, and block attacks.

Try now for free

Transaction Visualization and Forensics with Phalcon Explorer

BlockSec Phalcon's supporting tool, Phalcon Explorer, now extends its powerful transaction visualization and forensics capabilities to Solana. This is a game-changer for developers and auditors seeking to understand complex Solana transactions.

With Phalcon Explorer, users can:

  • Visualize Transaction Details: Gain a clear and comprehensive view of fund flows, balance changes, and function calls within Solana transactions.
  • Clarify Account Relationships: Easily understand the intricate connections between accounts and their token holdings on the Solana blockchain.
  • MEV Transaction Tagging: Identify and analyze Miner Extractable Value (MEV) activities, crucial for understanding market dynamics and potential exploits.
  • Address Labeling: Benefit from labeled addresses to quickly identify known entities, smart contracts, and suspicious actors.
  • Empower Developers: Provide developers with an intuitive interface to debug, audit, and analyze their Solana smart contracts and protocols.

Try it out with this example Solana transaction. This feature is invaluable for post-incident analysis, security audits, and general understanding of on-chain activity.

Proactive Solana Security: Beyond Detection to Prevention

BlockSec Phalcon is the industry's only automated attack monitoring and blocking platform. It features advanced capabilities for attack detection, customizable monitoring rules, and automated responses. This allows for the accurate identification and prompt blocking of not only attacks but also operational, interactional, and financial risks, making it an essential tool for Solana security.

  • Early and Precise Detection: Phalcon scans every mempool and on-chain transaction to precisely identify malicious behavior. By combining DeFi semantics and AI algorithms, the false positive rate is reduced to nearly zero, ensuring that critical alerts are not missed amidst noise. This proactive approach is key to effective blockchain security.
  • Automatic Response with Multisig Support: Phalcon goes beyond merely detecting attacks; it actively blocks them in real-time. Attacks are automatically intercepted based on user-defined actions, often integrated with multi-signature wallets, ensuring 24/7 proactive security protection without manual intervention. This is crucial for mitigating damage from fast-moving exploits.
  • Simplified & Flexible Configuration: After users import their Solana addresses, the system automatically completes the initial monitoring setup and offers various monitoring templates. Users can also customize a combination of rules to handle complex and unique scenarios specific to their Solana dApps.

If you have concerns about your project's security after its launch, or if you're looking to enhance your existing Solana security posture, consider scheduling a Phalcon product demo. You can speak directly with our security experts and even apply for a free trial to experience firsthand how Phalcon safeguards your protocol against the ever-present threats in the blockchain space.

Get Started with Phalcon Security

Detect every threat, alert what matters, and block attacks.

Try now for free

Website: https://blocksec.com/phalcon

X: https://x.com/Phalcon_xyz

Sign up for the latest updates
~$15.9M Lost: Trusted Volumes & More | BlockSec Weekly
Security Insights

~$15.9M Lost: Trusted Volumes & More | BlockSec Weekly

This BlockSec bi-weekly security report covers 11 notable attack incidents identified between April 27 and May 10, 2026, across Sui, Ethereum, BNB Chain, Base, Blast, and Berachain, with total estimated losses of approximately $15.9M. Three incidents are analyzed in detail: the highlighted $1.14M Aftermath Finance exploit on Sui, where a signed/unsigned semantic mismatch in the builder-fee validation allowed an attacker to inject a negative fee that was converted into positive collateral during settlement; the $5.87M Trusted Volumes RFQ authorization mismatch on Ethereum; and the $5.7M Wasabi Protocol infrastructure-to-contract-control compromise across multiple EVM chains.

Newsletter - April 2026
Security Insights

Newsletter - April 2026

In April 2026, the DeFi ecosystem experienced three major security incidents. KelpDAO lost ~$290M due to an insecure 1-of-1 DVN bridge configuration exploited via RPC infrastructure compromise, Drift Protocol suffered ~$285M from a multisig governance takeover leveraging Solana's durable nonce mechanism, and Rhea Finance incurred ~$18.4M following a business logic flaw in its margin-trading module that allowed circular swap path manipulatio

~$7.04M Lost: GiddyDefi, Volo Vault & More | BlockSec Weekly
Security Insights

~$7.04M Lost: GiddyDefi, Volo Vault & More | BlockSec Weekly

This BlockSec weekly security report covers eight attack incidents detected between April 20 and April 26, 2026, across Ethereum, Avalanche, Sui, Base, HyperLiquid, and MegaETH, with total estimated losses of approximately $7.04M. The highlighted incident is the $1.3M GiddyDefi exploit, where the attacker did not break any cryptography or use a flash loan but simply replayed an existing on-chain EIP-712 signature with the unsigned `aggregator` and `fromToken` fields swapped out for a malicious contract, demonstrating how partial signature coverage turns any historical signature into a generic permit. Other incidents include a $3.5M Volo Vault operator key compromise on Sui, a $1.5M Purrlend privileged-role takeover, a $413K SingularityFinance oracle misconfiguration, a $142.7K Scallop cross-pool index injection, a $72.35K Kipseli Router decimal mismatch, a $50.7K REVLoans (Juicebox) accounting pollution, and a $64K Custom Rebalancer arbitrary-call exploit.

Get Real-Time Protection with Phalcon Security

Audits alone are not enough. Phalcon Security detects attacks in real time and blocks threats mid-flight.

phalcon security