Back to Blog

BlockSec Phalcon Secures Solana Ecosystem with Enhanced Real-Time Protection

Phalcon Security
February 26, 2025
4 min read
Key Insights

Since early 2024, Solana has rapidly become a preferred blockchain due to its high throughput, smooth trading experience, and low fees. This has led to a significant increase in on-chain activity and explosive growth of decentralized applications (dApps). According to DefiLlama data, Solana's Total Value Locked (TVL) has now surpassed $7.3 billion, firmly holding the second position in public blockchain rankings. This growth underscores the urgent need for robust Solana security solutions.

To meet the evolving Solana security needs of developers and users, BlockSec Phalcon, our flagship security platform, has now fully integrated support for Solana! This expansion brings BlockSec's advanced real-time monitoring and automated blocking capabilities to the vibrant Solana ecosystem.

Real-Time Solana Security Monitoring with BlockSec Phalcon

Starting today, projects and liquidity providers on Solana can leverage Phalcon's comprehensive monitoring capabilities to track on-chain activities associated with their protocols. BlockSec Phalcon provides instant alerts for critical events, enabling rapid response to mitigate potential losses.

Key monitoring features for Solana dApps include:

  • Operational Risk Alerts: Receive immediate notifications for program upgrades, authority changes, and other critical operational events that could indicate a security vulnerability or unauthorized access.
  • Security Risk Alerts: Get real-time alerts on suspicious fluctuations in token amounts, abnormal price movements, or unusual transaction patterns that might signal an ongoing attack or exploit.
  • Attack Transaction Monitoring: Phalcon's advanced engine continuously monitors for known attack patterns and emerging threats, providing early warnings of malicious activity.
  • Flexible Monitoring: Customize monitoring rules for key variables, sensitive events, and specific function invocations relevant to your Solana smart contracts.
  • Expert Custom Solutions: Our security experts can design bespoke monitoring solutions tailored to the unique architecture and risk profile of your Solana project.

Risk Scenarios Covered by BlockSec Phalcon for Solana Security Image: BlockSec Phalcon's comprehensive coverage of risk scenarios, now extended to Solana.

Over two years of internal operation, BlockSec has intercepted over 20 attacks through white-hat rescues, preventing more than $20 million in potential losses. Backtesting data from 2024 shows that Phalcon detected over 99.99% of attacks with an exceptionally low false positive rate below 0.0001%. This proven track record highlights Phalcon's effectiveness in providing robust blockchain security.

Currently, Phalcon fully supports multiple mainstream blockchain networks, including Ethereum (ETH), BNB Smart Chain (BSC), Solana, Arbitrum, Avalanche, Optimism, Manta, Mantle, Merlin, Base, Sei, Bitlayer, Core, and BoB. With 24/7 real-time monitoring, a detection engine defined by over 200 attack characteristics, and millisecond-level automatic blocking technology, Phalcon empowers project teams to shift from a "passive response 🔴" to a "proactive prevention 🟢" approach against various security risks.

Get Started with Phalcon Security

Detect every threat, alert what matters, and block attacks.

Try now for free

Transaction Visualization and Forensics with Phalcon Explorer

BlockSec Phalcon's supporting tool, Phalcon Explorer, now extends its powerful transaction visualization and forensics capabilities to Solana. This is a game-changer for developers and auditors seeking to understand complex Solana transactions.

With Phalcon Explorer, users can:

  • Visualize Transaction Details: Gain a clear and comprehensive view of fund flows, balance changes, and function calls within Solana transactions.
  • Clarify Account Relationships: Easily understand the intricate connections between accounts and their token holdings on the Solana blockchain.
  • MEV Transaction Tagging: Identify and analyze Miner Extractable Value (MEV) activities, crucial for understanding market dynamics and potential exploits.
  • Address Labeling: Benefit from labeled addresses to quickly identify known entities, smart contracts, and suspicious actors.
  • Empower Developers: Provide developers with an intuitive interface to debug, audit, and analyze their Solana smart contracts and protocols.

Try it out with this example Solana transaction. This feature is invaluable for post-incident analysis, security audits, and general understanding of on-chain activity.

Proactive Solana Security: Beyond Detection to Prevention

BlockSec Phalcon is the industry's only automated attack monitoring and blocking platform. It features advanced capabilities for attack detection, customizable monitoring rules, and automated responses. This allows for the accurate identification and prompt blocking of not only attacks but also operational, interactional, and financial risks, making it an essential tool for Solana security.

  • Early and Precise Detection: Phalcon scans every mempool and on-chain transaction to precisely identify malicious behavior. By combining DeFi semantics and AI algorithms, the false positive rate is reduced to nearly zero, ensuring that critical alerts are not missed amidst noise. This proactive approach is key to effective blockchain security.
  • Automatic Response with Multisig Support: Phalcon goes beyond merely detecting attacks; it actively blocks them in real-time. Attacks are automatically intercepted based on user-defined actions, often integrated with multi-signature wallets, ensuring 24/7 proactive security protection without manual intervention. This is crucial for mitigating damage from fast-moving exploits.
  • Simplified & Flexible Configuration: After users import their Solana addresses, the system automatically completes the initial monitoring setup and offers various monitoring templates. Users can also customize a combination of rules to handle complex and unique scenarios specific to their Solana dApps.

If you have concerns about your project's security after its launch, or if you're looking to enhance your existing Solana security posture, consider scheduling a Phalcon product demo. You can speak directly with our security experts and even apply for a free trial to experience firsthand how Phalcon safeguards your protocol against the ever-present threats in the blockchain space.

Get Started with Phalcon Security

Detect every threat, alert what matters, and block attacks.

Try now for free

Website: https://blocksec.com/phalcon

X: https://x.com/Phalcon_xyz

Sign up for the latest updates
Drift Protocol Incident: Multisig Governance Compromise via Durable Nonce Exploitation
Security Insights

Drift Protocol Incident: Multisig Governance Compromise via Durable Nonce Exploitation

On April 1, 2026 (UTC), Drift Protocol on Solana suffered a $285.3M loss after an attacker exploited Solana's durable nonce mechanism to delay the execution of phished multisig approvals, ultimately transferring administrative control of the protocol's 2-of-5 Squads governance with zero timelock. With full admin privileges, the attacker created a malicious collateral market (CVT), inflated its oracle price, relaxed withdrawal protections, and drained USDC, JLP, SOL, cbBTC, and other assets through 31 rapid withdrawals in approximately 12 minutes. This incident highlights how durable nonce-based delayed execution can decouple signer intent from on-chain execution, bypassing the temporal assumptions that multisig security implicitly relies on.

Weekly Web3 Security Incident Roundup | Mar 23 – Mar 29, 2026
Security Insights

Weekly Web3 Security Incident Roundup | Mar 23 – Mar 29, 2026

This BlockSec weekly security report covers eight DeFi attack incidents detected between March 23 and March 29, 2026, across Ethereum and BNB Chain, with total estimated losses of approximately $1.53M. Incidents include a $679K flawed burn mechanism exploit on the BCE token, a $512K spot-price manipulation attack on Cyrus Finance's PancakeSwap V3 liquidity withdrawal, a $133.5K flash-loan-driven referral reward manipulation on a TUR staking contract, and multiple integer overflow, reentrancy, and accounting error vulnerabilities in DeFi protocols. The report provides detailed vulnerability analysis and attack transaction breakdowns for each incident.

Newsletter -  March 2026
Security Insights

Newsletter - March 2026

In March 2026, the DeFi ecosystem experienced three major security incidents. Resolv Protocol lost ~$80M due to compromised privileged infrastructure keys, BitcoinReserveOffering suffered ~$2.7M from a double-minting logic flaw, and Venus Protocol incurred ~$2.15M following a donation attack combined with market manipulation.

Get Real-Time Protection with Phalcon Security

Audits alone are not enough. Phalcon Security detects attacks in real time and blocks threats mid-flight.

phalcon security