BlockSec Phalcon

A Platform to Monitor and Block Hacks
Designed for protocol security, our platform detects every threat, alerts you to what truly matters, and blocks attacks automatically.
MANTLEBYBITMataFBTCPufferMerlin ChainCOBOAMBER
Precise Attack Intelligence

Be aware of every attack transaction instantly

Learn more
Automatically Block Hacks

Block hacks before execution to prevent any loss

Learn more
Simplified & Flexible Configuration

The system auto-creates monitors, and you can customize your own for complex scenarios

Learn more

Gain Early Access to Precise Attack Intelligence

Early Detection:

Scan transactions early at the mempool stage to detect hacks before they happen.

Precise Detection:

Scrutinize over 200 typical hacking characteristics to achieve the highest precision. Discover Our Research

Comprehensive Risk Coverage:

The system not only detects attacks but also identifies operational, interaction, and financial risks, etc., addressing the vast majority of threats that protocols may encounter.

Early Detection

Automatically Block Hacks to Prevent Any Loss

Automated Actions:

Automatically initiate response actions to counteract hacks.

Gas-bidding Strategy:

Place our transaction on the chain ahead of the attack's to block the hack before it can be executed.

Enhanced Authority Control:

Provide diverse triggering modes supporting both EOA and multi-sig wallets, offering enhanced flexibility and strict protocol authority controls.

Simplified Configuration for Effective Risk Management

Simplified Configuration:

Easily import addresses via protocol or CSV, and the system will automatically generate monitors tailored to the associated risks of your addresses.

Flexible Configuration:

You can create monitors using templates. Additionally, you can customize rules, combine different rule types and adjust parameters for complex scenarios.

Phalcon by the Numbers

%
of hacks detected
$
saved in whitehat rescues
<%
false positive rate

Use Cases

Protocols
Automated actions to counteract attacks, preventing or minimizing losses
Identify operational, interaction, and financial risks within the protocol
L1/L2 Chains
Stay vigilant about the security of leading protocols to uphold a thriving ecosystem
Protect treasury assets through automatic responses to hacks
Testimonials

We are big fans of BlockSec and have been deeply involved from the inception of BlockSec to the use of each of its products. Phalcon is a very good security tool, to help Bybit achieve on-chain tracking and web3 contract security monitoring. We will have more cooperation with BlockSec in the future.

avatar
David Zong
Head of Risk, Bybit

BlockSec is a critical partner for Cobo. Their Phalcon platform is groundbreaking and marks a huge step forward in DeFi security. We're enthusiastic about partnering with such a dedicated team to develop robust security solutions for investors.

avatar
Discus Fish
CEO, Cobo

From a long-term security professional’s perspective, the Phalcon platform developed by BlockSec empowers us to respond to contingency security incidents with ease. The BlockSec team truly understands the real-world needs of us security engineers working on the frontlines.

avatar
Chiachih Wu
Research, Amber Group

Integrating BlockSec Phalcon with the Merlin chain has been a defining moment for us. As Merlin continues to grow and prosper, BlockSec Phalcon has been instrumental in creating a strong security shield for it. For anyone looking to secure their protocols and assets, Phalcon is unrivaled — I highly recommend it.

avatar
Jeff
Core Contributor, Merlin

Frequently Asked Questions

What chains does Phalcon support?

icon

Phalcon supports Ethereum, BSC, Base, Arbitrum, Avalanche, Optimism, Mantle, Merlin and Manta with support for other L1/L2 chains also in our pipeline. If you would like to accelerate Phalcon's support for a specific chain, please contact us atphalcon@blocksec.com.

What notification channels does Phalcon support?

icon

Phalcon supports E-mail, Telegram, Discord, Slack, Lark, Webhook, and PagerDuty.

How does Phalcon work technically?

icon
  • Phalcon continuously monitors all mempool and on-chain transactions for malicious activity.
  • Users can set up monitoring trigger conditions and corresponding notification channels and actions using both templates and custom options. Monitoring templates come with built-in settings for easy configuration, while the custom mode allows users to combine Detection Engine results with their own rules for greater flexibility.
  • When a transaction meets specified trigger conditions, the predefined response action (i.e. a blocking transaction) will be automatically triggered, utilizing an exclusive gas-bidding strategy to speed up our transaction and front-run the malicious transaction.

What are the differences among action modes: Pre-Signed Transaction, Delegation, and Multi-Sig with Delegation?

icon
  • In the 'Pre-Signed Transaction' mode, users save the signed raw transactions in our system, and such transactions will be broadcast to the blockchain when the automatic action is triggered. Note that, users need to manage the nonce of the raw transaction, and specify the gas fee of the transaction.
  • In the 'Delegation' mode, users delegate some privileges to our EOA addresses (e.g., to pause the protocol). When the automatic action is triggered, the transaction is signed using our EOA address. Note that, users do not need to care about the nonce and gas fee of the transaction.
  • The 'Multi-Sig with Delegation' mode allows users to automate actions by setting up a module in Safe{Wallet} that lets Phalcon execute specific functions when the automatic action is triggered. This facitilates the automatic process when only the multi-sig wallet has the privilege to invoke the target contract.

How to subscribe to Phalcon? Is any trial available?

icon

Phalcon is an exclusive, invite-only platform. If you are interested in accessing Phalcon, please reach out to us atphalcon@blocksec.comorbook a demoto request free trial access. Our demo offers a comprehensive overview of the platform, a free trial period, and targeted advice from our security experts.

What value does Phalcon offer to L2 protocols (since L2s don't have a mempool)?

icon

In most cases, hackers don't launch a single attack; instead, they execute multiple attacks across various chains in a short period. When the first attack transaction is recorded on the blockchain, Phalcon can detect it immediately. If an L2 protocol employs Phalcon, the system can promptly alert the team and automatically pause the protocol, limiting losses to just the initial attack.

We also provide the Sequencer Threat Overwatch Program (STOP) for L2 chains, which eliminates hacks at the sequencer level and ensures the security of the whole chain. Learn more

Activate Your Defense with Phalcon!

Register today to safeguard your protocols with Phalcon – your real-time sentinel against external threats, automatically blocking attacks before they strike.