Holistic Security for DeFi Securing Your Smart Contracts
Secure your code pre-launch and block attacks in real-time. Safeguard both user assets and your reputation.
Find and fix critical issues in your smart contracts before you launch.
Make sure your business logic is sound and free of flaws.
Always monitor mempool and on-chain transactions for suspicious activities.
Receive instant alerts on new threats such as oracle manipulation and flash loan attacks.
Block confirmed exploits in real-time to prevent them from draining funds.
Start on-chain responses, such as pausing contracts, to neutralize active threats.
Understand complex attack vectors to gain actionable intelligence. Help you proactively harden your protocol against emerging threats.
Secure Your Protocol Across Its Entire Lifecycle
“Partnering with BlockSec has been crucial to Tokenlon's mission of preserving the openness of DeFi while leveraging technology to create a safer, more trustworthy space for all. BlockSec's cutting-edge on-chain analytics allow us to identify high-risk addresses across multiple blockchains and navigate complex global regulations with confidence. Their expertise helps us safeguard our liquidity partners and consistently deliver a seamless, reliable DeFi experience for genuine users.”
~$18M Lost: jaredFromSubway, Aztec & More | BlockSec Weekly
This weekly blockchain security report covers June 15 to June 21, 2026, with 3 notable incidents across Ethereum and BNB Chain totaling approximately $18.3M in losses. Two incidents are analyzed in detail. Based on on-chain analysis, the highlighted jaredFromSubway incident reveals a reversed approval attack pattern: unlike traditional exploits where attackers abuse vulnerabilities in trusted DeFi contracts to drain user-approved assets, this MEV bot proactively approved its own assets to untrusted third-party contracts for arbitrage. The attacker constructed fake wrapper tokens and swap pools that emitted real events but never consumed the granted allowances, with reported total losses of ~$15M. The report also covers Aztec's second exploit in three days, where a missing equality constraint between two witnesses for `old_data_root` in the escape hatch ZK circuit allowed the attacker to prove ownership of fabricated notes against a fake Merkle tree while passing on-chain root validation.
Web3 Companion: The Open-Source Secure Agentic Wallet
BlockSec open-sources Web3 Companion, a security-first agentic wallet that treats its own AI agent as untrusted and uses key isolation, hard policies, and Passkey to protect on-chain assets.
~$5.98M Lost: Aztec, Raydium & More | BlockSec Weekly
This weekly blockchain security report covers the period of June 8 to June 14, 2026, analyzing 4 notable incidents across Ethereum and Solana with total losses of approximately $5.98M. The highlighted events include Aztec Connect, where a missing input validation allowed the rollup's proof path and L1 settlement to reach inconsistent states, and Raydium, where a missing validation check on the legacy AMM v3 program allowed an attacker to manipulate the LP token redemption calculation and drain four pools. Both vulnerabilities had been live for years before exploitation. The report examines attack types including lack of input validation, integer overflow, and governance capture.
For 500+ clients, from Web3 leaders to global regulators
