Next-Generation Security for L1 & L2 Chains
Protect your infrastructure before launch. Block attacks at the source to shield your ecosystem and reputation.
Audit core infrastructure, including the VM, bridges, and consensus.
Monitor all on-chain and mempool activities for threats.
Get instant alerts on attacks targeted dApps in your ecosystem.
Track illicit funds to maintain your chain's compliance posture.
Block large-scale hacks before attackers execute them on-chain.
Protect all ecosystem protocols and users with native, real-time defense.
Receive detailed post-mortem reports that deconstruct the full attack vector.
Implement actionable insights to harden your chain against future incidents.
Protect Your Chain Infrastructure at the Core
“Phalcon is an effective tool that helps project teams complete core monitoring in a very short period. Additionally, Phalcon is backed by a highly professional technical team that can provide timely support, solution discussions, development, and testing.”
Newsletter - June 2026
This monthly report covers the three largest security incidents in June 2026, totaling approximately $22M in confirmed losses. A sophisticated honeypot attack drained ~$15M from JaredFromSubway's MEV bot by exploiting unchecked token allowances. Two legacy Aztec rollup deployments lost ~$4.35M through proof-settlement boundary gaps. SecondFi's Ed25519 implementation flaw exposed wallet private keys, resulting in ~$2.4M drained from 374 wallets. All three incidents share a common pattern: security guarantees that appeared intact on the surface but were never actually enforced.
Crypto Payment Security & Compliance: The Controls to Confirm Before Going Live
BlockSec and NOWPayments built a Crypto Payment Security & Compliance Checklist covering the controls every payment operator should confirm before going live.
~$4.1M Lost: Taiko, SecondFi Exploits | BlockSec Weekly
This weekly blockchain security report covers two notable incidents from June 22-28, 2026, with approximately $4.1M in confirmed losses across Ethereum and Cardano. The Taiko bridge exploit combined an exposed SGX enclave signing key with an incomplete attestation policy that failed to reject debug enclaves, allowing the attacker to register a malicious prover and forge L2 state proofs on Ethereum. The SecondFi wallet vulnerability stemmed from a cryptographic implementation flaw in Ed25519 nonce derivation that removed the secret input, enabling offline private key recovery from public Cardano transaction data.
For 500+ clients, from Web3 leaders to global regulators
