{"license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/","attribution":"ChainChoice (https://chainchoice.io)","category":"onchain_monitoring","evidenceReadAt":"2026-10-22","generatedAt":"2026-11-04","criteria":[{"id":"verifiedInterventions","label":"Verified pre-emptive catches","weight":40},{"id":"responseCapability","label":"What it can actually DO","weight":25},{"id":"falsePositivePosture","label":"False-positive honesty and detection method","weight":20},{"id":"pricingDisclosure","label":"Pricing and procurement disclosure","weight":15}],"providers":{"hypernative_monitoring":{"verifiedInterventions":{"s":8,"q":"On May 7, 2026, an attacker deployed an attack contract targeting Parallel 's USDp. Hypernative's live monitoring instantly flagged the attack contract upon deployment and automatically paused Parallel's cross chain deployment within seconds.","u":"https://www.hypernative.io/insights/blog/how-an-automated-pause-prevented-a-1-52m-exploit-on-parallel","d":"2026-10-22"},"responseCapability":{"s":8,"q":"Achieving that required granting the pause role to a Hypernative-controlled address directly rather than routing the pause action through a multisig, which would have introduced approval latency that could potentially cost hours.","u":"https://www.hypernative.io/insights/blog/how-an-automated-pause-prevented-a-1-52m-exploit-on-parallel","d":"2026-10-22"},"falsePositivePosture":{"s":4,"q":"What is the false positive rate? <0.001%. The AI detection engine is purpose-built for onchain security, enabling confident automation without alert fatigue.","u":"https://www.hypernative.io/product/onchain-monitoring-automated-response","d":"2026-10-22"},"pricingDisclosure":{"s":1,"q":"Not Found Page Not Found The page you are looking for doesn't exist or has been moved Go Home","u":"https://www.hypernative.io/pricing","d":"2026-10-22"}},"hexagate_chainalysis_monitoring":{"verifiedInterventions":{"s":5,"q":"As soon as the attack began, Hexagate generated another alert which prompted the Hexagate team to contact Venus and advise them to immediately pause all markets. Within 20 minutes of the malicious transaction, Venus paused its protocol.","u":"https://www.chainalysis.com/blog/hexagate-and-community-stops-a-hack-on-venus-protocol/","d":"2026-10-22"},"responseCapability":{"s":7,"q":"Instantly trigger automated actions like contract pauses, transaction blocking, and more. Execute playbooks with real-time notifications across Slack, Telegram, email, and SIEM integrations.","u":"https://www.chainalysis.com/product/hexagate/","d":"2026-10-22"},"falsePositivePosture":{"s":5,"q":"Our ML models are trained on extensive multi-year blockchain data, enabling early, accurate detection with very low false positive rates .","u":"https://www.chainalysis.com/product/hexagate/","d":"2026-10-22"},"pricingDisclosure":{"s":2,"q":"Unless otherwise set forth on an Order, Fees are due within 30 days from the date of receipt of the relevant invoice, on an annual basis in advance.","u":"https://www.chainalysis.com/msa/","d":"2026-10-22"}},"forta_firewall_monitoring":{"verifiedInterventions":{"s":3,"q":"First Attack Transaction at 15:42:06 PM UTC: - The exploiter drained 559 ETH and 2.5M $WOO. - Forta's first alert was triggered at 15:42:22 PM UTC, approximately 16 seconds after the attack began.","u":"https://www.forta.org/blog/wootrade-hack-detected-in-advance-by-forta-4-8m","d":"2026-10-22"},"responseCapability":{"s":9,"q":"A transaction arrives at the chain's sequencer and is evaluated in under 10-ms against the modules the chain has enabled, using a combination of rules and detection models. Transactions that are not flagged continue to get included in blocks.","u":"https://www.forta.org/blog/forta-firewall-on-op-enterprise-a-sequencer","d":"2026-10-22"},"falsePositivePosture":{"s":3,"q":"FORTRESS has been trained on past exploits and is fine-tuned on a regular basis as Firewall screens new transactions. In terms of performance, FORTRESS can detect over 99% of exploits (recall), with a false positive rate of <0.0002% (1 in 500,000 transactions).","u":"https://docs.forta.network/en/latest/forta-firewall-security-screening/","d":"2026-10-22"},"pricingDisclosure":{"s":2,"q":"All Firewall revenue flows back to the Forta treasury, where it will be subject to governance decisions on how best to allocate or utilize these funds.","u":"https://www.forta.org/blog/a-new-chapter-for-fort","d":"2026-10-22"}},"blocksec_phalcon_monitoring":{"verifiedInterventions":{"s":7,"q":"We detected the attack when the attacker sent the first tx, even though the tx failed. At 5:47:11 UTC on March 17, 2023, our rescue contract was ready. We immediately sent the rescue transaction and successfully saved 2906 Ether.","u":"https://blocksec.com/blog/blocked-paraspace-attack-industry-s-most-important-block-that-rescued-5-000-000","d":"2026-10-22"},"responseCapability":{"s":9,"q":"When the first attack transaction is recorded on the blockchain, Phalcon Security can detect it immediately. If an L2 protocol employs Phalcon Security, the system can promptly alert the team and automatically pause the protocol, limiting losses to just the initial attack.","u":"https://blocksec.com/phalcon/security","d":"2026-10-22"},"falsePositivePosture":{"s":3,"q":"Phalcon Security by the Numbers 99.9 % of hacks detected $ 20,000,000 saved in whitehat rescues < 0.0001 % false positive rate","u":"https://blocksec.com/phalcon/security","d":"2026-10-22"},"pricingDisclosure":{"s":2,"q":"Phalcon Security is an exclusive, invite-only platform. If you are interested in accessing Phalcon Security, please reach out to us at phalcon_support@blocksec.com or book a demo to request free trial access.","u":"https://blocksec.com/phalcon/security","d":"2026-10-22"}},"cyvers_monitoring":{"verifiedInterventions":{"s":3,"q":"How Cyvers' Vigilens Stopped a $2.7 Million Cryptocurrency Hack at Remitano Meir Dolev September 18, 2023","u":"https://cyvers.ai/Blogs","d":"2026-10-22"},"responseCapability":{"s":7,"q":"Automated response: pause contracts, block transactions, trigger playbooks","u":"https://cyvers.ai/products","d":"2026-10-22"},"falsePositivePosture":{"s":3,"q":"$800M Prevented in 2025 0.00001% False Positive Rate","u":"https://cyvers.ai/","d":"2026-10-22"},"pricingDisclosure":{"s":1,"q":"Ready to Secure Your Platform? Join the world's leading exchanges, custodians, and financial institutions trusting Cyvers to prevent losses in real time. Book a Demo Explore Platform","u":"https://cyvers.ai/","d":"2026-10-22"}},"tenderly_monitor_alerts":{"verifiedInterventions":{"s":2,"q":"The simulation company for onchain operations, enabling engineering, finance, and risk teams to model every onchain action against a real, live system before any capital or customer is exposed.","u":"https://tenderly.co/","d":"2026-10-22"},"responseCapability":{"s":4,"q":"Enable automated processes: Use Alerts as triggers for Web3 Actions to build custom automated processes that allow you to react automatically to on-chain events with custom code.","u":"https://docs.tenderly.co/monitoring/alerts/introduction","d":"2026-10-22"},"falsePositivePosture":{"s":6,"q":"Anatomy of an Alert Each Alert requires three elements to be configured before it can be enabled: Alert Type: On-chain event that triggers Tenderly to send you a notification. There are 12 alert trigger types to choose from.","u":"https://docs.tenderly.co/monitoring/alerts/introduction","d":"2026-10-22"},"pricingDisclosure":{"s":3,"q":"Tenderly plans are tailored to your organization. Because every team operates differently across use cases, scale, and the products they rely on, we design pricing around your specific requirements rather than fixed packages.","u":"https://tenderly.co/pricing","d":"2026-10-22"}},"venn_network_monitoring":{"verifiedInterventions":{"s":2,"q":"Battle-Tested Security - More than a concept, Venn is a proven technology that has prevented hacks worth over $2 million this year alone.","u":"https://docs.venn.build/","d":"2026-10-22"},"responseCapability":{"s":5,"q":"Behind the scenes, this modifier will forward every call to the protected function to the Firewall, which makes sure that the call has been approved by Venn before allowing it to go through.","u":"https://docs.venn.build/venn-network/getting-started/protocols-and-developers/how-it-works","d":"2026-10-22"},"falsePositivePosture":{"s":6,"q":"False Positive: ~0.08% of ~3.1 million inspected transactions flagged","u":"https://docs.venn.build/venn-network/detection-performance-internal","d":"2026-10-22"},"pricingDisclosure":{"s":2,"q":"Transaction fees are incurred either by the protocols' end users or by the protocols themselves if they choose to subsidize these fees for their ecosystem end users.","u":"https://docs.venn.build/venn-network/economics","d":"2026-10-22"}}}}