# Welcome

Real-time security monitoring for onchain finance.

Every 1.3 days, a protocol loses millions to preventable exploits. Audited code gets attacked through price manipulation, governance exploits, and runtime vulnerabilities that static analysis can't catch.

Guardrail monitors your contracts 24/7, alerting you in under 1 second when attacks begin—so you can respond before funds disappear.

## What You Get

**Instant Setup** — Pre-built guards for common attack vectors like reentrancy, flash loans, and oracle manipulation.

**Custom Protection** — Our security team builds monitoring tailored to your protocol's unique architecture and risks.

**Automatic Response** — Pause contracts, trigger alerts, or execute incident response playbooks without manual intervention.

**Multi-Chain Coverage** — 45+ EVM chains supported, plus Solana and Sui. Bridges, DEXs, lending protocols, and more.

## Trusted By

Protocols securing $1.3B+ in TVL, including Euler, Avantis, BadgerDAO, and other leading DeFi teams. Backed by Coinbase Ventures, Haun Ventures, and Chainlink's CISO.

[Get Started →](/getting-started/quickstart) · [Book a Demo](https://www.guardrail.ai/get-started)


# Quickstart

Get from zero to protected in under 10 minutes.

## Video Walkthrough

Watch our founder demonstrate how Guardrail works—from setup to catching real attacks:

{% embed url="<https://www.loom.com/share/dfc64444602744aeb5699003810cf472>" %}

## How Guardrail Works

* **Connect your contracts** — No code changes required. Just provide contract addresses.
* **Deploy guards** — Choose from our blueprint library or work with our team on custom monitoring.
* **Get alerts** — Slack, Discord, PagerDuty, Telegram, or webhooks. Sub-second delivery.
* **Respond** — Manually investigate or trigger automated responses.

## Why Audits Aren't Enough

The biggest DeFi hacks of 2024-2025—Cetus ($224M), Radiant ($50M), WazirX ($230M)—all happened on audited code. Audits verify code at a point in time. They can't catch:

* **Runtime attacks** — Flash loans, price manipulation, reentrancy during execution
* **Governance exploits** — Compromised multisigs, malicious proposals
* **Economic attacks** — Oracle manipulation, MEV exploits
* **Upgrade vulnerabilities** — Uninitialized proxies, storage collisions

Guardrail monitors what actually happens on-chain, in real-time.

## Next Steps

* [Explore Use Cases →](https://github.com/CryptoGuardrail/docs-v3-external/blob/main/use-cases/README.md)
* [View Guard Catalog →](https://github.com/CryptoGuardrail/docs-v3-external/blob/main/guards/README.md)
* [See Case Studies →](https://github.com/CryptoGuardrail/docs-v3-external/blob/main/case-studies/README.md)

For setup guides and configuration details, log in to access [App Documentation →](https://docs.guardrail.ai/app/)

***


# How It Works

Guardrail's platform connects to EVM RPC nodes with archive and tracing support. We index every transaction in real-time and run your configured guards against relevant state changes.

<figure><img src="https://818258224-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FgMfPgPt8Iu1wrPze8HXT%2Fuploads%2Fgit-blob-fcc4a9b70811022573441d3a9e57db0b23467482%2Fslider%20v1.png?alt=media" alt=""><figcaption></figcaption></figure>

## Architecture Overview

{% @mermaid/diagram content="flowchart LR
A\[Blockchain<br/>RPC Node] --> B\[Guardrail<br/>Indexer]
B --> C\[Your Alert<br/>Channels]
B --> D\[Guard<br/>Processors]" %}

**Indexer** — Subscribes to new blocks and indexes transactions with full trace data. Supports archive queries for historical state.

**Guard Processors** — Stateless checks that evaluate transactions against your configured rules. Each guard has trigger conditions (when to run) and alert conditions (when to notify).

**Response System** — Delivers alerts to your channels and can trigger automated responses like contract pauses or webhook calls.

## Detection Speed

Guards trigger on transaction confirmation. Alert delivery is typically under 1 second from block finality. For chains with fast block times, this means near-instant detection.

## What Makes Us Different

**Custom over generic** — Other tools send generic alerts. We build monitoring that understands your protocol's unique risks, economic model, and business logic.

**Full trace access** — We analyze the complete execution path of transactions, including internal calls, not just top-level events.

**Simulation support** — Test guards against historical transactions before deploying. Replay any transaction to see what would have triggered.

***


# Overview

Guardrail protects protocols across DeFi. Here's how different protocol types use our monitoring.

## By Protocol Type

* [Lending & Borrowing](https://github.com/CryptoGuardrail/docs-v3-external/blob/main/use-cases/lending/README.md)
* [DEXs & AMMs](https://github.com/CryptoGuardrail/docs-v3-external/blob/main/use-cases/dex/README.md)
* [Bridges & Cross-Chain](https://github.com/CryptoGuardrail/docs-v3-external/blob/main/use-cases/bridges/README.md)
* [Governance & DAOs](https://github.com/CryptoGuardrail/docs-v3-external/blob/main/use-cases/governance/README.md)

## Common Attack Vectors We Detect

| Attack Type               | Description                                                         | Example Incident       |
| ------------------------- | ------------------------------------------------------------------- | ---------------------- |
| Flash Loan Attacks        | Borrowed funds used to manipulate state within a single transaction | Euler 2023 ($197M)     |
| Price Oracle Manipulation | Exploiting price feeds to borrow/mint more than collateral allows   | Polter Finance ($8.7M) |
| Reentrancy                | Functions called recursively before state updates complete          | Penpie ($27M)          |
| Governance Exploits       | Compromised signers or malicious proposals                          | Radiant Capital ($50M) |
| Uninitialized Proxies     | Upgrade contracts deployed without proper initialization            | Ronin Bridge ($12M)    |
| Private Key Compromise    | Stolen keys used to drain funds or change ownership                 | WazirX ($230M)         |

***


# Lending & Borrowing

Lending protocols face unique risks around liquidations, oracle dependencies, and interest rate mechanics.

## Key Risks

* **Liquidation cascades** during market volatility
* **Bad debt accumulation** from underwater positions
* **Oracle manipulation** to borrow against inflated collateral
* **Interest rate attacks** exploiting utilization curves

## Guards We Deploy

**Liquidation Monitoring** — Track liquidation events, detect cascades, alert on unusual liquidation patterns.

**Oracle Health** — Monitor price feed deviations, detect stale prices, flag manipulation attempts.

**Bad Debt Detection** — Identify positions with negative equity before they become protocol losses.

**Utilization Alerts** — Track pool utilization and interest rate spikes.

## Case Study: Euler Labs

> "Guardrail excels in price monitoring and price deviation by far compared to any of the tools in the market." — Erik Arfvidson, Head of Cybersecurity

Euler consolidated from 3 monitoring tools to 1, with automated guard updates for new vault deployments.

[Read full case study →](https://www.guardrail.ai/case-studies/euler-labs)

***


# DEXs & AMMs

Decentralized exchanges are targets for price manipulation, sandwich attacks, and liquidity exploits.

## Key Risks

* **Price manipulation** via flash loans or large trades
* **Sandwich attacks** extracting value from user swaps
* **Liquidity removal** draining pools unexpectedly
* **Pool parameter changes** modifying fees or weights maliciously

## Guards We Deploy

**Pool Manipulation Detection** — Alert on abnormal price movements within single transactions.

**Flash Loan Monitoring** — Flag transactions combining flash loans with large outflows.

**Liquidity Drop Alerts** — Detect sudden liquidity removals that could impact trading.

**MEV Protection Monitoring** — Track sandwich attack patterns affecting your users.

## Protocols Using Guardrail

Avantis, Solo Labs, and other perpetual and spot exchanges trust Guardrail for real-time monitoring.

***


# Bridges & Cross-Chain

Bridges are high-value targets—over 50% of DeFi losses come from bridge exploits. Cross-chain verification requires specialized monitoring.

## Key Risks

* **Message validation failures** between source and destination chains
* **Mint/burn mismatches** creating unbacked tokens
* **Relay manipulation** submitting fraudulent cross-chain messages
* **Upgrade vulnerabilities** in bridge contracts

## Guards We Deploy

**Cross-Chain Message Matching** — Verify bridged amounts match between source and destination.

**Mint/Burn Limits** — Alert when token minting exceeds expected thresholds.

**Bridge Relay Monitoring** — Track relay operations and flag anomalies.

**Upgrade Event Guards** — Monitor proxy upgrades and initialization calls.

## Case Study: Concero

> "No one can tell me anything that will convince me not to use Guardrail." — Andy Bohutsky, Founder

1-day implementation with real-time cross-chain message validation.

[Read full case study →](https://www.guardrail.ai/case-studies/concero)

***


# Governance & DAOs

Governance attacks don't exploit code—they exploit trust and process. Monitoring operational security is as important as smart contract security.

## Key Risks

* **Multisig compromise** from phished or malware-infected signers
* **Malicious proposals** passing through governance
* **Admin key rotation** to attacker-controlled addresses
* **Treasury drains** via governance mechanisms

## Guards We Deploy

**Multisig Threshold Monitoring** — Alert if signing requirements drop below safe levels.

**Admin Change Detection** — Track ownership transfers and role changes.

**Proposal Monitoring** — Flag unusual governance activity.

**Treasury Movement Alerts** — Detect large or unusual treasury transactions.

## Case Study: BadgerDAO

> "Guardrail provides peace of mind, tying directly into our PagerDuty system and actively monitoring critical positions. We've avoided costly liquidation events thanks to timely alerts." — Saj Raj, Core Contributor

[Read full case study →](https://www.guardrail.ai/case-studies/badger)

***


# Threat Intelligence

Guardrail's security research team tracks DeFi exploits and attack patterns. Here are highlights from recent years showing how real-time monitoring could have prevented major losses.

## 2025 Highlights

**Cetus Protocol ($224M) — June 2025** A concentrated liquidity DEX on Sui exploited through price calculation manipulation. Attackers drained multiple pools by exploiting arithmetic in the swap logic. Guardrail's pool manipulation and balance anomaly guards detect this pattern by monitoring for abnormal price movements and liquidity changes within single transactions.

**Silo Finance ($500K+) — June 2025** An unreleased leverage feature was exploited during testing. Even test deployments need monitoring—Guardrail's event and function guards would have detected unexpected interactions with the vulnerable contracts.

## 2024 Highlights

**Radiant Capital ($50M) — October 2024** Not a code bug—compromised developer machines displayed fake transaction data to multisig signers. Guardrail's multisig threshold guard would have flagged the signing requirements, and admin event monitoring would have detected the ownership change before fund drainage.

**Penpie ($27M) — September 2024** Reentrancy attack on the reward calculation logic. The attacker used fake Pendle market contracts to manipulate deposits mid-transaction. Guardrail's reentrancy guard and function sequence validation detect this pattern.

**Ronin Bridge ($12M) — August 2024** A proxy upgrade without initialization allowed anyone to withdraw tokens. Guardrail's proxy uninitialized upgrade guard specifically detects when upgrades occur without accompanying initialization calls.

## Attack Pattern Coverage

| Pattern                 | Guardrail Detection                        |
| ----------------------- | ------------------------------------------ |
| Reentrancy              | Reentrancy Guard, Function Sequence Guard  |
| Flash Loan Manipulation | Flash Loan Guard, Pool Manipulation Guard  |
| Oracle Attacks          | Price Deviation Guard, Oracle Health Guard |
| Governance Exploits     | Multisig Threshold, Admin Event Guards     |
| Uninitialized Proxies   | Proxy Upgrade Guard                        |
| Private Key Compromise  | Balance Drop Guard, Admin Change Detection |

***


# Guard Catalog

Guards are configurable security checks that run on blockchain transactions. Each guard has trigger conditions (when to evaluate) and alert conditions (when to notify). Guardrail ships with 130+ guard blueprints across the following categories.

## Guard Categories

### Critical Threats

Detect and respond to active exploits, hacks, and high-severity attacks in real time. Includes reentrancy detection, flash loan attacks, delegatecall exploitation, proxy hijacking, unauthorized minting, sandwich attacks, and scam token creation.

[Runtime Security Guards →](https://github.com/CryptoGuardrail/docs-v3-external/blob/main/guards/runtime/README.md)

### Asset Protection

Monitor balances, token flows, and fund movements to catch unauthorized withdrawals, drains, and suspicious transfers. Includes balance drop monitoring, token transfer limits, large outflow detection, NFT transfer checks, vault unstaking limits, and address poisoning protection.

### Smart Detection

AI-powered and pattern-based analysis to identify anomalies that rule-based guards might miss. Includes suspicious transaction detection, repeated swap and transfer patterns, function conflict analysis, illogical function loops, and high gas anomaly detection.

### Market & Price

Monitor oracle feeds, price deviations, pool manipulation, and market conditions. Includes Chainlink oracle health, Uniswap pool manipulation, token depegging, price deviation monitoring, open interest tracking, and swap anomaly detection.

### Protocol Operations

Track protocol-specific invariants, accounting integrity, and operational health. Includes supply vs. balance checks, deposit/escrow reconciliation, lending deadline monitoring, vault health checks, and Gnosis Safe multisig operations.

[Governance & Access Guards →](https://github.com/CryptoGuardrail/docs-v3-external/blob/main/guards/governance/README.md)

### Technical Monitoring

Low-level contract and infrastructure monitoring. Includes event tracking, function call monitoring, view function state checks, storage slot integrity, proxy upgrade detection, revert monitoring, and numeric argument validation.

### Solana

Purpose-built guards for Solana programs. Includes instruction monitoring, instruction argument checks, instruction frequency and sequencing, log analysis, and token balance tracking.

### Sui

Purpose-built guards for Sui Move contracts. Includes Move call monitoring, event tracking, object ownership and data changes, package publishing detection, and suspicious transaction analysis.

### Do It Yourself

Write your own guard logic in Python using custom blueprints. Trigger on blockchain events, function calls, or run on a schedule. Your code runs in a sandboxed environment with full access to transaction and trace data.

{% hint style="info" %}
**Need a custom guard?** Our security team can build guards tailored to your protocol's specific architecture. [Get in touch →](https://www.guardrail.ai/get-started)
{% endhint %}

## Custom Guards

Can't find what you need? Our security team builds custom guards for your specific architecture. We also support DIY guards where you write Python code to implement custom detection logic.

[Contact us for custom monitoring →](https://www.guardrail.ai/get-started)

For guard configuration and setup, see [App Documentation →](https://docs.guardrail.ai/app/guards)

***


# Runtime Security

Detect attacks that happen during transaction execution.

## Reentrancy Detection <a href="#reentrancy" id="reentrancy"></a>

Monitors when contracts or functions are called recursively before initial execution completes. Available at both contract-level and function-level granularity for precise coverage of withdraw, transfer, and critical state-changing functions.

**Related Incidents:** Penpie ($27M), Sumer Money, Minterest Finance

## Flash Loan Monitoring <a href="#flash-loan" id="flash-loan"></a>

Detects transactions that combine flash loan operations with calls to critical contracts or significant fund outflows. Catches manipulation attempts, price oracle attacks, and complex DeFi exploits using uncollateralized instant loans.

**Related Incidents:** Multiple oracle manipulation attacks

## Function Sequence Validation <a href="#function-sequences" id="function-sequences"></a>

Alerts if functions occur in unexpected sequences. Use whitelist mode to enforce atomic execution or blacklist mode to block dangerous patterns.

**Related Incidents:** Sonne Finance, DeltaPrime, UwU Lend

## External Call Protection <a href="#external-calls" id="external-calls"></a>

Enforces strict rules on which functions can be called immediately after specific contract interactions. Whitelist or blacklist specific call patterns to detect unauthorized interactions.

**Related Incidents:** Spectra, Dough Finance, LI.FI

## Illogical Function Loops <a href="#abusive-loops" id="abusive-loops"></a>

Detects suspicious function call patterns that shouldn't occur in the same transaction, like adding and removing liquidity atomically, or opening and liquidating a position in a single tx.

**Related Incidents:** Vyper exploit, Zunami

## Sandwich Attack Detection <a href="#sandwich" id="sandwich"></a>

Monitors for coordinated sandwich attacks, front-running, and back-running patterns. Identifies MEV bots, transaction reordering attacks, and mempool exploitation that steal value through slippage manipulation.

## Delegatecall Monitoring <a href="#delegatecall" id="delegatecall"></a>

Monitors delegatecalls to unauthorized functions that could compromise contract security. Detects malicious delegatecall attacks, unauthorized proxy calls, implementation manipulation, and access control bypasses.

## High Gas Detection <a href="#high-gas" id="high-gas"></a>

Identifies transactions with unusually high gas consumption that may indicate attack attempts, DoS attempts, infinite loops, reentrancy exploits, or computational abuse.

## Trace Call Frequency <a href="#trace-call-frequency" id="trace-call-frequency"></a>

Detects potential exploits by identifying excessive function call frequencies within single transactions.

{% hint style="info" %}
**Need a custom guard?** Our security team can build guards tailored to your protocol's specific architecture. [Get in touch →](https://www.guardrail.ai/get-started)
{% endhint %}

***


# Governance & Access

Monitor administrative actions, access control changes, and multisig operations.

## Multisig & Safe Monitoring <a href="#multisig-threshold" id="multisig-threshold"></a>

Comprehensive Gnosis Safe monitoring covering signature thresholds, ownership changes, module additions, guard configuration changes, transaction executions, and signature approvals. Alerts when required signer thresholds drop below safe levels or unauthorized changes are made.

**Related Incidents:** Radiant Capital ($50M)

## Admin Event Monitoring <a href="#admin-events" id="admin-events"></a>

Tracks critical contract events: ownership transfers, role grants, parameter changes, pauses, and upgrades. Configure which events to monitor and set alert thresholds for immediate visibility into administrative actions.

## Function Call Restrictions <a href="#function-restrictions" id="function-restrictions"></a>

Validates that restricted addresses can only call pre-approved functions. Detects privilege escalation and unauthorized access to admin operations through function allowlisting.

## Proxy Upgrade Monitoring <a href="#proxy-upgrades" id="proxy-upgrades"></a>

Validates contract upgrades are properly initialized after deployment. Detects uninitialized proxy vulnerabilities, storage slot corruption, and unauthorized implementation changes.

**Related Incidents:** Nomad ($190M), Ronin Bridge ($12M), LI.FI ($10M)

## Storage Slot Integrity <a href="#storage" id="storage"></a>

Monitors critical storage slots — especially proxy implementation addresses — for unauthorized changes. Detects storage manipulation attacks, proxy hijacking, and storage collision exploits.

{% hint style="info" %}
**Need a custom guard?** Our security team can build guards tailored to your protocol's specific architecture. [Get in touch →](https://www.guardrail.ai/get-started)
{% endhint %}

***


# Overview

Screen transactions for compliance and security risks before execution. Guardrail performs OFAC sanctions checks, address label lookups, and transaction simulation on each transaction, returning an overall **Ok** or **Not Ok** status.

## What Gets Checked

* **OFAC Sanctions** — Flags interactions with sanctioned addresses
* **Address Labels** — Identifies known entities, contracts, and risk-tagged addresses including phishing, exploits, drainers, and scams
* **Transaction Simulation** — Simulates the transaction to preview balance changes and detect unexpected behavior before signing
* **Contract Activity** — Reviews recent contract interaction history to flag suspicious or inactive contracts

## Integrations

Transaction screening plugs into your existing custody and signing workflow. Connect your custody platform to automatically screen transactions before they're signed, or integrate directly via API for custom workflows.

Current integrations include Fireblocks, with more custody platforms coming soon.

{% hint style="info" %}
**Want to set up transaction screening?** We can walk you through the integration for your specific workflow. [Get in touch →](https://www.guardrail.ai/get-started)
{% endhint %}

***


# Supported Chains

Guardrail supports 45+ blockchain networks. We can add support for any EVM-compatible chain with archive and tracing RPC access.

## Popular Chains

| Chain    | Mainnet | Testnet          |
| -------- | ------- | ---------------- |
| Ethereum | ✓       | Sepolia, Holesky |
| Base     | ✓       | Sepolia          |
| Arbitrum | ✓       | Sepolia          |
| Optimism | ✓       | Sepolia          |
| Polygon  | ✓       | Amoy             |
| Solana   | ✓       | Devnet           |
| Sui      | ✓       | Testnet          |
| Monad    | ✓       | Testnet          |

## Full Chain List

### EVM Mainnets

Arbitrum, Arbitrum Nova, Avalanche, Base, Berachain, BNB Chain, Blast, Celo, Ethereum, Fantom, Flare, Fraxtal, Gnosis, Gravity, Hedera, HyperEVM, Hyperliquid, Immutable zkEVM, Ink, Kaia, Lens, Linea, Lisk, Mantle, Mode, Monad, Morph, Optimism, Peaq, Plasma, Plume, Polygon, Polygon zkEVM, Redstone, Scroll, Sei, Soneium, Sonic, Story, Unichain, World Chain, Xai, zkSync, Zora

### Non-EVM

Solana, Sui

### Testnets

Ethereum Sepolia, Ethereum Holesky, Base Sepolia, Arbitrum Sepolia, Optimism Sepolia, Monad Testnet, and testnets for most supported mainnets.

## Adding a New Chain

Need a chain not listed? We can add support for any network with:

* Archive node access
* Debug tracing support (for EVM chains)

{% hint style="info" %}
**Need a chain not listed?** We can add support for any EVM-compatible network with archive and tracing RPC access. [Get in touch →](https://www.guardrail.ai/get-started)
{% endhint %}

***


# Alert Channels

Guardrail delivers alerts through multiple channels. Configure different channels for different guard severities.

## Supported Channels

| Channel   | Real-time | Resolution | Threading |
| --------- | --------- | ---------- | --------- |
| Slack     | ✓         | ✓          | ✓         |
| Discord   | ✓         | ✓          | ✓         |
| PagerDuty | ✓         | —          | —         |
| Telegram  | ✓         | —          | —         |
| Webhooks  | ✓         | —          | —         |

## Alert Features

**Sub-second delivery** — Alerts fire on transaction confirmation.

**Interactive resolution** — Resolve alerts directly from Slack or Discord.

**Alert grouping** — Suppress duplicate alerts with configurable windows.

**Severity levels** — Route critical vs. informational alerts to different channels.

**Custom formatting** — Tailor alert messages for your team's workflow.

For setup instructions, see [App Documentation →](https://docs.guardrail.ai/app/alerts)

***


# Response Actions

Guardrail can automatically execute on-chain transactions when a guard detects a threat - responding in seconds without manual intervention.

<figure><img src="https://818258224-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FgMfPgPt8Iu1wrPze8HXT%2Fuploads%2Fgit-blob-ed65475f232a432326a8bcc177b780f8274f90bf%2Fresponse-action-slack-notification.png?alt=media" alt="A Slack notification showing a guard alert with a successful response action that paused a contract" width="563"><figcaption><p>A guard alert triggers an automatic on-chain response - here, calling pause() on a contract - with the result delivered to your alert channels.</p></figcaption></figure>

## Capabilities

* **Automated On-Chain Response** - Configure smart contract function calls that fire automatically when a guard alerts. Pause contracts, revoke permissions, or trigger any on-chain action your protocol needs.
* **Dedicated Wallets** - Each response action gets a dedicated, securely encrypted wallet used only for that specific action. Wallets are single-purpose by design.
* **Gas Management** - Gas for reasonably-sized response action transactions is funded and managed by Guardrail. No need to maintain ETH balances in action wallet.
* **Simulation** - Test response actions before going live with dry-run simulation to verify permissions and function calls are configured correctly.
* **Cooldown Controls** - Configurable cooldown periods prevent redundant on-chain calls when a guard alerts repeatedly.
* **Integrated Notifications** - Response action results are included in your existing alert channel notifications (Slack, Discord, Telegram, etc.) with transaction hash, status, and gas usage.
* **Transaction History** - Full audit log of every response action execution with status, timestamps, and on-chain transaction details.

<figure><img src="https://818258224-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FgMfPgPt8Iu1wrPze8HXT%2Fuploads%2Fgit-blob-ab89e7503ee039e3b24d9ccb5aa4757c6e30de23%2Fresponse-actions-tab.png?alt=media" alt="The Response Actions tab showing a configured response action with its contract address, function signature, wallet, and action buttons"><figcaption><p>A configured response action with simulate, execute, and history controls.</p></figcaption></figure>


# Case Studies

See how protocols use Guardrail for real-time security monitoring.

***

### Euler Labs

> "Guardrail excels in price monitoring and price deviation by far compared to any of the tools in the market." — Erik Arfvidson, Head of Cybersecurity

**Challenge:** Managing multiple monitoring tools across chains with limited bandwidth to optimize configurations.

**Solution:** Consolidated from 3 tools to 1. Automated guard updates for new vault deployments. Reduced operational burden.

[Read full case study →](https://www.guardrail.ai/case-studies/euler-labs)

***

### Avantis

> "We don't have a security-focused engineer. Guardrail is our security engineer on the contract side. We cannot build out what you guys are building—the future of predictive threat detection." — Sehaj Singh, Founder

**Challenge:** Needed robust monitoring before mainnet launch without dedicated security personnel.

**Solution:** Implemented smart contract monitoring pre-launch. Formalized security processes. Saved significant engineering hours.

[Read full case study →](https://www.guardrail.ai/case-studies/avantis)

***

### Concero

> "I know a lot of people who use Guardrail, and I've been approached by many Guardrail competitors. But no one can tell me anything that will convince me not to use Guardrail." — Andy Bohutsky, Founder

**Challenge:** Cross-chain bridge security in a space where 50%+ of losses occur.

**Solution:** 1-day implementation. Real-time cross-chain message validation. Early detection of transaction anomalies.

[Read full case study →](https://www.guardrail.ai/case-studies/concero)

***

### BadgerDAO

> "Guardrail provides peace of mind, tying directly into our PagerDuty system and actively monitoring critical positions. We've avoided costly liquidation events thanks to timely alerts." — Saj Raj, Core Contributor

**Challenge:** Complex vault strategies across multiple chains with liquidation risk during volatility.

**Solution:** PagerDuty integration. Proactive monitoring of critical positions. Reduced operational burden.

[Read full case study →](https://www.guardrail.ai/case-studies/badger)

***

### Credit Coop

> "The level of automation Guardrail brings to monitoring is going to be really crucial as the number of smart contracts we deploy increases exponentially." — Thomas Hepner, CTO & Co-Founder

**Challenge:** Scaling from P2P lending to complex vault products with increased risk profile.

**Solution:** Real-time monitoring across 5 chains. Custom integrations for on-chain credit infrastructure. $3.75M refinance facilitated with instant notification.

[Read full case study →](https://www.guardrail.ai/case-studies/credit-coop)

***

### Bluefin

> "It becomes very real when you have to put your own money in the system. Guardrail helped us model potential threats beyond basic security." — Francesco Mifsud, Security Lead

**Challenge:** Identifying manipulation attempts in a high-stakes trading environment.

**Solution:** Behavioral threat modeling. Quick response capability for suspicious activity.

[Read full case study →](https://www.guardrail.ai/case-studies/bluefin)

***


# Pricing

Security monitoring plans built for every stage.

<figure><img src="https://818258224-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FgMfPgPt8Iu1wrPze8HXT%2Fuploads%2Fgit-blob-06346b89ed9fe4b72a320313d66c7d7af65f3cbd%2F50.png?alt=media" alt=""><figcaption></figcaption></figure>

## Starter

For teams getting started with security monitoring.

* Pre-built security blueprints
* Real-time alerts
* Community support
* Major chain coverage

**Best for:** Early-stage protocols, individual developers

## Professional

For protocols that need custom protection.

* Everything in Starter
* Custom guard development
* Dedicated security researcher
* Automated response actions
* Advanced AI detection

**Best for:** Growing DeFi protocols, multi-chain projects

## Enterprise

For institutions managing serious risk.

* Everything in Professional
* 24/7 incident response
* Compliance reporting
* White-glove onboarding
* Custom SLAs

**Best for:** Large protocols, exchanges, regulated entities

## Add-On Services

* Security audit integration
* Custom chain support
* Incident response retainer
* Team training

[Book a consultation →](https://www.guardrail.ai/get-started)

***


# Support

## Getting Help

**Email** — <support@guardrail.ai>

**Security Issues** — <security@guardrail.ai> (for responsible disclosure)

## Resources

* [Blog](https://www.guardrail.ai/blog) — Security research and product updates
* [Twitter](https://twitter.com/guarabordrail_ai) — Announcements
* [Podcast](https://www.guardrail.ai/blog/intro-to-guardrail-samridh-saluja-interview-april-2025) — Deep dives on DeFi security

***


# Changelog

Product updates and new features. Updated monthly.

***

## January 2026

### New Features

* **Solana Support** — Full Solana chain indexing and guard support
* **Simulate Page Redesign** — Improved UI for testing guards against transactions
* **Threat Intel API** — Programmatic access to global threat data
* **7702 Code Change Checker** — Detect EIP-7702 wallet code changes

### New Chains

* Solana (mainnet)
* Ethereum Sepolia testnet

### Guard Updates

* Solana token balance change guard
* Sui event frequency guard
* Improved event guards with ABI decoding

### Platform

* Dashboard page with guard overview
* Filter guards by response channel
* Address book and address list refactor

***

## December 2025

### New Features

* **Fireblocks Integration** — Transaction screening for Fireblocks users
* **Dashboard Page** — At-a-glance view of your security posture
* **Default Response Channels** — Set organization-wide alert defaults

### New Chains

* HyperEVM testnet
* Flow testnet

### Guard Updates

* Sui periodic triggers
* Sui move call guard types
* Euler oracle indexing improvements

### Platform

* Improved guard configuration UI
* Mobile-friendly setup wizard
* Better error handling for simulation

***

## November 2025

### New Features

* **Sui Support (Beta)** — Initial Sui chain support with basic guards
* **Alert Details Page** — Dedicated page for investigating alerts
* **Guard Filtering** — Filter guards table by type

### New Chains

* Sui (mainnet, beta)
* Monad testnet

### Guard Updates

* Sui object ownership change detection
* Sui publish guard
* Improved suspicious transaction detection

### Platform

* Multi-organization login
* Public API documentation
* Rate limiting for DIY guard RPC access

***

## October 2025

### New Features

* **DIY Guards GA** — Write custom Python guards with full RPC access
* **Guard Recommender** — AI-powered guard suggestions based on your contracts
* **Organization API Keys** — Programmatic access to Guardrail API

### Guard Updates

* Token price monitoring v3
* Euler adapter price deviation guard v5
* Uniswap v4 support

### Platform

* Guard assistant for code generation
* Improved code editor with syntax highlighting
* Local storage for DIY guard drafts

***

## September 2025

### New Features

* **DIY Guards Beta** — Custom Python guards with sandbox execution
* **Periodic Guards** — Guards that run on intervals, not just transactions
* **Address Lists** — Sync addresses across multiple guards

### New Chains

* Sui (initial support)

### Platform

* Bulk edit guard fields
* Guard simulation queue
* Improved RPC proxy security

***

## Earlier Releases

For releases prior to September 2025, contact <support@guardrail.ai>.


