DeFi Threat Detection Kit
Frequent Doc Updates
Forta will continue to add more curated security bots in the coming months, so stay tuned and come check this page frequently for new updates!
Bot Name | Bot Details/Template Link | Bot Description |
---|---|---|
Anomalous Token Transfers Detection Machine Learning Bot | Bot Details | Alerts on anomalous transactions with erc2 token transfers. |
Anomalous Transaction Volume | Bot Details | Alerts on anomalous transaction volume (both successful and failed). |
Asset Drained Bot | Bot Details | Alerts on assets being drained from a contract. |
Attack Detector Feed (aka Alert Combiner) | Bot Details | Combines past alerts under a common address to emit a high precision alert around protocol attacks. |
Chainalysis Sanctioned Addresses | Bot Details | Alerts when a Chainalysis sanctioned account interacts with the address monitored. |
Exploiter Addresses | Bot Details | Alerts when known exploiter address interacts with the address monitored. |
FlashBots Detector | Bot Details | Alerts when a transaction is routed through FlashBots framework bypassing the mempool. |
Flash Loan Detector | Bot Details | Alerts when a flash loan results in large profits indicative of an attack |
Ice Phishing Detection Bot | Bot Details | Alerts when ice phishing (social engineer users into token approvals) for a token contract monitored. |
Large Balance Decreases | Template available on Bot Wizard 🧙 | Identifies when the balance of an account decreases significantly. Note, this template has been deployed for the following bridges: Polygon, Avalanche, Arbitrum, Near/Aurora, Optimism, Harmony, xDAI, Boba, Ronin, THORChain and Multichain/Anyswap. |
Mint/Borrow Value Anomalies | Bot Details | Alerts when mint/borrow volume is changing in a statistically significant way. |
Monitor Events | Template available on Bot Wizard 🧙 | Monitors blockchain transactions for specified events emitted from specified contract addresses. This template can be used to alert events emitted from functions that should only be callable by privileged roles. |
Monitor Function Calls | Template available on Bot Wizard 🧙 | This bot monitors blockchain transactions for specific function calls to specific contract addresses. This template can be used to alert on function calls that should only be callable by privileged roles. |
OpenZeppelin-Gnosis Safe Contract Events | Bot Details | Alerts on security relevant events of the OZ contract library/ Gnosis Safe contact instances. |
Price Change Anomalies | Bot Details | |
Re-entrancy counter | Bot Details | Alerts when reentrancy on the contract monitored is detected. |
Suspicious Contract Creation | Bot Details | Alerts on contract creation that contained the address monitored. |
Time Series Analyzer Template | Template available on Bot Wizard 🧙 | This template turns an underlying noisy alert representing a time series into a statistically meaningful alert when values become abnormal. |
Token Impersonation | Bot Details | Alerts when an existing token is being impersonated by a newly created contract. |
Tornado Cash Funded Account Interaction | Bot Details | Alerts when a Tornado Cash funded account interacts with the address monitored. |
Unverified Contract Creation | Bot Details | Alerts on contract creation that isnt verified on Etherscan. |