
New capabilities continuously discover onchain exposure, map third-party dependencies, and detect ecosystem-wide threats before they reach a team’s assets
NEW YORK, Sept. 10, 2026 /PRNewswire/ — Blockaid announced an expansion of its Onchain Monitoring capabilities as crypto attacks increasingly shift beyond smart contracts and into the infrastructure surrounding them. It found that 74% of stolen crypto value in H1 2026 came from operational and infrastructure compromises rather than traditional smart-contract vulnerabilities, while the number of incidents was roughly 3.4x the total Blockaid recorded across all of 2025.
A compromised signer, outdated deployment, vulnerable third-party protocol, or shared piece of infrastructure can expose every asset and application connected to it. Blockaid’s expanded Onchain Monitoring suite is designed to continuously identify how an organization’s onchain footprint, and the risks surrounding it, change over time.
The launch introduces three core capabilities:
- Auto-discovery continuously identifies assets, contracts, and protocols associated with a team’s onchain footprint and automatically expands monitoring as new deployments, upgrades, and integrations go live.
- Dependency mapping identifies the protocols and shared infrastructure a business relies on but does not control, giving teams visibility into risks that can propagate into their own systems.
- Ecosystem Incidents Feed surfaces security incidents detected across Blockaid’s broader network, helping teams understand when an exploit elsewhere in the ecosystem could affect their assets, positions or users.
Recent incidents have shown that exploits involving shared infrastructure, governance systems, and privileged controls can now affect multiple protocols or businesses at once. A vulnerability does not need to originate inside your own code to become your problem. Onchain Monitoring is built to close that gap.
The suite allows teams to onboard their assets once, while Blockaid continuously updates coverage as their environment evolves. System monitors track market and liquidity signals including large liquidations, liquidity changes, oracle deviations and APR movements alongside privileged activity such as contract upgrades, ownership changes, role grants, pause events and parameter updates.
When suspicious activity appears, Blockaid combines real-time machine learning with deeper automated investigation. Blockaid’s investigative agents can inspect contract bytecode, resolve proxies, analyze permissions, trace internal calls, simulate transactions and examine historical behavior to determine whether abnormal activity represents an actual threat.
That context is increasingly important as attackers use automation and AI to identify vulnerabilities faster, while security teams face a growing volume of activity that can look anomalous without being malicious. Detection is also connected directly to response. Where an attack pattern is clear, teams can configure automated workflows including onchain circuit breakers that execute when malicious conditions are detected. For complex incidents, Blockaid’s threat intelligence team works directly with customers through a 24/7 incident war room to investigate the attack and coordinate remediation.
For trading firms or financial institutions like market makers or hedge funds, that can mean identifying an external protocol failure before it reaches a position. For issuers, it means tracking every deployment and the infrastructure supporting their assets. For DeFi protocols and blockchain networks, it means understanding how an incident can spread through interconnected applications before the blast radius expands.
Onchain Monitoring is live today. Request a Demo to get started at blockaid.io/demo
About Blockaid
Blockaid is the onchain security platform trusted by the largest companies operating in Web3. Built by veterans of elite intelligence and cybersecurity units, Blockaid provides end-to-end protection for financial institutions, protocols, and end users, combining direct wallet and dApp integrations with real-time monitoring, detection, and response across smart contracts, infrastructure, and externally owned accounts. Since 2025, Blockaid scanned over 6.3 billion transactions and blocked 585 million attacks. Blockaid is the security infrastructure behind Coinbase, MetaMask, Uniswap, Safe, and dozens of the most widely used platforms in the industry.
Learn more at blockaid.io, and follow us on Twitter and LinkedIn.
SOURCE Blockaid
