Blockaid

Blockaid is an onchain security platform that describes itself as "the trust layer for onchain finance." Founded in 2022 by former Israeli cyber intelligence operatives and emerging from stealth in October 2023, the company provides real-time detection and prevention of scams, fraud, smart contract exploits, and compliance risks across wallets, decentralized applications, DeFi protocols, and centralized exchanges.

The Problem

Web3 security failures fall into several recurring categories: phishing and wallet drainer attacks targeting end users, smart contract exploits draining protocol treasuries, social engineering schemes like pig butchering, supply chain attacks compromising frontend infrastructure, and compliance exposure through interactions with sanctioned addresses. Blockaid's platform is designed to address all of these across the full transaction lifecycle — before a user signs, while funds move, and during post-incident investigation.

How It Works

Blockaid employs a three-layered threat detection approach. The first layer draws on customer transaction data flowing through its integrations. The second layer indexes onchain intelligence across supported blockchains using machine learning models and rule-based heuristics. The third layer performs offchain internet scanning to identify emerging threats — such as phishing domains, malicious NPM packages, or compromised frontends — before they reach the chain.

The core transaction security engine simulates the full onchain impact of a transaction before a user signs, with P99 latency under 300 milliseconds. It supports EIP-712 and EIP-4337 standards as well as bulk transactions. Beyond simulation, the engine evaluates every address involved in a transaction against a continuously updated threat database, flagging transfers to malicious addresses, address poisoning attempts, and interactions with OFAC-sanctioned entities.

Products and Features

Blockaid's platform is organized around four functions — Monitor, Detect, Respond, and Investigate — delivered through four product lines:

End User Protection provides wallets and dApps with real-time scanning of transactions, tokens, dApps, and addresses. Integration partners include MetaMask, Coinbase, Kraken, Ledger, Safe, Backpack, Rainbow, and Zerion. Blockaid estimates it is embedded in more than 90% of major Web3 wallets.

Onchain Monitoring gives DeFi operators continuous visibility into their onchain assets, infrastructure, and treasury positions. The system tracks wallets, smart contracts, multisig wallets, sequencers, externally owned accounts, mempools, and validators. Alerts can be configured for anomalous behavior including MEV attacks, liquidity anomalies, abnormal mints, and authority changes.

Crypto Fraud Prevention is aimed at centralized exchanges and traditional financial institutions, detecting fraud patterns in real time before fund movement occurs.

Cosigner is a transaction co-signing module that acts as an active enforcement layer, allowing teams to define policies and deny transactions that violate them — hardening wallet operations beyond passive alerting.

Solana Support

Blockaid supports Solana natively across all four product lines. In March 2026, the company expanded its Onchain Monitoring capabilities on Solana with three additions. Program Interface Visibility grants direct access to program interface data within the platform, removing the need for external explorers. Instruction-Level Monitoring enables targeting of specific instruction executes on a monitored account with filtering on parameters like authorityType and amount. Solana Formula Metrics introduced two new metric types — Read Data Account and Instruction Metric — enabling pattern detection such as volume spike alerts and configuration drift warnings.

Earlier Solana coverage includes full transaction scanning, token and dApp scanning, and address risk evaluation. Backpack is among the Solana-native wallet integrations listed on the platform page. Blockaid has also published detailed post-mortems on major Solana incidents, including the Drift Protocol governance attack in which the protocol lost over half of its TVL.

Scale and Track Record

As of early 2025, Blockaid reported scanning more than 2.4 billion transactions, blocking over 71 million attacks, preventing an estimated $5.3 billion in potential losses, and securing more than $101 billion in assets. The platform actively publishes exploit detection alerts — in July 2026, Blockaid's systems identified an ongoing exploit on Summer Finance in real time via its public feed.

Team and Funding

Blockaid was co-founded by Ido Ben-Natan and Raz Niv, both veterans of Unit 8200, the Israeli military's cyber intelligence unit, and former members of the Office of the Prime Minister of Israel. The company's security research team includes more than 20 former Unit 8200 personnel. Offices are maintained in New York and Tel Aviv.

The company has raised $83 million across three rounds: a $6 million seed led by Cyberstarts with participation from Sequoia Capital and Greylock Partners; a $27 million Series A co-led by Ribbit Capital and Variant; and a $50 million Series B led by Ribbit Capital with additional participation from GV (Google Ventures), Variant, and Cyberstarts.

Ecosystem Fit

Blockaid positions itself as infrastructure rather than a consumer product — a security layer embedded inside wallets, interfaces, and protocols rather than a standalone tool users interact with directly. On Solana, this means its protections surface within existing applications like Backpack without requiring users to change behavior. The expansion of Solana-specific monitoring capabilities, particularly instruction-level detection, reflects Solana's growing share of onchain activity and the corresponding increase in the sophistication of attacks targeting it.