Blockaid

Blockaid is a real-time Web3 security platform that intercepts malicious transactions, tokens, dApps, and addresses before a user ever signs—functioning as a prevention layer embedded directly inside wallets, decentralized applications, and exchanges across 55+ chains, including Solana.

Core Mechanism

Blockaid's security engine draws on three interlocking data sources to issue verdicts in under 300 milliseconds. The first is a Customer Data Network: direct integrations with high-volume wallets and dApps feed transaction telemetry back into shared threat models, so patterns seen on Coinbase Wallet are immediately surfaced for MetaMask users and vice versa. The second is Onchain Analysis: machine-learning models trained on indexed blockchain data use clustering algorithms to identify new drainers, rug-pull contracts, and MEV-collusion patterns as they emerge. The third is Offchain Intelligence: continuous internet-wide scanning catches phishing infrastructure and compromised frontend domains before they interact with the chain at all.

When a user connects to a dApp or initiates a transaction, Blockaid returns a structured security verdict—benign, warning, or malicious—with context explaining the finding. The integration lives inside the wallet or protocol UI; users do not install a separate tool.

Product Suite

End-User Protection is the flagship product. It covers four attack surfaces simultaneously: transaction simulation and pre-signature analysis, address screening to block transfers to known drainer or sanctions-linked accounts, token scanning to filter honeypots and fee-on-transfer traps, and dApp scanning to block connections to spoofed or compromised frontends. The combination means a wallet user touching a malicious Uniswap clone, a drainer-linked approval, and a scam token on the same afternoon gets flagged at each step rather than only at one.

Onchain Monitoring targets DeFi builders and asset managers. Protocols subscribe to continuous alerts when behavior deviates from expected patterns across treasury wallets, multisig accounts, smart contracts, and mempools. For Solana, the March 2026 expansion added three capabilities: Program Interface Visibility (direct inspection of program interface data for monitored assets), Instruction-Level Monitoring (precise alerts triggered by specific Solana instruction execution, filterable on parameters like authorityType, amount, and caller address), and Solana Formula Metrics (two new metric types—Read Data Account for tracking account state changes and Instruction Metric for aggregating activity over time).

Crypto Fraud Prevention is aimed at centralized exchanges and fintech platforms. It identifies complex social-engineering patterns—including pig-butchering flows—before funds move, giving compliance teams a programmatic decision signal rather than requiring manual review.

Cosigner adds a policy enforcement layer that intercepts transactions at the signing stage, allowing platforms to enforce rules such as blocking withdrawals to unlisted addresses or pausing activity during anomalous periods.

Risk Exposure is Blockaid's compliance product, enabling real-time policy screening for institutional participants like hedge funds and prime brokers.

Solana Ecosystem Fit

Solana's combination of high throughput, 3 million daily active addresses, and $1.7 trillion in DEX volume processed during 2025 makes it a high-value target for the same drainer and phishing infrastructure that has drained billions from EVM ecosystems. Blockaid expanded full Solana coverage in March 2026, bringing all four core products to the chain.

Key Solana-native integrations include Backpack (the Solana-first wallet) and Jupiter (the dominant DEX aggregator), both of which surface Blockaid security verdicts to their users. The instruction-level monitoring tools are designed around Solana's account and program model rather than being ported from EVM equivalents, supporting native parameters from Solana program instructions.

Scale and Track Record

Across all supported chains, Blockaid's network has scanned over 5.9 billion transactions, secured more than $431 billion in assets, stopped more than 585 million attacks, and prevented an estimated $14.7 billion in theft. These figures reflect cumulative totals as of mid-2026. The detection accuracy rate has improved by more than 25% as the customer data network has grown—an explicit network effect built into the architecture: more integrations produce higher-quality models that benefit all participants.

Notable integrations span the breadth of the crypto stack: wallets (Coinbase Wallet, MetaMask, Ledger, Rainbow, Backpack, Core, OKX), DeFi and trading (Jupiter, Uniswap, Zerion, Polymarket, Hyperliquid), marketplaces (OpenSea, DEX Screener), and institutional infrastructure (Anchorage, FalconX, Stellar, World).

Team and Funding

Blockaid was founded in 2022 by Ido Ben-Natan (CEO) and Raz Niv, both alumni of Unit 8200, the Israeli military intelligence signals unit, and former Cyber Security R&D Team Leads at the Office of the Prime Minister of Israel—a role for which they received the Israel Defense Prize. The company's founders drew on offensive cyber experience to build a prevention-first security model, reasoning that in security, catching attackers after the fact is far less effective than blocking the attack path entirely.

The company has raised $83 million across three rounds. A $27 million Series A was led by Sequoia Capital and Greylock, with Cyberstarts participating as the first institutional seed investor. In February 2025, Blockaid closed a $50 million Series B led by Ribbit Capital, with additional participation from GV and returning investors Variant and Cyberstarts. The Series B capital is allocated to expanding research capabilities for emerging threat classes, scaling product and engineering to meet enterprise demand, and strengthening go-to-market operations for both protocol and institutional customer segments.

Security and Audits

Blockaid's security claims rest on the same adversarial foundation as its team's background: the platform is built to be updated continuously as attack patterns evolve rather than relying on static lists. The onchain monitoring tools are designed to detect deviations from expected protocol behavior—a technique that surfaces novel exploits before they are publicly categorized. The blog has documented retrospective analysis of major 2025-2026 exploits including the Aztec drain, JaredFromSubway MEV bot attack, and the broader trend of compromised private keys as the leading DeFi loss vector, which informs how the threat models are tuned.

Summary

Blockaid sits at the infrastructure layer of Web3 security, embedded inside the products that users already trust rather than asking them to adopt a new tool. Its expansion to Solana in 2026—with Solana-native instruction monitoring rather than an EVM port—positions it as the most deeply integrated security layer available to Solana wallet and protocol developers. With $83 million in institutional backing, a team with offensive-intelligence credentials, and integrations across the ecosystem's highest-volume venues, Blockaid is the primary candidate when wallets and protocols need a pre-signature security layer they can ship to millions of users.