DeFi risk intelligence
A risk reading you can show after the incident.
Every DeFi protocol reading names its sources, carries its date and says what it could not see. Hold one? We tell you the day it changes.
Paid only by readers. No audits, no vaults, no cover, no fees from protocols.
Pick one protocol you hold and get a free weekly summary of what changed.
Pick your protocolEvery score, with its evidence and reasoning, is free to read. No account required.
Managing a fund, treasury, or insurance portfolio? Explore institutional monitoring
Two services
Protocols
What is changing in what you hold
Dated, sourced readings of DeFi protocols, re-checked daily, with an email when something material moves. Free to read; a plan adds alerts, positions and export.
Browse the libraryForensics
What happened in this incident
A verified report on one exploit: coverage determination, verified loss amount and a technical attack breakdown, reviewed before it reaches you.
How an investigation worksHow it works
- 1
Select protocols
Choose the protocols you want to monitor from covered assessments.
- 2
Monitor risk factors
Governance, administrative controls, audits, incidents, dependencies, and other protocol-level factors.
- 3
Receive assessment updates
When new information materially affects an assessment, the risk view updates and the reason is recorded.
- 4
Review affected positions
Enter position sizes per protocol to see exposure in context.
- 5
Review the evidence
Evidence, confidence, and assessment history before acting.
What the service does, and does not do
Monitoring
Every protocol on your watchlist is checked daily for the changes listed below: administrative and upgrade permissions, oracle and bridge dependencies, published status warnings, live governance proposals, and sharp TVL swings. When a check finds something material, the alert is emailed to you. This is not transaction-level exploit detection: Foreshock monitors changes in protocol-level risk, and does not guarantee instant detection of every attack.
Positions
Position tracking is manual entry per monitored protocol. Foreshock does not connect to wallets, does not request private keys, does not sign transactions, and cannot move funds.
Alerts
Alerts are delivered by email, either immediately or as a digest, configurable per protocol.
Score band change
Score movement beyond threshold
TVL swing
Dependency change
Admin or upgrade change
Status warning
Governance decision
New incident recorded
Audit recorded
Governance concentration change
Data sufficiency change
Export
Watchlist and assessment data export as CSV and JSON on every paid plan.
DeFi risk intelligence for different decision environments
For Curators and Funds
Show your allocators the basis for every market you list, dated before anyone asked. Monitor the protocols behind your positions and get an email when their risk profile materially changes: track exposure across a portfolio, document decisions with evidence, and export assessment data for internal review. For funds and risk teams this is a single-account workflow today: internal reporting goes through export and the evidence trail, not a shared account.
For DAOs and Treasuries
The protocols your treasury holds, read and dated, and told the day one changes. Review allocations against those readings and attach evidence-backed summaries to proposals - DAO decisions should not depend on an unexplained score, so Foreshock shows the principal drivers, confidence, known gaps, and history behind every assessment.
For Insurers
Price DeFi cover on dated, sourced evidence: full protocol assessments before you underwrite, an alert when anything material changes during the coverage period, and per-incident forensic investigation that determines whether a loss falls inside the policy wording.
Readings that name their sources
Every assessment states how much of the rubric was verified and what drives the score, category by category. Free to read, no account required; the underlying dependency, incident and audit records are part of a plan.
| Protocol | Score | Evidence | Primary concern | Updated | |
|---|---|---|---|---|---|
| Ronin Bridge | 65.5 | 100% verified | Audit coverage | 2026-09-25 | View → |
| Belt Finance | 63.5 | 100% verified | Incident history | 2026-09-25 | View → |
| Unit | 62.5 | 100% verified | Audit coverage | 2026-09-25 | View → |
| Lista CDP | 62.3 | 100% verified | Audit coverage | 2026-09-06 | View → |
| SolvBTC | 62.0 | 100% verified | Incident history | 2026-09-06 | View → |
| Radiant V2 | 61.3 | 100% verified | Incident history | 2026-09-06 | View → |
Tested against historical protocol incidents
1 335
incidents in the ledger
Cross-referenced between DeFiLlama and Rekt.news, plus a partial set of Nexus Mutual claims.
269
scored point-in-time
Each scored using only what was knowable the day before it happened, against 512 matched controls.
19x
repeat-incident lift
A protocol hacked once reaches a second incident at roughly 19 times the rate of one picked at random.
Backtesting does not prove an exploit will or will not occur, and the precision figures from that work describe an earlier version of the rubric. The methodology states both, along with what the test could not cover.
Monitor the protocols behind your DeFi positions.
The protocol library and methodology are free to read without an account: every score, its evidence percentage and its reasoning, category by category. A plan adds alerts that say what moved, daily re-checks on what you hold, position tracking, the records themselves, and CSV and JSON export.
Plans from $59 a month for 10 protocols. See pricing.