Terms of Service

Version: 0.6.1.

These terms describe the Service as it operates today.

1. Definitions

1.1 The Foreshock service ("Foreshock", "we", "us") is operated under the trading name Foreshock, together with its successors and assigns. Contact for all matters relating to these terms, including legal notices: contact@foreshock.tech. Where the Service is later operated by a different entity, whether by incorporation, transfer or assignment, references to Foreshock mean that entity, and these Terms continue to apply unchanged.

1.2 "Service" means Foreshock's risk-intelligence product, comprising the public library and scoreboard, the monitoring and alerting product, and the forensics investigation product.

1.3 "you" or "Client" means the person or entity accessing or using the Service.

1.4 "Methodology" means Foreshock's published risk-scoring methodology, as amended and versioned from time to time and published as the Methodology summary at https://foreshock.tech/methodology.

1.5 "Score" means a numerical risk assessment produced for a protocol under the Methodology.

1.6 "Alert" means a notification generated by the monitoring product under a Client's configured alert preferences.

1.7 "Report" means a forensic investigation report delivered to a Client under an Engagement, as defined in and governed by the Forensic Engagement Terms, published at https://foreshock.tech/forensics/engagement-terms.

1.8 "Determination" means the conclusion stated in a Report following independent review under the Forensic Engagement Terms, as distinct from any unreviewed system-generated draft.

1.9 "Engagement" means a specific forensic investigation engagement between Foreshock and a Client, governed by the Forensic Engagement Terms in addition to these terms.

2. What the Service Is and Is Not

2.1 Foreshock provides research and analysis: Scores, Methodology documentation, incident and audit history, Alerts, and Reports.

2.2 Foreshock is not a financial adviser, legal adviser, or insurance adviser. Nothing in the Service is financial, legal, or insurance advice.

2.3 No Score, Alert, or Report is a guarantee of any outcome, including that a protocol assigned a lower-risk Score will not be exploited, or that a Report's Determination will be accepted by any insurer, decentralized autonomous organization, or counterparty.

2.4 The Service states what the available evidence shows, in observational terms. You are responsible for your own decisions, including whether and how to rely on the Service.

3. Accounts and Eligibility

3.1 An account is required to use the monitoring product or to submit a forensics request as an authenticated Client. Anonymous forensics requests do not require an account.

3.2 You are responsible for keeping your account credentials secure and for all activity under your account.

3.3 You may delete your account at any time from https://foreshock.tech/app/settings. The Privacy Policy states what account deletion does and does not remove.

3.4 Foreshock may suspend or terminate an account for breach of these terms, including the Acceptable Use restrictions in clause 4.4.

3.5 An account is for use by a single person or entity. Plan capacity may not be split across multiple accounts held by the same person or entity in order to reach a higher tier's capacity at a lower combined cost than that tier. Doing so is a breach of these terms under clause 3.4.

4. Rights and Obligations of the Parties

4.1 Foreshock's rights. Foreshock may suspend or terminate an account for breach of these terms, as stated in clause 3.4, and may amend these terms as stated in clause 14.

4.2 Foreshock's obligations. Foreshock will operate the Service consistently with the Methodology as published at the time each Score, Alert, or Report is generated.

4.3 Client's rights. You may use the Service in accordance with the Methodology as published, delete your account and associated data as stated in clause 3.3, and dispute a Report's Determination as provided in the Forensic Engagement Terms.

4.4 Client's obligations (Acceptable Use). You agree not to:

4.4.1 scrape, systematically extract, or redistribute the library, scoreboard, or any Foreshock content or data for a competing product, a derivative dataset, or resale, without a separate written agreement;

4.4.2 reverse-engineer the Methodology in order to circumvent it, misrepresent it, or present Foreshock's analysis as your own without attribution where attribution is expected;

4.4.3 use the Service to violate any law applicable to you, or to misrepresent a Score, Alert, or Report as something it is not, including as a regulatory approval, an insurance underwriting decision, or investment advice;

4.4.4 interfere with the Service's operation, including by making excessive automated requests outside any separately agreed API terms.

4.5 Accuracy of information. You are responsible for the accuracy of information you submit to the Service, including watchlist and position data, contact details, and protocol information submitted through a coverage or protocol-check request. Foreshock's liability under clause 10 does not extend to a Score, Alert, Report, or other output affected by inaccurate information you submitted.

5. Fees and Payment

5.1 Monitoring is offered on paid subscription tiers, billed monthly or annually, at the pricing published at https://foreshock.tech/pricing.

5.2 You may upgrade, downgrade, or cancel a subscription from https://foreshock.tech/app/settings. Cancellation takes effect at the end of the current billing period, not immediately, unless stated otherwise at checkout. Clauses 5.5 to 5.13, including 5.5A, state what happens to money already paid.

5.3 A failed payment may result in a grace period followed by cancellation if not resolved.

5.4 Fees and payment terms for a forensic Engagement are governed by the Forensic Engagement Terms, not this document.

5.5 Who you are paying. Foreshock offers more than one way to pay, and they do not all work the same way.

(a) Today there is no third-party payment processor. Payment is made to Foreshock directly under clause 5.5A, and clause (b) is what applies to you.

(a1) If a third-party processor is introduced, that processor acts as the merchant of record: it appears on your statement, issues your invoice, and handles refunds, and its own buyer terms apply in addition to this section and are not displaced by it. It would be named on the checkout page before you pay, and this clause is here so that the terms already cover it when it happens rather than changing after the fact.

(b) Where you pay Foreshock directly in cryptocurrency under clause 5.5A, there is no merchant of record and no third-party processor. Foreshock is the seller, receives the payment directly, and issues the receipt. Nobody stands between us.

Which of these applies is shown to you at checkout before any payment is made. While (a) holds, that is the direct route in (b).

5.5A Paying in cryptocurrency. Where this method is offered, the following applies, and it differs from card payment in ways worth reading.

(a) Prices are set and owed in US dollars. Payment is accepted in USDC only, on the networks listed at checkout, and one USDC is treated as one dollar for this purpose.

(b) Only the native USDC contract issued by Circle on the network you select is accepted. A bridged or wrapped variant, a similarly named token, or a transfer on a network not listed at checkout is a different asset, is not payment, and cannot be credited. Blockchain transfers cannot be reversed by us or by anyone else, so a transfer sent to the wrong network, the wrong address, or in the wrong token is not recoverable. Check the network and the address before you send.

(c) A payment is credited once the transaction is confirmed on the network to the depth stated at checkout. Until then it is pending, not refused, and no charge or penalty attaches to waiting.

(d) A cryptocurrency payment buys one billing period and nothing renews automatically. There is no stored payment method and no standing authority over your wallet: to continue, you make another payment. Your access end date is shown in Settings, and we email you before it is reached.

(e) You must send from an address you control. Refunds under this section are returned to an address you confirm to us in writing, and we will not send a refund to an address we have not confirmed with you.

(f) Where an amount larger than the price is received, the excess is credited against your next period unless you ask for it to be returned under (e).

5.6 Monthly subscriptions. Cancel at any time from Settings, Billing. Cancellation takes effect at the end of the current billing period, and access continues until then. Part months are not refunded, because the service has already been delivered for that period.

5.7 Annual subscriptions. A full refund is available within 14 days of an initial purchase or of an annual renewal, provided the account has not been used to export data or to commission a forensic investigation in that window. After 14 days an annual term is not refunded, and cancellation takes effect at the end of the term.

5.8 Capacity blocks. A capacity block follows the plan it is attached to and is refunded on the same terms as that plan. Removing a block takes effect at the end of the current billing period.

5.9 Forensic investigations. A forensic investigation is quoted individually and charged only when you accept the quote. Accepting the quote is the point of no return: once work begins the fee is not refundable, because the cost of the engagement is the investigation itself rather than the document it produces. You may decline the quote at no cost, for any reason, up to the moment you accept it. If a report is not delivered, the fee is refunded in full.

5.10 Failures on our side. If a payment is taken in error, a duplicate charge occurs, or the service is unavailable for a sustained period within a paid term, contact us and the affected amount is refunded. This is not discretionary.

5.11 Statutory rights. Nothing in this section removes a right you hold under the consumer law of your own country. Where that law gives you a stronger right than this section, that law applies.

5.12 How to ask. Use the contact form at https://foreshock.tech/contact, or reply to any invoice you have received from us. A refund of a card or processor payment is returned to the original payment method. A refund of a cryptocurrency payment is returned in USDC, on a network we support, to an address you confirm to us in writing under clause 5.5A(e) - not automatically to the address the payment came from, because a payment sent from an exchange withdrawal address would otherwise be returned somewhere you do not control.

5.13 Plan capacity. A plan's monitored-protocol capacity is a ceiling on how many protocols you may add to your watchlist, not a warranty that any particular number of protocols is available to monitor at any given time. The library grows through coverage requests, which are free and do not consume capacity; current library size is published at https://foreshock.tech/pricing.

6. Term and Termination

6.1 These terms apply for as long as you hold an account or otherwise use the Service.

6.2 You may terminate by deleting your account under clause 3.3. Foreshock may terminate or suspend your account under clause 3.4.

6.3 Clauses 7 (Intellectual Property), 8 (Disclaimer of Warranties), 9 (Indemnification), 10 (Limitation of Liability), and 11 (Governing Law and Dispute Resolution) survive termination.

7. Intellectual Property

7.1 The Methodology, the Scores and rationale it produces, the compiled presentation of the incident and audit ledger, and the Service's software and design are Foreshock's property.

7.2 Content you submit to the Service, including contact messages, forensics request details, and watchlist selections, remains your property. You grant Foreshock the license needed to use that content to provide the Service to you, including, for a forensics request, to generate and deliver the Report.

8. Disclaimer of Warranties

8.1 Basis of the Service. Each Score, Alert, and Report is generated in accordance with Foreshock's published risk-assessment Methodology, as amended and versioned from time to time and published as the Methodology summary at https://foreshock.tech/methodology. Foreshock warrants that the Service is operated consistently with that published Methodology.

8.2 No warranty of outcome. Except as expressly stated in clause 8.1, the Service is provided "as is" and "as available," without warranty of any kind, whether express, implied, or statutory, including any implied warranty of satisfactory quality, fitness for a particular purpose, accuracy, or non-infringement. Foreshock does not warrant that any Score, Alert, or Report is complete, error-free, or uninterrupted, or that it will predict, prevent, or detect any exploit, loss, or other adverse event.

9. Indemnification

9.1 You will indemnify and hold Foreshock harmless from any claim, loss, or expense arising from your breach of clause 4.4 (Acceptable Use).

10. Limitation of Liability

10.1 To the maximum extent permitted by law, Foreshock's total liability arising from your use of the Service, including any Score, Alert, or Report, is limited to the amount you paid Foreshock in the twelve months before the claim arose.

10.2 Foreshock is not liable for indirect, incidental, consequential, or special damages, including lost profits or losses from a coverage or investment decision made in reliance on the Service, even if advised of the possibility of such damages.

10.3 Nothing in this clause limits liability that cannot be limited by law.

10.4 This clause is governed by, and is intended to satisfy the reasonableness requirement of, the Unfair Contract Terms Act 1977, given the governing law stated in clause 11.

11. Governing Law and Dispute Resolution

11.1 These terms are governed by the laws of England and Wales.

11.2 Any dispute arising out of or in connection with these terms, including any question regarding their existence, validity, or termination, will be referred to and finally resolved by arbitration under the Arbitration Rules of the Stockholm Chamber of Commerce (SCC). The seat of arbitration is Stockholm, Sweden. The arbitral tribunal will consist of one arbitrator. The language of the arbitration will be English.

11.3 This choice of governing law and forum is independent of Foreshock's jurisdiction of incorporation and applies regardless of where Foreshock is incorporated from time to time.

12. Force Majeure

12.1 Foreshock is not liable for any failure or delay in performing the Service caused by events beyond its reasonable control, including infrastructure or network outages, failure of a third-party data source or payment processor, or events affecting the public blockchain infrastructure the Service relies on.

13. General

13.1 Severability. If any clause of these terms is held unenforceable, the remaining clauses continue in full force and effect.

13.2 Entire agreement. These terms, together with the Forensic Engagement Terms and the Privacy Policy where applicable, constitute the entire agreement between you and Foreshock regarding the Service.

13.3 Assignment. Foreshock may assign these terms in connection with a merger, acquisition, or sale of assets. You may not assign these terms without Foreshock's consent.

13.4 Notices. Foreshock may give notice to you via the email address associated with your account, or by posting on the Service.

14. Changes to These Terms

14.1 Foreshock may update these terms as the Service changes. A material change is reflected here with an updated version number. Continued use of the Service after a change constitutes acceptance of the update.

15. Contact

15.1 Questions about these terms: contact@foreshock.tech, or via https://foreshock.tech/contact.

16. Risk Disclaimer

16.1 Foreshock provides protocol risk research, monitoring, and related analytical services. Assessments are based on available information and may be incomplete, delayed, incorrect, or affected by information that is not publicly available.

16.2 A risk band is not a guarantee that a protocol is safe or unsafe: protocols assessed as lower risk may still suffer exploits, failures, governance attacks, insolvency, or other losses.

16.3 Foreshock does not provide financial, investment, legal, tax, or regulatory advice. Users remain responsible for their own decisions, due diligence, and risk controls.

17. Responsible Disclosure

17.1 Platform security reports. Include a description, reproduction steps, the affected component, the impact, and supporting evidence. Do not access other users' data, disrupt the Service, or publicly disclose before Foreshock has had reasonable opportunity to review. Send platform security reports to contact@foreshock.tech.

17.2 Assessment evidence reports. Include the protocol, the statement believed incorrect, supporting primary evidence, the date the evidence became available, and the requested correction. Submission does not guarantee a change. Assessment evidence reports can be sent through https://foreshock.tech/contact.