Forta Protocol Alerts

Forta general security alerts trigger notifications when any event pose a security risk to a specified protocol.

How to setup Forta protocol security alerts.

1. Under Signals section click on Add Subscription button under Security-Forta Protocol section. The button is highlighted in black box in the screenshot below.

1. Clicking on Add Subscription button will prompt you to fill in essential fields to create a Security-Forta Protocol alert subscription. Fill in the fields and click on Add button (located below the input fields). Please refer to the screenshot below. Note: Description regarding the fields is provided below the screenshot.

Security Forta Protocol Alerts 1

Security Forta Protocol Alerts 2

Security Forta Protocol Alerts 3

Fields Description

• Name: Name for the Alert.

• Username: The username is a unique identifier displayed when alert is received.

• Delivery Channel: This field outlines the chosen communication platform for receiving forta protocol security alerts. Currently Discord and Slack is supported.

• Webhook: A webhook is a mechanism that allows automated messages to be sent from one system to another. Currently the discord and slack webhook is supported to receive notifications. You can find instructions on how to create a discord webhook here and slack webhook here.

• Token Address: This refers to the address of the specific token for which you would like to receive the Security Alerts.

• Chain: Users can select from a range of supported blockchain networks for monitoring, which currently include:

  • Ethereum

  • Optimism

  • Binance Smart Chain (BSC)

  • Polygon

  • Fantom

  • Arbitrum

  • Avalanche

• Attack Stage: There are four distinct phases available for subscription:

  • Funding Phase: This phase includes activities like providing funding to contracts, such as in the case of tornado cash funding.

  • Preparation Phase: Users can opt to track the preparation phase, which involves the creation of attacker contracts.

  • Exploitation Phase: This phase covers actions like draining funds from contracts, which can have significant security implications.

  • Money Laundering/Post Exploitation Phase: Here, users can monitor activities like sending funds to tornado cash or on-chain text messages following an attack.

• Severity: Specify how severe the alert is. ("Low", "Medium" and "High") .

1. Upon clicking on the Add button, a subscription notification popup will be displayed on the lower left. See the snapshot below for reference.

1. An example of Forta security protocol alerts received on Discord is provided below for your reference.