SOC operations 24/7Under active attack? Call the incident hotline +1 833 403 5875
  1. Home
  2. Threat Intelligence
  3. THRUD
Threat Intelligence · THRUD

Know what a smart contract will do,
before your money touches it.

THRUD is our Web3 threat detection and smart contract intelligence platform. It watches new contracts as they deploy, reads their bytecode, flags honeypots and rug pulls, and traces each one back to the wallets and deployers behind it.

Real-timeMonitoring of new contract deployments
Multi-chainOne view across the chains you watch
BytecodeAnalysis without published source
Analyst-backedOur intelligence team behind every alert
What it is

Smart contract intelligence, with analysts behind it.

New tokens and contracts appear every day, and many are built to take money rather than hold it. A contract can look normal on a block explorer while its code blocks sells, hides a mint function or lets the deployer drain liquidity. Reading the published source is not enough, because the worst contracts rarely publish it.

THRUD reads the deployed bytecode itself, so it works whether or not the source is public. Each contract gets a multi-factor risk score, and the people behind it are mapped: the deployer, the wallets connected to it, and the other contracts they have launched. Alerts go to your channels as they happen, and our threat intelligence analysts are there when a finding needs a human read.

The name is ÞRÚÐR in Old Norse, Thor's daughter: strength in the chain.

What you get
  • Real-time monitoring of new smart contract deployments across the chains you care about
  • Bytecode analysis of every contract, including those with no published source
  • Honeypot and rug-pull detection on every contract it analyses
  • Deployer attribution: the wallets behind a contract and the other contracts they have launched
  • A multi-factor risk score per contract, and automated alerts to your security channels
  • An analyst dashboard, with access to our threat intelligence team
How it works

From deployment to decision.

Watch the deployments

THRUD monitors new smart contracts as they go live, across multiple chains, so you see them when they appear, not after the damage.

Read the bytecode

Each contract is analysed at the bytecode level for the patterns behind honeypots, hidden mints, blocked sells and liquidity drains.

Map who is behind it

Deployer attribution links the contract to the deployer and wallets behind it, and to their other contracts, so repeat actors stand out.

Score and alert

Every contract gets a multi-factor risk score. High-risk findings are pushed to your channels automatically and land on the analyst dashboard.

Escalate to an analyst

When a finding matters, our threat intelligence analysts review it with you and, if needed, hand it to our investigations team.

What it catches

The contract is the evidence,if you can read it.

Honeypots

Tokens you can buy but never sell. The code that blocks the sale is flagged before you or your clients are trapped in it.

Rug pulls

Contracts built so the deployer can drain liquidity or mint supply at will. THRUD flags the capability, not just the event.

Repeat deployers

Scammers reuse wallets and patterns. Graph-based attribution connects a new contract to the history of the people behind it.

When something has already happened

Intelligence that carries into an investigation.

If a contract has already cost you or your clients money, THRUD's attribution is the starting point. Our Bifrost digital forensics team investigates, TYR packages the evidence with chain of custody for legal and law enforcement use, and MTAC threat-intel analysts keep tracking the actors behind it.

Ideal for

Who it is for

Crypto exchanges and custodians deciding what to list or support. DeFi protocols and token projects watching for copycats and malicious integrations. Investors and funds doing due diligence on tokens. Financial institutions with digital-asset exposure. And investigators and legal teams tracing a scam back to the people who ran it.

Related services · what comes next
Questions

What buyers ask.

The contract source isn't published. Can you still assess it?

Yes. THRUD analyses the deployed bytecode directly, so it does not depend on the deployer publishing source code. Unverified contracts are often the ones that most need a look.

Isn't this what a token scanner already does?

A scanner gives you a score. THRUD adds deployer attribution, so you see who is behind a contract and what else they have launched, and puts our analysts behind the alerts when a finding needs judgment.

How do alerts reach us?

Automated security alerts go to the channels your team already uses, and every finding is also on the analyst dashboard with its risk score.

What happens if we have already lost funds?

Our analysts start from THRUD's attribution, our Bifrost forensics team investigates, and TYR packages the evidence with chain of custody so it holds up with counsel, insurers and law enforcement.

What does it cost?

It depends on the chains you watch and how you want alerts and analyst time delivered. Talk to sales and we will scope it with you.

See the contract before you trust it.

Request a demo and we will walk you through THRUD on the chains you care about.