After the audit: 8 alerts to set on the day you deploy
An audit checks the code before deployment. After deployment, nobody watches whether the contract still behaves the way the audit assumed: the owner key is still yours, the proxy runs the reviewed code, the pause works, the money leaves only the way it should.
These eight alerts cover the assumptions most audit reports rely on. Each one is checked against the last 30 days of your contract's history before you turn it on, so you see how noisy it is before it wakes anyone up.
The checklist
| # | Alert | Audit assumption it watches |
|---|---|---|
| 1 | Ownership transferred | "Privileged functions are callable only by the owner" — and it is still the same owner |
| 2 | Proxy upgraded | "The deployed code is the reviewed code" |
| 3 | Role granted or revoked | "Only listed addresses hold MINTER / PAUSER / ADMIN" |
| 4 | Safe owners or threshold changed | "Admin is a 3-of-5 multisig" |
| 5 | Safe transaction failed | Failed executions often come right before a malicious one |
| 6 | Contract state: paused() and one key number | "Pause works"; a value the report calls critical (threshold, oracle, fee) stays in range |
| 7 | Transfer above $X out of the contract | "Funds leave only through withdraw/redeem limits" |
| 8 | Treasury or pool balance below $Y | Native ETH/BNB moves without a Transfer event |
- Audit assumption it watches
- "Privileged functions are callable only by the owner" — and it is still the same owner
- Alert
- Proxy upgraded
- Audit assumption it watches
- "The deployed code is the reviewed code"
- Audit assumption it watches
- "Only listed addresses hold MINTER / PAUSER / ADMIN"
- Audit assumption it watches
- "Admin is a 3-of-5 multisig"
- Audit assumption it watches
- Failed executions often come right before a malicious one
- Audit assumption it watches
- "Pause works"; a value the report calls critical (threshold, oracle, fee) stays in range
- Audit assumption it watches
- "Funds leave only through withdraw/redeem limits"
- Audit assumption it watches
- Native ETH/BNB moves without a Transfer event
What it does not do
- It watches events and view-function answers, not every storage slot or internal call.
- An attack that does everything in one transaction is seen when it lands, not before.
- It does not replace an audit and does not promise to stop an exploit. It tells you fast, in Telegram, Slack or email.
For audit clients
If your auditor sent you here, ask them for the invitation link: Business plan free for 3 months, all eight alerts on up to 60 contracts per project.
FAQ
Do I need all eight?
No. Take the ones that match your report. A token without a proxy skips alert 2, a contract without a Safe skips 4 and 5.
Does a rule turn on by itself?
No. Each recipe is offered as a rule. Nothing turns on until you tick it and press "Enable selected".
Can I change the thresholds?
Yes. $X, $Y and the key number in alert 6 are yours to set, and you can check the change on history before saving.
Sources (checked Oct 24, 2026)
Try it on your own contract
An address is enough. The first 14 days get Pro limits, and rules are checked on history before they go live.