Authors

Ryan Wegner

March 6, 2025

Blog

Building an Institutional-Grade Security Posture at Gauntlet

Key Takeaways

Our work in curation, ecosystem optimization, and DeFi governance requires robust security processes to safeguard our employees and our onchain actions. With $700M+ supplied to Gauntlet-curated vaults and $35B+ in assets we monitor for our partners, we have built an institutional-grade security posture to instill confidence in our vaults while protecting our onchain operations. This entails deploying internal infrastructure and building a network of security partners that are leaders in onchain threat prevention and detection, tracing onchain funds, and are at the forefront of security research and intelligence.

We currently integrate with a range of providers, including zeroShadow, Hypernative, Chainalysis, and SEAL Intel, a Security Alliance initiative. Today, we outline the role each plays within our security stack.

zeroShadow provides holistic Web3 security services that help with prevention, preparedness, response, and recovery. Acting as an extension of our security team, zeroShadow’s 24/7 Virtual Security Operations Center (vSOC) is always on standby to receive, triage, escalate alerts, and initiate the tracing, freezing, and recovery process when necessary. With a strong track record in Incident Response, we look forward to working proactively with the zeroShadow team.

Hypernative offers real-time onchain risk monitoring and automated response solutions. The platform uses sophisticated and battle-tested machine learning models, heuristics, simulations, and graph-based detections to accurately identify threats. These capabilities ensure we have time to respond before exploits can do damage. Their system monitors a range of vectors, including security, technical, financial, and governance risks. Hypernative detected 99.5% of hacks last year with less than 0.001% false positive rate, saving $2B of funds to date.

Chainalysis is a blockchain analytics platform and a leader in tracing onchain funds, helping the industry monitor and restrict the activities of bad actors. Their tools enable us to identify potentially suspicious activity across blockchains, ensuring compliance with regulatory requirements while protecting the protocols we engage with from financial crime risks.

SEAL Intel, a Security Alliance initiative, provides guidance on threat intelligence, helping us stay current with the latest developments and research in onchain security. The initiative oversees SEAL-ISAC, an Information Sharing and Intelligence Center.

Our approach to security integrates battle-tested solutions with multiple layers of protection. Through partnerships with industry leaders, we've established a security posture that adapts to the evolving threat landscape while maintaining operational efficiency. This provides a secure framework for Gauntlet-curated vaults and supports our goal to drive adoption across DeFi.

Security is fundamental to our mission to advance DeFi through trusted curation, governance, and ecosystem optimization. As blockchain technology and its associated risks continue to evolve, so too will our security practices, ensuring we remain at the forefront of both innovation and onchain security.

Ryan Wegner
Head of Security

Blog

View the full presentation

Read the full paper

Want Gauntlet in

your inbox?

Sign up to get notified about our latest research.

Thank you. You'll hear from us soon.

Contact our team

Tell us about your protocol’s needs

1/4 Name

First, tell us your name

2/4 Contact Info

Tell us know to reach you.

Contact method

Address must be correctly formatted

3/4 Protocol Info

Tell us about your protocol.

Protocol type

4/4 Details

Just one more thing...

Success!

Thank you! You'll hear from us soon.

Monthly Email Updates

Stay connected to Gauntlet research and analysis

Receive a roundup of our latest research, analysis,
and product updates each month

Thank you for subscribing to our email list! Check your inbox for the latest form Gauntlet’s team.
Oops! Something went wrong while submitting the form.