Secure Your Core Contracts

Core contracts are the foundation of any on-chain system. They govern upgrades, hold funds, and enforce rules. If compromised, they can cause immediate and irreversible damage.

This is what you want to set up defenses against:

• Exploits (IntelliGate Monitoring) → get notified when suspicious or malicious activity involves your contracts.

• Governance & Admin Changes → be alerted if unwanted role assignments, ownership transfers, or upgrades are attempted.

• Balance Changes → know immediately when funds are moved out of your core contracts.

Because of their critical role, these contracts require dedicated monitoring and rapid response.

Recommended Setup

Tag your core contracts

Create a tag such as “My Protocol's Core Contracts.” Add all core contract addresses to this tag. Tags let you manage addresses as a group and apply Hexagate capabilities consistently. You can use a single tag for all contracts or separate them into multiple tags if that makes organization easier.

Monitor Threats (IntelliGate)

Set up an IntelliGate Threat Monitor for your Core Contracts.

• Use this Guide if it's your first time →

or

• Add Monitor → choose Threat monitor and apply it to all your core contracts.

Set alerts for High/Critical severity only to avoid noise.

Monitor Governance & Admin Function Calls

Apply monitors to contracts that act as gateways or hold significant influence, since admin changes here can cascade across the system.

• Add Monitor → choose Function Call.

• Configuration → apply the monitor to critical contracts individually (e.g., upgrade controllers, ownership, or role management contracts).

• Severity → set to Critical and route to your Critical Alerts channel.

Monitor Balance Changes

Note: For deeper coverage of wallets or treasury operations, see the Wallet Operations Surface Guide.

Monitor contracts for changes in token balances or overall address balance that may indicate unwanted activity.

• Add Monitor → choose Balance Change.

• Configuration → supports:

  • Multi-token monitoring with USD denomination

  • Threshold-based alerts (absolute values)

  • Percentage-based alerts (relative changes)

• Best Practice → use multi-conditions combining both threshold and percentage.