How much power does Tripwire need?

Only what you grant. It starts notify-only, and pausing needs a pause-only role, never an owner key.

Can AI agents write rules?

Yes, over the built-in MCP server. Agent rules arrive switched off until a person turns them on.

Does Tripwire replace an audit?

No. It guards the live contract. For code review, run Sentinel or book our audit team.

Linux on x86-64 or ARM64, with Node.js 22 and an RPC endpoint for your chain. A container or WSL works elsewhere.

How much does an audit cost and how long does it take?

Pricing is scoped to codebase size and complexity, not a fixed per-line rate. Sentinel automated scans start at $100; human-led audits start at $5,000. Most audits take from a few days to a few weeks. You get a fixed-price quote after a free scoping review.

Smart Contract Audits & Web3 Security

Superteam AustraliaGrant recipient

Tokyo 2026

DECA, Digital Economy Council of Australia

Member

Your first alert in three steps

Install

Free.Runs on your machine.

TripwireRunning

Add a contract

Paste its address.

Contract

0x7f3a…c2a1

ABI found

Set a rule

Pick a template.Get your first alert.

›totalAssets ≥ totalSupply

Self-hosted

Free

Open source on GitHub
Your machine, database and keys
Dashboard, CLI and MCP server

Read the quickstart

Hosted and managed

We run it for you

Rules written and tuned with your team
A tested onchain pause
Quoted per deployment

Talk to us

Not live yet?

Scan your contracts first

Sentinel finds bugs and invariants, then helps turn them into Tripwire rules.

Run a scan →

Scan

Static analysis, fuzzing and AI review

Findings

Bugs ranked, with the invariants they break

Rules

Invariants become your first Tripwire rules

Operators

Alex Rybalko

Co-Founder & CEO

Co-Founder of SigIntZero. Security architecture and threat modeling for protocols and distributed systems.

Aron Turner

Co-Founder & CTO

CTO of SigIntZero. Engineering leadership, infrastructure architecture, and security tooling.

Dmitry Serdyuk

Co-Founder & CDO

Full-Stack Operator | Building across security, AI, and digital infrastructure.

Kolin Cunningham

Head of Business Development

BD at SigIntZero. Partnerships and go-to-market for Web3 security services.

Security Research

Cutaway of a teal stopwatch-style performance gauge on a trading terminal, revealing a red mechanical arm inside pressing a signing seal onto a stack of order tickets while a trader's hand rests on the keyboard

exploits

Polymarket $2.65M Drain: A Hijacked DebugBear Monitoring Script Traded on Users' Behalf

A performance-monitoring script on Polymarket.com turned into a wallet drainer on October 29, 2026. It used traders' own sessions and Polymarket's relayer to move about $2.65M.

A tiered voting chamber of empty teal seats seen from above at an angle, one hooded figure raising the only red paddle, and an open vault door behind the unattended dais spilling red light over teal ingots.

exploits

Arkadiko's $1.09M Governance Takeover: $51K of DIKO Bought the Vaults

One wallet bought about $51K of DIKO, cast the only vote on a proposal that installed its own vault contract, and drained $1.09M from Arkadiko two minutes after voting closed.

Dark perspective grid of identical teal towers on building plots, with one bare plot in the foreground holding four teal keys on red-staked ground and two hooded figures closing in from opposite sides

exploits

Avalanche Safe $7.45M: The Approval That Waited 233 Days for Code to Appear

A 2-of-7 Safe on Avalanche approved four tokens to an address with no code. 233 days later anyone could deploy there, and an MEV bot beat the attacker to $7.45M.

View all posts →

Frequently Asked Questions

Set the wire
before the exploit

Tripwire is free and open source.

Get started, free Talk to us

Want a human-led audit? See services

Or email contact@sigintzero.com

ONCHAIN SECURITY YOU CAN RUN YOURSELF.

Three steps to your first alert

Install

Add a contract

Set a rule

Free

We run it for you

Scan your contracts first

Scan

Findings

Rules

Operators

Alex Rybalko

Aron Turner

Dmitry Serdyuk

Kolin Cunningham

Security Research

Polymarket $2.65M Drain: A Hijacked DebugBear Monitoring Script Traded on Users' Behalf

Arkadiko's $1.09M Governance Takeover: $51K of DIKO Bought the Vaults

Avalanche Safe $7.45M: The Approval That Waited 233 Days for Code to Appear

Frequently Asked Questions

Set the wire before the exploit

ONCHAIN SECURITY
YOU CAN RUN YOURSELF.

Set the wire
before the exploit