Skip to content

Tripwire: a circuit breaker for smart contracts

Exploits run on block time. Tripwire catches the transaction that breaks your rules and pauses the contract before it drains.

How It Works

Rule, trip, pause

01

Write rules

State what must always hold, in plain terms.

02

Catch the break

Every block and pending transaction is checked.

03

Alert and pause

You are alerted, and the contract can pause itself.

Blocks and pending transactions flow into Tripwire, where rules are evaluated. One rule trips, and the response records it, alerts, and pauses the contract.
Rules

Rules in plain English

Pick a starting point and fill in the blanks. Each rule is tested on the live chain before you save it.

  • ›totalAssets never drops below totalSupply
  • ›no more than 5% of supply is minted in 24 hours
  • ›this oracle updates at least every hour
The Tripwire rule wizard, with a rule reading "totalAssets stays within 0.5% of its 20 minutes average".
Response

Acts before the exploit lands

Tripwire sees harmful transactions while they are still pending, so the pause can land first. You choose how far it acts on its own.

notify

Record and alert. The default.

prepare

Build the pause, wait for one approval.

send

Pause at once, no one in between.

Timeline of one pending transaction: the rule trips, the violation is recorded and alerted, the pause is built, simulated, signed and sent, and the contract is paused.
Why Tripwire

More than an alert

Sees

Alertstransactions after they land

Tripwirepending transactions, before they land

Responds

Alertspages a person

Tripwirepauses the contract itself

Needs

Alertsnothing

Tripwireonly a pause role you grant

Dashboard

See every rule, live

Current values, history, what tripped and what is waiting for approval.

A Tripwire rule page with live values and a 24-hour chart.
The Tripwire Overview page with engine status, open violations and responses waiting for approval.
Security

Safe by default

Notify-only by default

Nothing is signed until you choose a mode that does.

Least power

A pause-only role is enough. Never an owner key.

Signed engine

Releases are verified before they run.

Private by default

The dashboard is local and every request needs a login.

AI agents can propose rules over MCP. A person switches them on.

Get Tripwire

Run it yourself, or let us run it

Self-hosted

Free

  • Open source on GitHub
  • Your servers, RPC and keys
  • Every feature included
  • You run and tune it
Get the source

Hosted & managed

We run it for you

  • Hosted and kept up to date by us
  • Rules written with your team
  • Alerts and a tested on-chain pause
  • Rules from your audit, if we audited you
Get hosted Tripwire
FAQ

Questions

Set the wire before the exploit