What is coming, what moved: the timelock queue and the last 7 days
Loading what is queued behind the watched timelocks…
Loading the last watch run…
Reading targets across 9 deployed oracles…
Card text is the finding as written on its date. The scores and bars are read live from the chain and can be newer: when a later push changed a number, the live one is the current one.
What do I hold?Paste a wallet. See what it holds and who can change each token.
Why it matters: five real losses, 2.3B USD, replayed on this scale
Warning ledger: the notice the watch gave, and what it missed
The most connected keys: one address, several protocols, several chains
Where the weak setups are, chain by chain
What this risk score actually guards against
Two confirmed DeFi thefts in 2026, both squarely in the risk class this oracle measures: a single compromised admin key, and an insufficient verification threshold on a cross-chain bridge.
$285M
Drift Protocol - 1 April 2026
An admin key compromised after months of social engineering (attributed to Lazarus/RPC-TraderTraitor) allowed the price oracles to be manipulated and the vaults drained within minutes.
adminKeyScore - exactly this axis
$292M
KelpDAO - 18 April 2026
A LayerZero bridge configured with a 1-of-1 verifier (DVN): a single node validated cross-chain messages before funds were released. Once compromised, it authorized the minting of 116,500 unbacked rsETH (~18% of the supply).
multisigScore / verification threshold - exactly this axis
What would a Safe multisig score?
Enter a Safe's threshold and owner count. This applies the convention the scorers use for a target whose whole authority chain ends in one plain Safe with no timelock, then places the result among the published scores and the documented incidents (four incidents, five Safes: Humanity Protocol lost funds from two Safes in one event). The two thefts in the panel above, Drift and KelpDAO, are not here because neither was a Safe multisig with a known threshold.
Documented incident
Safe
Composite
Published targets at or below
Calling trackedTargetsCount() on the oracle…
–
Targets tracked
–
Mean composite
–
Worst score
–
Best score
No target matches the current filters.
Method notes: how each chain is read, Zcash, shared control, what this is not