Introducing DD by Webacy – the new standard for on-chain decisioning & due diligence in crypto.
Smarter, safer transactions powered by real-time risk intelligence. Let’s dive into why this matters & how it’s changing the game 👇🧵 #DDxyz#Webacy
.@mywebacy is bringing its revamped bug bounty program to CertiK Hunt.
CertiK Hunt helps surface high-quality findings from trusted security researchers — adding another layer to Webacy’s defense-in-depth strategy.
Bounties up to $1,000 👇
https://t.co/QqRNhwhnKb
We’re partnering with CertiK to upgrade Webacy’s bug bounty program.
AI has made it easier to generate vulnerability reports. It hasn’t made it easier to separate real risk from noise.
CertiK helps us triage submissions and surface high-quality researchers + findings so we can focus on what actually matters.
Another layer in our defense-in-depth strategy. 🔐
We doesn't just monitor major stables like USDC and USDT.
We cover the long tail too, the hundreds of smaller, more exotic pegged tokens that most monitors ignore (and most price feeds can't read cleanly).
We flagged eUSD roughly 40–60% below its dollar peg and graded it Critical / F.
We priced eUSD off corroborated reference data rather than a single thin pool, weighted the read by confidence, and called the depeg for what it was.
The majors are easy. Getting the long tail right, low-cap and exotic, without false alarms or blind spots, is the standard we hold ourselves to. If you're in the "no risk no reward" category, check out our system.
Check out eUSD on DD(dot)xyz below 👇
MozFest by @mozilla Foundation is a space for asking hard questions about the future!
This year, I'll be representing @mywebacy by bringing "The Identity Crisis of the Internet" to the stage.
For decades, trust online has been tied to identity verification, KYC, and outdated methods of authentication. In a world of AI Agents, decentralized systems, and increasingly sophisticated fraud, we believe it’s time to ask whether identity alone is still enough.
Join us at #MozFest as we explore the future of trust, reputation, and digital participation. See you there!
Webacy is now SOC 2 compliant!
We’re thrilled to celebrate this milestone as another way of building trust with our customers. We partnered with Advantage Partners & Vanta to seamlessly guide us through the compliance process.
Check out our blog post for more details 👇
An incomplete map of the Digital Asset Compliance Landscape
A snapshot of the infrastructure protecting value as it moves onchain, organized by when each control acts.
If you're building something that touches regulated assets, the layer you're missing is probably on this map.
01. INPUT LAYER (Informs)
AML & Blockchain Analytics
@AMLBotHQ: all-in-one AML for KYT, KYC/KYB & investigations
@AnChainAI: AI-powered forensics and AML
@Bitrace_team: AI + big data risk analysis
@chainalysis: data for investigations & compliance
@CrystalPlatform: intelligence for crime detection
@elliptic: analytics and crypto compliance
@GlobalLedger: real-time AML, risk monitoring & investigations
@MerkleScience: predictive risk platform
@scorechain: AML and compliance analytics
@trmlabs: intelligence to prevent fraud
Onchain Threat Intelligence
@blockaid_: real-time fraud, scam & exploit protection
Cyvers: AI-powered proactive security
@GoPlusSecurity: transaction & token security
@mywebacy: real-time risk intelligence for digital assets
ZK Credentials
@aztecnetwork / @ZKPassport: private ID verification with ZK proofs
@humntech: proof-of-humanity and secure keys
@Privado_id: decentralized identity and credentials
@zkme_: zero-knowledge identity verification
@zkPass: privacy-preserving data verification
Oracle & Risk Data Feeds
@chainlink: secure data feeds
@CredoraNetwork: independent DeFi risk ratings & PSL scores
@redstone_defi: modular DeFi oracles
@vaultsfyi: onchain vault risk intelligence
Reserve & Solvency Verification
@AccountableData: real-time Proof of Reserves & Solvency
Chainlink: Proof of Reserve
@The_NetworkFirm: CPA-attested Proof of Reserves
02. PRE-SETTLEMENT (Binds)
Policy Engines
Chainlink (ACE): automated onchain compliance engine
Circle (Compliance Engine): stablecoin compliance engine
@ForteProtocol (Rules Engine): onchain rules engine for compliance
@newton_xyz: authorization layer for onchain finance
@phylaxsystems: policy engine for programmable capital
@0xPredicate: programmable policy for onchain apps
Transaction Firewalls
@blocksecteam (Phalcon): real-time transaction monitoring & blocking
@FortaNetwork (Firewall): decentralized threat detection
@ironblocks_io (Firewall): smart contract & transaction firewall
Custody & Response Controls
Blockaid_ (Cosigner): policy-based transaction security
@Hypernative: real-time threat detection & response
Travel Rule & VASP
21 Analytics: on-premises Travel Rule solution
@Notabene_io: Travel Rule compliance & VASP messaging
@shyftnetwork (Veriscope): frictionless Travel Rule solution
VerifyVASP: Travel Rule verification network
03. MONITORING (Observes)
Regulatory Reporting
@Ledgiblecrypto: crypto tax and regulatory reporting
Regnology: CARF/DAC8 specialist reporting
@TaxBit: enterprise crypto tax & compliance
Surveillance
Eventus Validus: trade surveillance platform
Nasdaq Market Surveillance: market surveillance solutions
@SolidusLabs: digital asset market surveillance
Attestation & Audit
@hackenclub: blockchain security and compliance
@LedgerLensTM: onchain attestation and audit tools
04. ASSET LAYER (Binds)
Token-Level Rules
@Bitbond: compliant tokenization platform
@Brickken: RWA tokenization with controls
@Securitize: regulated digital assets
@trex_network (ERC-3643 / T-REX): compliant security token standard
@Vertalo_: tokenization and transfer agent platform
Everything in the input layer informs. Everything in monitoring observes. The ability to stop a transaction lives in one narrow window before settlement, and that's where newton works.
Thanks to @makhavannik, @Gigimp1 and @0xalaz_ for helping put this together.
The map is incomplete and the blockchain compliance space moves fast. If we missed a project, reply and we'll add it to the next version.
@Am_Mohee appreciate you diving in! This is exactly the kind of nuance we’re building into DD. Onchain data gives us the foundation at scale, while assets like USDe require deeper, asset-specific analysis to capture their unique risk dynamics.
This is what real-time risk intelligence is built for
Risk shouldn't be discovered after an exploit. It should be a signal that systems act on before capital is lost
Watchdog is putting our risk signals to work 🐕
Tired of losing money in hacks? Scared of getting drifted?
Introducing Watchdog.
Milo monitors real-time risk signals for every protocol you use. He fetches your money back to your vault the second things look off.
It's a step change in proactive security for your capital.
Webacy is heading to StableCon ’26 in Washington, DC 🇺🇸
Stablecoins are becoming financial infrastructure. The systems for evaluating and monitoring their risk need to evolve with them.
We’ll be there talking real-time risk intelligence, continuous DD, and the future of onchain finance.
📍 DC
📅 Sept 9–11
See you there.
Tired of losing money in hacks? Scared of getting drifted?
Introducing Watchdog.
Milo monitors real-time risk signals for every protocol you use. He fetches your money back to your vault the second things look off.
It's a step change in proactive security for your capital.