Quick Start

sec3 WatchTower Security Monitor

WatchTower is an in-situ security threat monitoring service for smart contracts to detect and alert security attacks in real time.

WatchTower deploys "bots" to extract and analyze real time on-chain data to screen suspicious transactions that may expose security risks or prelude hacks.

WatchTower is brought to you by sec3, a security and research firm providing bespoke audits and cutting edge tools to Web3 projects.

WatchTower offers a number of features:

• A user interface for users to add, customize, deploy, stop bots, and examine alerts in a dashboard.

• A set of built-in "bots", based on security analysis logic and domain knowledge to help detect specific signs of security risks, such as abnormal token transfers, abnormal payloads, etc.

Getting Started

1. Create Project

On the sidebar of the dashboard, click "WatchTower".

Click "Add a new project", and give your project a name.

Add a new project

Click "Add an address"

Add an address

Then, add the address(es) of your smart contract.

Add an address

2. Add bots

After an address is added, the address will appear on the Projects sidebar.

To add a bot, click "Add Bot" in the address config menu or "New Bot" button on the dashboard

Add a bot

Next, choose a bot from the list of bots, for example, solana_abnormal_transfer_sol, which is designed to watch and alert abnormal size transactions in SOL.

Choose bot type

Next, customize the bot:

Config the bot

1) Name the bot (mandatory)

A human-friendly name for the bot.

2) Target Address(es) to be monitored (mandatory)

This is usually the address for a smart contract or an account.

3) Severity level (mandatory)

Each bot has a default severity level (medium in this case), but the user can configure a different severity level.

4) Alert destinations (optional)

Select the ways you wish the alert to be sent. For details about setting up alert destinations, see

Alert Destinations

5) Bot specific parameters (optional)

In this case, an alert threshold for the transfer (optional, default 100 for the solana_abnormal_transfer_sol bot).

For the complete list of bot types and their parameters, see

Bots

After the setup is completed, click "Create bot". Now the bot is created and running!

Note: If your bot continuously generates many alerts, it may be forced to stop. Too many alerts bring down the signal-to-noise ratio and make the monitoring less efficient. You will need to tune your bot parameters and try again.

3. View Alerts

On the Alerts tab in the dashboard, you can view the alerts generated by the bots. The detail of the alert can be expanded by clicking the alert.

Alerts

Clicking an alert will expand the alert's details.

Alert Details

4. Manage Projects & Bots

To manage a project, click the ⚙️ icon next to the project name. You can edit the project name, add address or delete the project. Managing an address is similar.

Manage project

To manage a bot, navigate to the Bots panel, where you can check and change the status of the bot. Clicking a bot opens the editing box.

Manage bots