Screening & Intelligence

Real-Time Risk Intelligence that Stops Exposure Before It Occurs

ML-driven screening and reputation assessment with configurable compliance policies, multi-hop exposure tracing, and continuous monitoring that prevent exposure to malicious activity.

99.8
%
threat detection rate
300
+
risk types monitored
<0.001
%
false positive rate
96
%
scam detection vs. 28% from legacy providers in head-to-head benchmarking
$
13
M
saved in Venus phishing attack
75
+
chains covered

Unified Risk Screening and Compliance Intelligence Across the Onchain Ecosystem

Capabilities
X
Address Screening & Reputation

Real-time, ML-driven address reputation with configurable enforcement policies, multi-hop exposure tracking, and cross-chain fund tracing. Continuously re-evaluates previously approved addresses as new intelligence emerges.

X
Pool Toxicity Analysis

Evaluate liquidity pool exposure to sanctioned, tainted, and illicit funds before deployment with customizable toxicity thresholds, policy-adherent execution, and continuous post-deployment monitoring.

X
Token Risk Assessment

Real-time token reputation scoring detecting rug pulls, honeypots, impersonation tokens, scam assets, and more with webhook-based notifications when risk profiles change for listed or held tokens.

X
dApp & URL Screening

Real-time reputation assessment of dApps, URLs, and web destinations detecting phishing, brand impersonation, DNS hijacks, and drainer infrastructure before interaction.

X
Configurable Compliance Policies

Define enforcement rules by risk type, exposure threshold, hop count, jurisdiction, and severity. Per-client, per-fund, and per-jurisdiction policy configurations with full audit trail documentation.

One Screening Platform,
Every Risk Dimension Covered

From sanctions exposure to scam infrastructure, Screening & Intelligence evaluates every address, pool, token, and dApp against the full compliance and risk picture.

Enforce Zero-Tolerance Exposure Rules With Configurable Per-Jurisdiction Policies

Real-time sanctions screening across OFAC, EU, and custom blocklists. Configurable per-client and per-jurisdiction policies with automated APPROVE/DENY logic and comprehensive audit trails for regulatory examinations.

Screen Every Counterparty, Asset, and Destination for Security Risks

Identify addresses linked to hacks, exploits, phishing, and fraud. Detect malicious tokens, compromised dApps, and poisoned addresses all evaluated in real time before transactions execute.

Assess Pool, Token, and Protocol Risk Before Capital Is Deployed

Evaluate liquidity pool toxicity, token integrity, and protocol-level risk before entering positions. Continuous monitoring alerts when risk profiles shift after deployment.

Block Scam Infrastructure, Impersonation, & Fraud Before They Impact Your Users

Flag impersonation tokens, phishing domains, cloned mint portals, address poisoning campaigns, and honeypot mechanics protecting your platform and users from fraud.

Proven in Public. Verified Onchain

AUTOMATED PREVENTION

$1.52M Saved

An attacker spent 57 days quietly positioning for an ERC4626 inflation attack against Parallel's savings vault. Hypernative detected the exploit contract the moment it was deployed, flagged it with a high malicious score, and automatically paused the protocol within seconds, before a single dollar moved.

EARLY WARNING DETECTION

$10M Saved

An active exploit detected in real time and Solv alerted immediately, despite not being a customer. The rapid warning enabled the team to secure additional contracts and prevent a further $10M from being drained following a $2.7M double-minting attack.

EARLY WARNING PREVENTION

$1.5M Saved

An attacker contract deployment was flagged before the exploit executed. Intelligence shared with the SparkDEX team in real time meant they were able to act within minutes and the attacker's funds were seized.

AUTOMATED PREVENTION

$13M Saved

Phishing attack detected and neutralized before funds could be further drained. Hypernative alerted the team within 2 minutes, enabling the protocol to pause, execute a liquidation strategy, and recover nearly $13M in user assets.

AUTOMATED PREVENTION

$5M Saved

Hypernative detected an exploit in progress on the Flare Network, alerting the Kinetic team before the first hack transaction and enabling an emergency pause that saved $5M in user funds.

EARLY WARNING DETECTION

$3.5M Attack Detected

Hypernative detected the drainer address used to steal $3.5M from Curve Finance's hijacked frontend 2 hours before it reached its first victim. Curve was not a customer at the time. Every dollar lost was entirely avoidable.

EARLY WARNING DETECTION

$1.3M Exploit Detected

Arbitrum-based exploit identified in real time through onchain monitoring, enabling rapid incident response before further losses could finalize.

EARLY WARNING DETECTION

$506K Exploit Detected

Hypernative detected a price manipulation attack targeting Numa Money on Arbitrum 7 minutes before the exploit executed. Numa was not a customer at the time. Every dollar lost was entirely avoidable.

How Screening & Intelligence Works

1
Submit a Query

Submit an address, pool, token contract, or dApp URL via API. Hypernative then evaluates the target against real-time threat intelligence and your configured policies.

2
Analyze With ML-Driven Detection

AI models assess risk across 40+ flag categories including sanctions, fraud, phishing, mixer usage, exploit involvement, and more  with multi-hop and true cross-chain exposure analysis.

3
Return Risk Assessment and Recommendation

The API returns a risk score, flag details, exposure breakdown, and APPROVE/DENY recommendation alongside full evidence for audit trail documentation.

4
Monitor Continuously

Previously screened addresses, pools, and tokens are continuously re-evaluated. When risk profiles change — for example, if a clean address interacts with a sanctioned wallet or if a pool's toxicity spikes — you're alerted in real time.

Frequently Asked Questions

What is Hypernative Screening & Intelligence?

A unified risk screening product that provides real-time reputation assessment for addresses, liquidity pools, tokens, and dApps with configurable compliance policies, multi-hop exposure tracking, and continuous monitoring.

How does it differ from legacy AML/KYT providers?

Legacy providers rely on static blocklists updated days or weeks after incidents. Screening & Intelligence uses ML-driven detection to flag risks in real time at the block level, not after the fact. We also go beyond address checks with pool toxicity, token risk, and dApp screening.

What risk types does it screen for?

Risk flag categories including sanctions (OFAC, EU), fraud, phishing, mixer usage, exploit/hack involvement, terrorism financing, stolen funds, CSAM-linked activity, and more.

Can I configure per-jurisdiction and per-client policies?

Yes. Define custom enforcement rules by risk type, exposure threshold, hop count, volume, jurisdiction, and severity. Per-client and per-fund configurations are supported for multi-client operations.

What is pool toxicity screening?

Pool toxicity evaluates whether a liquidity pool has exposure to sanctioned, stolen, or illicit funds based on the composition of its liquidity providers, going deeper than address-level checks alone.

Does it support continuous monitoring?

Yes. Previously screened addresses, pools, and tokens can be continuously re-evaluated as new intelligence emerges. You're alerted in real time when a previously clean entity becomes linked to illicit activity.

How fast is the screening API?

Sub-100ms response times for address screening. Designed for integration into real-time transaction flows, withdrawal engines, and signing workflows.

How does it integrate?

A single API endpoint for all screening types (addresses, pools, tokens, and dApps). Supports REST API, streaming, and webhook-based integration with configurable response formats.

Does it provide audit trail documentation?

Yes. Every screening decision, policy evaluation, and risk flag is logged with full evidence, exportable for regulatory examinations across OCC, FCA, MAS, MiCA, and other frameworks.