Immunefi Firewall powered by Dedaub
Real‑Time On-chain Protection

Blocking malicious smart contract calls before they execute
Firewall Shield
Shield Icon

Enforcement Layer

Real-time policy enforcement

  • Enforce access rules and invariants on‑chain at execution time
  • Apply granular, evolving policies across critical functions
Shield Icon

Policy Engine

Configurable Security Policies

  • Control logic based on the caller or behaviour.
Shield Icon

Lightweight Protection

Non‑Invasive Defense

  • Enforces security at runtime via a lightweight Solidity modifier
  • Blocks anomalies in real time without limiting integrations

Core functionalities

Address-Based Access Control

Address-Based Access Control

Whitelist known EOAs, multisigs, or Rollland wallets while blocking unknown contracts by default.

Global Blocklist Subscriptions

Global Blocklist Subscriptions

Auto-block flagged actors using curated threat intel feeds.

Flexible Policy Management

Flexible Policy Management

Policies wrap individual functions. Add, update, or remove rules anytime — no redeploy needed.

Developer-Friendly Integration

Developer-Friendly Integration

One-line Solidity modifier and config file — that's all it takes.

Security that grows with you

From strict isolation at launch to sophisticated invariants at scale — Immunefi Firewall evolves with your protocol.

1

Restrict Unknowns Early

Only allow calls from the frontend or trusted EOAs; block all unknown contracts. Protocol-specific whitelisting enforces tight access control during the protocol's most vulnerable phase.

2

Permit vetted contracts

As integrations grow, only vetted contracts are allowed via global whitelisting — no open access. Vetting is automated through Dedaub's analysis engine, enabling safe, permissionless composability.

3

Enforce runtime rules

As protocols scale, firewalls check not just who calls, but also what happens during execution. Invariant checks enforce pre/post-call conditions, blocking any violations of critical protocol logic.

4

Max security posture

At the assurance stage, each transaction is pre-approved via off-chain simulation before execution. Dynamic protection blocks any call that deviates from expected behavior — in real time.

$Billions secured in TVL through proactive blockchain security measures

Why Magnus Firewall powered by Dedaub stands apart

Measurable Defense

Measurable Defense

Magnus Firewall prevents runtime exploits, avoiding costly damage. One blocked attack can save millions in protocol funds.

Expertise and Tools

Expertise and Tools

Built on Dedaub's technology and analysis stack, the Firewall delivers enforcement powered by deep security expertise.

24/7

24/7

The Firewall enforces rules and reacts instantly to anomalous behavior, without needing human intervention.

Innovation

Innovation

Combine static analysis, simulation, and live call evaluation to create adaptive, precise runtime defenses tailored to your protocol.

Designed by World-Leading Security Experts

Dedaub has improved safety in the Web3 space by addressing vulnerabilities and collaborating with the Ethereum Foundation on EIPs and various upgrades.
Chainlink CHAINLINK BUILD PROGRAM PARTNERSHIP
Arbitrum ARBITRUM DAO SECURITY ADVISOR
Oasis Protocol OASIS PROTOCOL SAPPHIRE'S SECURITY PARTNER
Seal 911 FOUNDING COLLABORATOR OF THE SEAL 911
Uniswap UNISWAP FOUNDATION SECURITY PROVIDER
zkSync ZKSYNC SECURITY COUNCIL MEMBER

Block malicious smart contract calls before they execute

  • Real-time policy enforcement
  • Configurable Security Policies
  • Non‑Invasive Defense
GET STARTED
Firewall Shield