> For the complete documentation index, see [llms.txt](https://otomato-2.gitbook.io/otomato-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://otomato-2.gitbook.io/otomato-docs/product/getting-started/otomato-for-security-alerts.md).

# Otomato for Security alerts

## Otomato for Security Alerts

{% hint style="info" %}
With security alerts, we want to make sure you know it first when a protocol you are exposed to is compromised.
{% endhint %}

### What we monitor

Otomato detects security threats affecting your positions through two layers of monitoring:

**Social monitoring (today)**

* **Protocol X accounts:** If a protocol you use tweets about an incident, you're notified immediately
* **Security researchers:** We track X accounts like Lookonchain, PeckShieldAlert, CertiKAlert, and other trusted sources who often break news first.

**On-chain monitoring (coming soon)**

* **Real-time transaction analysis:** We monitor activity on protocols you're exposed to and detect suspicious patterns before anyone raises the alarm on X

### Use cases

<details>

<summary>Hack or exploit detected</summary>

When a protocol you're exposed to is compromised, every minute counts. Otomato **surfaces credible hack reports** from protocol announcements and security researchers so you can assess whether to withdraw.

**Example notifications**

* *"Security incident reported on Euler Finance.* [*View source*](https://t.co/xxxx)*."*
* *"Aave tweeted about a potential exploit on their v3 markets.* [*View source*](https://t.co/xxxx)*."*
* *"Lookonchain flagged suspicious outflows from Curve pools.* [*View source*](https://t.co/xxxx)*."*

</details>

<details>

<summary>Frontend compromise</summary>

A compromised frontend can **drain your wallet** even if the protocol's smart contracts are safe. Otomato **alerts you immediately** when a protocol reports their website has been compromised.

**Example notifications**

* *"Balancer reported their frontend has been compromised.* [*View source*](https://t.co/xxxx)*."*
* *"Galxe's website is flagged as compromised.* [*View source*](https://t.co/xxxx)*."*

</details>

### Improvements

We're continuously looking to add support for alerts the community is asking for. If you'd like us to add a new use case, reach out on [Telegram](https://t.me/OxClement).