Skip to main content
Blockchain risk is not one-size-fits-all. A wallet, stablecoin, smart contract, vault, and transaction each present fundamentally different risks and require different evaluation methodologies. Rather than applying a single scoring model to every blockchain object, Webacy first identifies the type of entity being analyzed before selecting the appropriate detection engines, risk factors, and scoring methodologies. This ensures that every entity is evaluated within the correct context. Many entity types are also divided into specialized subtypes, each with their own characteristics and risk considerations. As the blockchain ecosystem evolves, Webacy continuously expands support for new entity classes and refines existing methodologies.

Wallets

Wallets represent individuals, organizations, protocols, exchanges, smart contracts, and other blockchain participants. Depending on the wallet type, Webacy may evaluate factors such as behavioral history, fund flows, counterparty exposure, sanctions, historical activity, concentration, transaction patterns, and known associations. Examples include:
  • Externally Owned Accounts (EOAs)
  • Exchange wallets
  • Treasury wallets
  • Multisigs
  • Protocol-owned wallets
  • Custodial wallets
  • Smart contract wallets

Transactions

Every transaction represents a unique event onchain with its own context and potential risk. Webacy analyzes transaction intent, asset movement, contract interactions, simulation results, counterparties, execution patterns, and other contextual signals to identify security, financial, operational, and compliance risks. Examples include:
  • Transfers
  • Swaps
  • Bridge transactions
  • Contract interactions
  • Approvals
  • Mint and burn operations
  • Governance actions

Tokens & Digital Assets

Digital assets vary significantly in structure, purpose, and risk profile. Different token categories introduce different considerations around liquidity, concentration, governance, issuance, holder behavior, and protocol dependencies. Examples include:
  • Utility tokens
  • Governance tokens
  • Meme coins
  • Wrapped assets
  • Yield-bearing assets
  • Liquid staking tokens (LSTs)
  • Liquid restaking tokens (LRTs)

Stablecoins

Stablecoins require specialized financial and operational analysis beyond traditional token evaluation. Depending on the stabilization mechanism, Webacy evaluates reserve composition, redemption mechanics, liquidity, peg stability, concentration, collateral quality, protocol dependencies, and market behavior. Examples include:
  • Fiat-backed
  • Crypto-backed
  • Algorithmic
  • Synthetic
  • Yield-bearing
  • Hybrid collateral models

Vaults

Vaults introduce risks associated with strategy execution, protocol integrations, liquidity, and asset management. Webacy evaluates vault construction, underlying positions, leverage, protocol dependencies, TVL changes, historical performance, and operational characteristics. Examples include:
  • Yield vaults
  • Lending vaults
  • Liquidity provider vaults
  • Delta-neutral strategies
  • Leveraged vaults
  • Treasury vaults

Real World Assets (RWAs)

Real World Assets encompass a wide range of tokenized financial products, each with unique legal, operational, and financial characteristics. Risk factors vary depending on collateral structure, issuer obligations, redemption mechanisms, underlying assets, and jurisdiction. Examples include:
  • Gold-backed assets
  • Treasury-backed assets
  • Money market funds
  • Private credit
  • Corporate debt
  • Real estate
  • Commodities
  • Tokenized deposits

Smart Contracts

Smart contracts are evaluated independently from the assets they manage. Webacy analyzes contract architecture, permissions, upgradeability, ownership, privileged functions, audit history, bytecode, dependencies, exploit patterns, and operational risks. Through the acquisition of Trugard, Webacy operates a real-time smart contract risk analysis engine that can detect risk and malicious capabilities at code-level. Examples include:
  • ERC-20 contracts
  • Vault contracts
  • Lending protocols
  • DEX contracts
  • Bridge contracts
  • Governance contracts
  • Token factories

Domains

Blockchain naming systems provide human-readable identities that can represent individuals, organizations, protocols, or infrastructure. Webacy evaluates ownership history, associated wallets, linked assets, reputation, and other contextual signals. Examples include:
  • ENS
  • Unstoppable Domains
  • Basenames
  • SNS
  • Other blockchain naming services

URLs

Webacy evaluates URLs associated with blockchain applications, wallets, and infrastructure to identify potential security and operational risks. Analysis may include domain reputation, phishing detection, hosting characteristics, historical observations, and associations with known blockchain entities. Examples include:
  • dApp websites
  • Wallet connection endpoints
  • RPC endpoints
  • API endpoints
  • Documentation sites
  • Governance portals

Evolving with the Ecosystem

The blockchain ecosystem continues to introduce new asset classes, protocols, and financial primitives. As these innovations emerge, Webacy expands its supported entity types, introduces new subcategories, and refines its methodologies to ensure every entity is evaluated using the most appropriate risk model. Entity classification is the first step in the Webacy Risk Framework, ensuring that every analysis begins with the correct context before any risk scores or ratings are calculated.

What’s Next

Risk Factors

Every Webacy risk score is built from hundreds of independent signals that together provide a comprehensive view of onchain risk.