ExVul
Contract creation alerts are live

Catch suspicious contracts at deployment, not after the drain.

SkyEye monitors new on-chain deployments, detects malicious contract patterns, and delivers high-signal alerts while your team still has time to respond.

View subscription plansContact @realnolan
Ethereum + BNB ChainTelegram deliveryDeploy-time signal
Live deployment feed
Bytecode inspection
Malicious-pattern alerts
Early response window

Reviewed alert feed

Alerts published from SkyEye Lark.

Reviewers publish selected contract-creation and follow-up call alerts directly from the response channel.

9 published alertsTimes shown in UTC+8

Detected incident feed

Detected malicious contracts.

Confirmed incidents are added here with the chain, detection time, attack gap, target, and measured loss.

1 confirmed incidentEthereumLatest: Aug 20, 2026
Confirmed incidentFlashstake V2ChainEthereumDetectedAug 20, 2026Attack gap2hTargetFLASH/WETH Reward PoolLoss0.55 WETH ($886)Details

Economic Design / Mispriced Reward Pool

What happened

Flashstake V2 was exploited through its instant upfront reward path. The protocol minted FLASH from unit-based staking inputs without checking its external market value, then allowed the fresh reward to be sold immediately into the FLASH/WETH pool.

  1. 1The attacker borrowed 10 ETH from Uniswap V4 PoolManager, but used only 0.11679 WETH to acquire 296,288 legacy FLASH across DODO, Uniswap V2, and the AMP/FLASH pool.
  2. 2The legacy FLASH was locked for 653 days, producing 145,125 FLASH upfront. That reward was atomically sold for 0.54529 WETH.
  3. 3The reward pool's WETH reserve fell by 28.25%. After repayment, the attacker retained 0.4284 ETH ($696) in net profit.

Root cause

Cheap externally sourced FLASH could generate unit-based upfront rewards and be converted immediately into real WETH, with no oracle sanity check, vesting, cooldown, or payout cap. No oracle was manipulated—the mispriced reward pool itself was the extraction sink.

On-chain references

TransactionAttackerVictim poolProtocol source

Before the exploit

The attack setup is already on-chain.

Many exploits go unnoticed in their earliest stage. SkyEye looks at the contracts attackers deploy before execution, giving defenders an earlier signal and more time to pause, block, or protect the protocol.

Detect intent before impact.

SkyEye alert botJust now

Malicious contract alert

Suspicious contract creation

Chain
BNB Chain (BSC)
Contract
0x7A31...91F2
Creator
0x19C4...A80E
Block
#51,804,217
Transaction
0xE841...C72D
Risk
High-risk deployment
Contract and transaction links included

How it works

From deployment to alert.

A focused monitoring pipeline turns raw contract creation activity into an actionable threat feed.

01

Watch new deployments

SkyEye follows contract creation activity as it lands on Ethereum and BNB Chain.

02

Analyze suspicious logic

Bytecode, decompiled logic, and adversarial threat patterns are evaluated together.

03

Deliver the signal

High-confidence findings arrive with the context your team needs to investigate.

Subscription plans

Choose how long SkyEye watches with you.

Every plan includes the complete SkyEye Contract Monitor feed. Longer coverage receives a larger discount.

Pay with USDC or USDT via @Exvulsecpayment_bot

1 month

Standard

SkyEye monitor

50USDC
or USDT

Regular price

Valid for 30 days
Subscribe / renew

3 months

5% off

SkyEye monitor

142.5USDC
or USDT

Original 150 USDC/USDT

Valid for 90 days
Subscribe / renew

6 months

10% off

SkyEye monitor

270USDC
or USDT

Original 300 USDC/USDT

Valid for 180 days
Subscribe / renew
Best value

1 year

20% off

SkyEye monitor

480USDC
or USDT

Original 600 USDC/USDT

Valid for 365 days
Subscribe / renew
Real-time suspicious deployment alerts
Contract, creator, block, and transaction context
Bytecode and malicious-pattern analysis
Telegram bot delivery

For protocol teams

Route alerts into your own response stack.

A WebSocket feed is available for automated alerting, internal dashboards, and incident-response workflows.

Discuss WebSocket access
contract.creation.alertLIVE
{
  "event": "contract.creation.alert",
  "chain": "bsc",
  "severity": "high",
  "contract": "0x7a...91f2",
  "confidence": 0.96,
  "status": "active"
}

The chain never sleeps. Neither does SkyEye.

Choose your coverage period and start receiving deployment-time threat intelligence.

Choose a plan