Transaction Risk Alerts
Seven rules. Every threshold written out.
The monitor runs these on what it read from the chain. Rule numbers are the same codes a flag uses in AgvioDeclarations (8 = other).
Rule 1
Target outside the declared contracts
A transaction sent by the agent calls a contract that is not on its list of allowed contracts. Only checked when the list has at least one entry.
high · needs declaration or your limits
Rule 2
Native value above the cap
A transaction sends more ETH than the most allowed per transaction.
high · needs declaration or your limits
Rule 3
Token amount above the cap
In a transaction the agent sent, it moved more of a listed token than that token's cap, or moved a token that is not listed while the list has entries.
high · needs declaration or your limits
Rule 4
Unlimited approval
An allowance read on chain now is at least 2^128 (practically unlimited), or an operator may move every NFT of a collection.
medium · needs nothing
Rule 5
Approval to an address without code
A live allowance or operator approval points at an address that has no contract code: a plain key, which can move the tokens at will.
high · needs nothing
Rule 6
Burst above the limit
More transactions inside the burst window than the limit allows. Without limits: more than 10 within 60 seconds.
medium · needs nothing
Rule 7
New counterparty
A contract or recipient first seen in the latest quarter of the scanned window, after the agent was already active earlier in it.
info · needs nothing
Fixed numbers
- Unlimited: an allowance of at least 2^128.
- Burst without limits: more than 10 transactions within 60 seconds, reported once per window.
- New counterparty: first seen in the latest 25% of the window, after earlier activity in it.
What the monitor cannot see
- · Without an explorer API key on the server, a transaction appears only if it moved or approved a token from or to the address inside the window. A plain ETH send, a call without token events and every failed transaction are not visible. The nonce shows how many are missing.
- · Approvals given before the window are read for WETH, USDG and USDe only (their whole history). For other tokens, only approvals inside the window are found.
- · A scan looks up at most 120 transactions; on a very busy address the newest are shown and the page says so.
- · Rules 1–3 need limits: the agent's declaration in AgvioDeclarations, or limits you keep in your browser. Without them they do not run.
- · Nothing here is a verdict. A match is a reason to look at the transaction yourself.