Webacy

Webacy is a digital asset security firm that provides AI-powered risk intelligence to wallets, exchanges, decentralized applications, and protocols. The company's platform, marketed as "the trust and safety engine for crypto," helps onchain products detect fraud, scams, and exploits before they reach end users. Rather than relying on post-incident forensics, Webacy analyzes wallets, tokens, smart contracts, and transactions in real time so that risks are surfaced before a user signs or executes.

The Problem

Cryptocurrency theft and fraud have become a structural hazard of the onchain economy. More than $3 billion was lost to hacks and exploits in the first half of 2025 alone. Existing security tooling was largely reactive — flagging threats after funds had moved — or siloed to single chains. Webacy was built around the premise that the security layer for crypto needs to work like compliance infrastructure does in traditional finance: continuously, across assets and chains, and embedded directly into the products users already use.

How It Works

Webacy operates as a risk data network. Its platform processes millions of monthly signals sourced from over 15 data providers, combining on-chain transaction data, compliance databases, social engineering detection signals, and crowdsourced threat reports into unified risk ratings.

The core technical product is the Webacy DD API suite — DD standing for due diligence. The API delivers structured risk assessments across four primary domains:

Know Your Wallet (KYW): Wallet Risk Intelligence that combines compliance signals, behavioral patterns, and financial activity history into a single output. The API flags OFAC and global sanctions exposure, interactions with mixers or illicit services, links to known hacks, and high-risk counterparty history.

Know Your Transaction (KYT): Transaction Risk Intelligence that analyzes the full path of a transaction before it is submitted to the chain. This includes contract interactions, token flows, and downstream counterparty risk, and specifically flags common attack vectors such as address poisoning, approval draining, and phishing contracts.

Smart Contract Analysis: On-demand scanning using a combination of fuzzing, static analysis, and dynamic analysis. Webacy parses raw EVM bytecode at the function-selector level — described by the company as the most atomic layer of on-chain behavior — to detect malicious intent that higher-level analysis misses. The platform maintains over 300 active threat detectors trained on real-world attack patterns.

SafetyScore: An aggregate risk profile for a given address, representing its exposure to risky activity through historical transactions, behavioral signals, and owned assets. The score is used by wallets and applications to surface risk to users at the point of interaction.

The API architecture is modular. Integrators can select specific risk modules — Security Essentials, Token Security, Contract Analysis, Market Data — rather than consuming a monolithic feed. This reduces integration complexity, particularly for teams building in a single vertical such as bridge monitoring or DEX risk screening. Response latency for sanctions and address-poisoning checks is documented at under 500 milliseconds. The platform also supports batch operations of up to 100 items per request for vault and RWA analysis, and provides a webhook system (in beta) for event-driven notifications such as new token launch analysis.

Developer access is available through a TypeScript SDK, a REST API, and an MCP server connection. Sandbox access is available at DD.xyz.

Solana Support

Webacy supports 13 blockchain networks. Alongside Ethereum and its EVM-compatible layers (Polygon, BNB Chain, Optimism, Arbitrum, Base), the platform covers Solana, TON, Sui, Sei, Stellar, Hedera, and Bitcoin. Solana token analysis is explicitly included in Webacy's trading-endpoint documentation, and the company has engaged directly with the Solana ecosystem — co-hosting security panels with projects like GoPlus Security. Solana users can analyze wallets against Webacy's full risk-factor database through the dapp.webacy.com interface.

Consumer Product Suite

In addition to its B2B API infrastructure, Webacy launched a consumer-facing Safety Suite targeting self-custodied wallet holders who lack institutional security tooling. The suite includes:

• Wallet Watch: Real-time monitoring of connected wallets via SMS or email alerts for suspicious transactions and token approvals across both hot and cold wallets.
• Panic Button: Bulk asset transfer to a pre-designated safe wallet in the event of an active exploit or compromise.
• Backup Wallet: An asset recovery mechanism for scenarios involving lost access, compromised keys, or forgotten seed phrases.
• Crypto Will: A smart-contract-based inheritance mechanism that transfers assets to designated beneficiaries.

All consumer products are non-custodial and operate through user-signed smart contracts. Webacy does not take custody of or store private keys.

Acquisitions and Expansion

Webacy acquired Trugard Labs, a smart contract risk analytics startup backed by Evolution Equity Partners, to deepen its behavioral threat detection capabilities. The acquisition added machine-learning-trained analysis for detecting sophisticated manipulation patterns, including price manipulation schemes and novel malicious bytecode variants, that rules-based systems miss.

Clients and Partners

Webacy counts Arbitrum, Etherscan, and Stellar among its flagship clients. The Arbitrum developer documentation references Webacy as a recommended risk data network integration. The company reports securing approximately $30 billion in digital assets across its network.

Team and Funding

Webacy was founded in 2021 and is headquartered in San Francisco. CEO and founder Maika Isogawa previously worked as a cybersecurity engineer at Microsoft and attended Stanford University. The company has raised over $6.9 million across multiple rounds.

The 2023 seed round of $4 million was led by gmjp and included Gary Vaynerchuk, AJ Vaynerchuk, Mozilla Ventures, Soma Capital, DG Daiwa Ventures, Quantstamp, CEAS Investments, and Dreamers. A 2025 round of $2.9 million added the Sui Foundation, market maker GSR, Balaji Srinivasan (former Coinbase CTO), and Sebastien Borget (co-founder of The Sandbox), with continued participation from Mozilla Ventures, gmjp, and DGDV.

Positioning

Webacy sits at the infrastructure layer of onchain security — beneath the wallet and application UI, providing the risk signals that those products use to protect their users. Its multichain coverage, modular API design, and combination of compliance-grade screening with behavioral analysis positions it as a security data provider for teams building across EVM and non-EVM ecosystems alike, including Solana.