Blockaid Brings Onchain Monitoring and Cosigner to Concrete's Vault Infrastructure

Executive Summary

Concrete is the operating system for onchain finance, a full-stack vault platform that institutions, protocols, asset issuers, and allocators use to launch and run yield products with automated execution, accounting, and risk controls. Its products span Earn, Vaults, Enterprise, and AssetCX, and the platform holds over $1 billion in assets across them.

Concrete has partnered with Blockaid to bring continuous monitoring and transaction validation to its vaults. Onchain Monitoring runs across Concrete's vault contracts, the roles that administer them, and the protocols its strategies allocate into, surfacing threats to vault operations as they occur. Cosigner reviews each transaction Concrete's operations team signs to move vault capital, simulating its outcome and checking it against policy before a signature is released.

Capital in a Concrete vault moves constantly, as the operations team rebalances it across strategies and venues on behalf of every depositor. Cosigner checks each of those transactions before it is signed, and Onchain Monitoring watches what happens onchain once it lands. The two layers are connected, so a threat detected onchain can hold the next signature before it is released. Depositors, curators, and institutional allocators gain independent oversight of vault operations that runs around the clock.

The Partnership: Blockaid's Security Layer Across Concrete's Vault Stack

Concrete builds security into each level of its vault infrastructure. Its smart contracts are reviewed by multiple independent audit firms, roles and permissions are segregated, accounting runs independently of strategy execution, and automated risk controls govern how capital is deployed. Blockaid adds a layer that validates every transaction before it is signed and monitors it once it lands onchain.

Each Concrete vault operates as a product in its own right, with its own strategy, deposit assets, and set of venues, and Blockaid's coverage is organized the same way. Monitors and policies are scoped vault by vault, so each one carries rules matched to the addresses it interacts with and the actions its operations require. As Concrete launches new vaults, strategies, and networks, coverage can extend to each one within the same structure, keeping protection in step with the platform's growth.

Continuous Coverage: Blockaid's Onchain Monitoring Across Concrete's Vaults and Venues

A vault's exposure runs wider than its own contract. Deposits sit in a contract Concrete deploys, privileged roles control how that contract behaves, and the strategy inside it routes capital into external protocols that Concrete does not operate. Onchain Monitoring covers all three surfaces for every vault in scope:

• The vault contracts themselves - Monitors on each vault flag exploit activity against the contract, capital leaving outside its usual pattern, and movements that break from the strategy's expected behavior. For depositors, the contract holding their funds is checked block by block against how it is meant to behave.
• The roles that administer them - Changes to admin roles, ownership transfers, and contract upgrades outside a planned release are surfaced the moment they land onchain. For Concrete's team, the permission structure each vault depends on is verified continuously, with every change visible as it happens.
• The venues strategies allocate into - The external protocols a vault routes capital through are monitored alongside the vault, so an exploit or an anomalous outflow at a venue reaches Concrete's team while the position can still be adjusted. For curators and allocators, the dependencies underneath a strategy are watched with the same attention as the vault above them.

Alerts carry severity, the affected addresses, and the flows behind the event, and they route both to Concrete's team and into Blockaid’s Cosigner, where a detection can act on the next signature.

Learn more about Blockaid’s Onchain Monitoring →

Policy Enforcement: How Blockaid's Cosigner Holds Each Vault to Its Own Rules

Moving vault capital means signing transactions, and each signature authorizes an outcome onchain on behalf of every depositor in that vault. Cosigner evaluates that outcome before the signature exists, on infrastructure separate from Concrete's own:

• Simulate and validate each transaction -  Cosigner simulates every transaction Concrete's operations team initiates, showing which assets move, in what amounts, and to which addresses, then scores the result against Blockaid's threat intelligence. Its signature is added only when the transaction matches policy and carries no threat signal, and anything else is held for the team to review. For depositors, every rebalance clears an independent check before it executes.
• Enforce policy at the level of each vault - Policies scoped to a vault define which addresses can receive its funds and which actions its operations can take, so a transaction outside that vault's expected pattern stops at the signature. For curators and allocators, each vault's operating limits hold inside the signing flow itself.
• Act on a detection at the next signature - Monitors connect directly to Cosigner, so a threat surfaced onchain, in a vault or in a venue it depends on, can hold the signature on the next outbound transaction while the team receives the alert. Response begins at the first signal, and capital stays where it is until the team decides.

Learn more about Blockaid’s Cosigner →

Looking Ahead: Securing Protocol Governance as Concrete Scales

Concrete launched CT, the governance and configuration token for its ecosystem, on September 30, 2026. Protocol decisions will move progressively into token-enabled governance as the platform expands across new vaults, strategies, networks, and institutional modules.

Token governance puts protocol decisions to a vote, and attackers have learned to target the vote itself. Governance takeovers drained roughly $22 million from seven protocols in 2026 by assembling cheap voting majorities and executing proposals the moment they passed.

Concrete is bringing governance online with real-time security already running. A proposal that passes still has to be signed to take effect, and Cosigner validates that transaction against policy before it executes, while Onchain Monitoring tracks the result once it lands. As more depositors and more capital come onto the platform, and as more decisions move into governance, they arrive on infrastructure where protection acts before and after every transaction, at the pace capital moves onchain. That is the standard Blockaid's View on Security sets, and Concrete is building it in as it scales.

Learn more about Blockaid's View on Security →

About Concrete

Concrete is an institutional-grade DeFi infrastructure provider enabling yield generation and vault orchestration across decentralized finance protocols. For more information, contact them at [email protected] or visit their website.

About Blockaid

Blockaid is the onchain security platform trusted by the largest companies operating in Web3. Built by veterans of elite intelligence and cybersecurity units, Blockaid provides end-to-end protection for financial institutions, protocols, and end users, combining direct wallet and dApp integrations with real-time monitoring, detection, and response across smart contracts, infrastructure, and externally owned accounts. Since 2025, Blockaid scanned over 6.3 billion transactions and blocked 585 million attacks. Blockaid is the security infrastructure behind Coinbase, MetaMask, Uniswap, Safe, and dozens of the most widely used platforms in the industry.

Learn more at Blockaid.io, and follow us on Twitter and LinkedIn.