Blockaid Brings Onchain Monitoring to Project 0’s DeFi Prime Brokerage

Executive Summary

Project 0 is a DeFi-native prime broker on the Solana network. It brings venues such as Kamino and Jupiter together under a unified margin account, so a trader can borrow against positions held across several of them from one account. In a market where privileged keys, oracle feeds, and every new venue integration are part of the attack surface, Project 0 has run more than three years without a program exploit across $19.33 billion in processed volume.

Project 0 has partnered with Blockaid to bring Onchain Monitoring to its own protocol and to the ecosystem of venues it runs on. Monitors run across Project 0’s program, its banks, oracle feeds, the health of its largest accounts, and its positions at the venues it bridges together. Alerts land in the team’s workflow the moment anything changes.

A prime broker’s exposure sits in venues it does not operate, and a failure at any one of them reaches Project 0’s positions, and the lenders behind them, in minutes. Blockaid surfaces those events as they land onchain, so the team can pause, deleverage, or rebalance in time. For the trading firms and financial institutions that put capital through Project 0, that protection comes with the platform, from a team that has made real-time onchain security part of how it operates.

The Partnership: Real-Time Security Layer Across Project 0 and Its DeFi Venues

Project 0 already runs a layered defense inside its own program. Its risk engine adjusts parameters as markets move, circuit breakers and flow controls limit how fast liquidity can exit, assets are priced at the conservative end of multiple oracle feeds, and program upgrades require 7 of 15 multisig signers. Each venue passes due diligence before capital routes into it and stays under review afterward.

Those controls govern Project 0’s own program, while the venues it bridges together run their own programs, admin keys, and upgrade paths. Blockaid already partners with Kamino and Jupiter, and now places an independent, real-time security layer over Project 0’s exposure, from its program out to the positions it holds downstream, extending as the platform grows. Blockaid’s team mapped how Project 0 holds and moves capital, then built custom monitors on top of Onchain Monitoring’s out-of-the-box detections, so every alert reflects how the protocol actually runs.

Onchain Monitoring: Detections Built Around How Project 0 Moves Capital

Blockaid’s Onchain Monitoring covers the points where a prime broker’s exposure moves:

• Monitor the venues alongside the program - Project 0’s program, banks, oracle feeds, largest accounts, and the positions behind its unified margin are tracked as one inventory. When Project 0 adds a venue, coverage extends to it.
• Detect the events that move risk through unified margin - Monitors trigger on program upgrades and authority changes at Project 0 and its venues, on venue admin actions such as new listings, reduce-only switches, and pauses, on reserve outflows past set thresholds, on oracle readings that jump or lose confidence, and on account-health and insurance-fund signals that precede bad debt. These are the conditions that turn a venue incident into a loss, and they are watched continuously.
• Investigate from a decoded alert - Each alert comes with the instruction that triggered it, the accounts and programs involved, the fund flow behind it, and a severity, so the team starts from the facts.
• Respond where the team already works - Alerts reach Project 0’s team in its own channels and tooling. If one becomes an incident, Blockaid opens a war room with its threat intelligence team to coordinate the response.

Learn more about Blockaid’s Onchain Monitoring →

Venue Risk: A Compromise Upstream Reaches Protocols Downstream

A compromise at a venue reaches every protocol built on top of it, since the positions held there run under that venue’s keys, council, and oracle choices. Blockaid’s threat intelligence traced most of the value DeFi lost across 2025 and early 2026 to compromised keys and wallet infrastructure.

Solana saw this on April 1, 2026, when Drift lost approximately $285 million in under 12 minutes after its admin authority was taken over, and the loss reached the protocols with positions there. Project 0’s controls held, and by its own account its lenders came out better protected than depositors who held funds on Drift directly. That is the job of a risk engine once a venue is exploited, to limit the damage. Seeing the exploit as it starts is a different job, and it is the one Blockaid’s Onchain Monitoring takes on. 

Blockaid’s Onchain Monitoring watches for signals like the three moves that drained Drift. When a monitor triggers, Project 0’s team sees it immediately, knows which of its positions are exposed, and can move to contain the funds at risk.

Looking Ahead: Agentic Lending

More capital is moving through AI agents and automated vaults, and Project 0 is an early example. Its DeFi for AI Agents release connects MCP-capable agents to the platform through ai.0.xyz and, by Project 0’s count, puts 98% of Solana’s credit market behind one agent connection, and Project 0 Vaults run machine-learning strategies across venues for depositors who want the yield without managing the positions. Each path adds activity that moves faster and touches more venues.

That activity is arriving as agentic payments take shape across the industry, with standards such as x402 letting agents transact in stablecoins at machine speed. Blockaid’s H1 2026 Onchain Security Report named AI agents one of the year’s emerging attack surfaces and predicted that attackers would learn to manipulate them. Prompt-injection attacks on trading agents followed. As agents open positions and vaults allocate across venues, the surface Blockaid’s Onchain Monitoring watches grows with them. Blockaid’s View on Security holds that protection has to run as fast as the chain it covers, and Project 0 is bringing more of DeFi’s credit onto infrastructure built to that standard.

Learn more about Blockaid’s View on Security →

About Project 0

Project 0 is a permissionless, non-custodial prime broker on Solana that unifies collateral, credit, and risk management across DeFi venues. Through a single margin account, users can earn yield on supported positions across Project 0, Kamino, and Jupiter Lend, and borrow against their combined collateral through Project 0’s native lending markets. This brings portfolio borrowing and cross-venue strategies into one place.

Learn more at 0.xyz and follow Project 0 on X.

About Blockaid

Blockaid is the onchain security platform trusted by the largest companies operating in Web3. Built by veterans of elite intelligence and cybersecurity units, Blockaid provides end-to-end protection for financial institutions, protocols, and end users, combining direct wallet and dApp integrations with real-time monitoring, detection, and response across smart contracts, infrastructure, and externally owned accounts. Since 2025, Blockaid scanned over 6.3 billion transactions and blocked 585 million attacks. Blockaid is the security infrastructure behind Coinbase, MetaMask, Uniswap, Safe, and dozens of the most widely used platforms in the industry.

Learn more at blockaid.io, and follow us on Twitter and LinkedIn.