Key Insights
Forta Network is addressing one of crypto’s most critical issues: real-time security and compliance. Through its Forta Firewall, the protocol screens transactions for malicious or non-compliant activity before they are executed onchain, shifting security from a reactive to a proactive approach.The Firewall is powered by FORTRESS, a neural network model trained on real transaction data. It can simulate transactions in under 50 milliseconds, boasts a 99% detection rate of past hacks, and maintains a false positive rate below 0.0002%.The Forta Chain, built on Arbitrum Orbit and launched in partnership with Conduit, supports the Firewall by recording flagged transactions in a decentralized, encrypted manner. The FORT token is used for governance, staking, access fees, and gas on Forta Chain.Since its launch in January 2025, Forta Firewall has analyzed over 11.3 million transactions, averaging over 178,600 daily in recent weeks. Integrations with Mode, Balmy, and Plume are active, and integrations with RaaS providers such as Conduit and Gelato provide a pathway for scaling adoption across more rollups.
Introduction
In an industry where billions of dollars are transferred across decentralized protocols and applications, security and compliance remain one of crypto’s most persistent and unresolved challenges. High-profile hacks, exploits, scams, and rug pulls have plagued the ecosystem, resulting in almost $2.7 billion in losses over the past year. From smart contract vulnerabilities to governance manipulation and compromised private keys, the range and sophistication of these incidents continue to grow alongside the industry itself. Despite ongoing advancements in protocol design and auditing standards, most security solutions remain reactive rather than preventative, often detecting issues only after funds have already been drained.
Forta Network is a real-time threat prevention and compliance middleware that screens and blocks malicious or non-compliant transactions before they are executed.
It integrates directly into the transaction flow of protocols and rollups, using simulation-based risk scoring to stop high-risk activity before it reaches the blockchain. This dual-purpose system is designed not only to elevate security but also to help enforce compliance standards onchain; critical features for institutional adoption.
Background
​Forta was established in early 2021 as an initiative incubated by OpenZeppelin, a prominent blockchain security firm. The project is now stewarded by the Forta Foundation, a non-profit organization dedicated to fostering the network’s decentralized growth and governance.
As a decentralized protocol, Forta is supported by the Forta Governance Council, a group of early Forta community members and industry experts elected by FORT tokenholders. Members include:
In September 2021, Forta Network secured $23 million in a funding round led by Andreessen Horowitz (a16z). Other notable investors included Coinbase Ventures, Blockchain Capital, True Ventures, and Digital Currency Group. As of writing, Forta Firewall has been integrated with Plume, Balmy, and Mode, securing over $300 million. Additionally, Forta has partnered with Conduit and Gelato, enabling any rollup launched through these Rollups-as-a-service (RaaS) platforms to utilize the Forta Firewall.
Technology
Forta Firewall
Forta Firewall is a middleware solution that detects and blocks malicious transactions before they are included in a block and executed. It detects malicious transactions through its custom neural network (FORTRESS), which is trained on past, real transaction data. Furthermore, this model constantly evolves and learns as it trains off new transaction data. As for performance, FORTRESS simulates transaction data in less than 50 milliseconds, is able to detect over 99% of past hacks/exploits, and only has a false positive rate of less than 0.0002%.
Forta Firewall’s AI model simulates each transaction and assigns it a score of 0 to 1. Scores closer to 0 are deemed safer, while scores closer to 1 indicate a higher chance of malicious activity. Projects that utilize the Forta Firewall can customize their desired threshold. For example, if a rollup sets the threshold at 0.5, all transactions that score 0.5 or higher will be blocked by the Forta Firewall and not executed. Forta Firewall can be integrated in three ways.
RPC Implementation
Source: Forta Network
The first way in which Forta Firewall can be implemented is as a network’s RPC. An RPC endpoint serves as the gateway between users or applications and a blockchain network. It allows developers to read blockchain data or submit transactions without needing to run their own full node. By integrating with a network’s RPC, Forta Firewall acts as an intermediary layer between the user and the network. Through this, it is able to screen transactions before they are sent to the sequencer and prevent malicious transactions from being executed.
Sequencer Implementation
Source: Forta Network
Forta Firewall can also be directly implemented into a rollup’s sequencer. A sequencer is a component in a rollup that orders and batches user transactions before submitting them to the underlying Layer-1 (L1) blockchain. Forta Firewall can be directly integrated into a rollup’s sequencer, enabling it to filter out malicious transactions before they are executed on the network.
Proxy Contract Implementation
Forta Firewall can also be implemented on smart contract-based applications. It is implemented using smart contracts by placing a proxy contract in front of a protocol’s core contracts. This proxy intercepts incoming transactions, queries the Firewall for a risk assessment, and only provides an onchain attestation if it passes the predefined risk threshold.
Importantly, Forta Firewall does not permanently censor transactions. Instead, flagged transactions are delayed, and the Firewall user (i.e., protocol) can then decide if the transaction should be executed or not.
Compliance
Compliance is rapidly becoming a core requirement for both institutional players and next-generation rollups. As more capital enters the crypto space and regulators increase scrutiny, the ability to prevent unauthorized, non-compliant, or sanction-violating transactions becomes essential.
Forta Firewall addresses this by offering real-time compliance enforcement capabilities. These include:
Screening for wallet addresses tied to illicit activity or sanctioned entities, including addresses on the OFAC Sanctions ListBlocking transactions that violate protocol-specific rules (e.g. KYC enforcement, geographical restrictions)Providing protocols with modular tools to define and enforce their compliance logic onchain.
For rollups aiming to serve enterprises or tokenize real-world assets, built-in compliance tooling is not just a nice-to-have; it’s a prerequisite. Forta Firewall allows these networks to enforce compliance without relying on centralized intermediaries, creating secure and regulation-aligned onchain environments.
Forta Chain
Forta Chain is a Layer-3 (L3) rollup designed to support the Forta Firewall. Launched in partnership with Conduit, Forta Chain utilizes the Arbitrum Orbit tech stack, which allows developers to deploy customizable rollups leveraging Arbitrum’s core technologies like Nitro while offering flexibility over execution, governance, and data availability.
Forta Chain does not support third-party developers and applications. Instead, it complements Forta Firewall by serving as a decentralized record of work and transactions. Forta Chain maintains an inbox of all transactions blocked by the Firewall. Importantly, Forta Firewall does not permanently censor transactions. Instead, flagged transactions are delayed, and the Firewall user (i.e., protocol) can then decide if the transaction should be executed or not. Additionally, transaction details are encrypted and only available to the relevant Firewall user.
Lastly, the FORT token is the native gas token for Forta Chain.
Monitoring Network
The first product launched by Forta Network was the Monitoring Network, which is separate from the Forta Firewall and Forta Chain. The Forta Monitoring Network is designed to detect and report threats in real time across blockchain ecosystems. It is comprised of two main components:
Detection Bots – Detection bots are user-deployed programs that analyze onchain activity to identify suspicious behavior or known threat patterns. Each bot is designed to monitor specific types of activity, such as flash loan exploits, governance changes, or unusual token transfers, and emits alerts when certain conditions are met.Scan Nodes – Scan nodes are independent node operators that continuously monitor blockchain data for activity relevant to deployed detection bots. When a scan node observes a transaction or event tied to a monitored address or contract, it triggers the appropriate detection bots to analyze the activity.
Users then consume the data generated by scan nodes and detection bots primarily through real-time alerts, which are published as data feeds. These feeds can be accessed directly via Forta’s app, API, or integrated into third-party platforms, allowing protocols, wallets, security teams, and infrastructure providers to automate monitoring, threat response, and compliance workflows. By subscribing to specific bots or alert types, users can tailor their security visibility to focus on the contracts, protocols, or behaviors most relevant to them.
While the Monitoring Network is live and functional, the focus of Forta Network has since shifted to the Forta Firewall and Chain.
Tokenomics
FORT is the governance and utility token of Forta Network and has a total token supply of 1 billion tokens.
Allocations
The FORT token went live in September 2021, and the total supply of 1 billion FORT was allocated across four different groups:
Community (45.5%) – 455.0 million tokens allocated to the community through airdrops, node rewards, grants, bounties, and more. These tokens do not have a defined vesting period.Early Backers (24.5%) – 245.0 million tokens allocated to early backers and investors. This allocation had a 1-year cliff, followed by a 3-year linear vesting period that ends on September 1, 2025.2021 Funding Round – 92 million tokens sold at $0.25 per tokenEarlier Funding Rounds – 151 million tokens sold at an undisclosed priceCore Contributors (20.0%) – 200.0 million tokens allocated to early core contributors and team members. This allocation had a 1-year cliff, followed by a 3-year linear vesting period that ends on September 1, 2025.OpenZeppelin (10.0%) – 100.0 million tokens allocated to OpenZeppelin. This allocation had a 1-year cliff, followed by a 3-year linear vesting period that ends on September 1, 2025.
Utilities
The FORT token has several core features, giving utility to tokenholders.
Governance
One of the core functionalities of the FORT token is governance. FORT tokenholders can participate in Forta’s decentralized governance process. Forta’s governance framework consists of two primary components.
The first component is the Forta Proposal Process. This process directly allows FORT tokenholders to influence governance decisions and voice their opinions. It consists of four phases: (1) Ideate, (2) Consolidate, (3) Community Vote, and (4) Council Review. This process allows community members to develop and refine proposals, gauge support through FORT tokenholder votes on Snapshot, and seek implementation approval from the Forta Governance Council. While structured, the FPP is flexible and intended to evolve with community participation.
The second component of Forta’s governance is the Forta Governance Council. The Forta Governance Council is an elected body that reviews and approves proposals passed by the community. Council members are chosen by FORT tokenholders and serve as a final check to ensure proposals align with Forta’s goals before implementation.
Staking
FORT tokens must be staked in order to operate either a detection bot (100 FORT minimum) or scan node (2,500 FORT minimum). Furthermore, tokenholders who do not wish to operate a scan node can participate in delegated staking, allowing them to contribute to the security of the Monitoring Network and receive rewards for doing so. Notably, FORT tokens must be bridged to Polygon before they can be utilized in delegated staking.
Fee Payments
Users who want to access Forta’s General Plan must pay a monthly fee, denominated and paid in FORT. As of writing, the fee is 250 FORT per month.
Gas Fees
FORT is the native token of Forta Chain and is used to pay gas fees on the network.
Revenue
The Forta Firewall generates revenue by charging fees to rollups and protocols that integrate the service to screen and block malicious transactions before they reach the chain. All revenue generated will flow to the Forta treasury, which is subject to Forta’s governance. Subject to governance approval, some potential uses of revenue include:
Token buybacksLiquidity provisioningStaking incentivesEcosystem growth initiatives
As of writing, no proposals have been made related to revenue.
Forta Firewall Activity
The Forta Firewall went live in November 2024. Since then, it has analyzed millions of transactions and helped protect millions of total value locked (TVL).
The Forta Chain first began analyzing transactions in January 2025. As of writing, over 11.3 million transactions have been analyzed. Annualized, this works out to roughly 40.2 million transactions per year. Perhaps more importantly, Forta Firewall has seen an increasing amount of analyzed transactions. From January to February, 54,900 transactions were analyzed per day, on average. From March to mid-April, Forta has averaged 178,600 analyzed transactions, a 225% increase. Forta Firewall’s integration with Mode as represented the majority of transactions, with nearly 86% of transactions occurring on Mode (9.7 million).
For continued growth, Forta must continue to integrate with rollups and protocols. To date, Forta Firewall is live on Mode, Plume, and Balmy. Forta’s partnerships with Conduit and Gelato should drive future integrations and growth.
Roadmap
Looking ahead, Forta is positioning itself as a strategic middleware layer within the onchain transaction flow. Based on current integrations and market trends, several growth vectors seem plausible:
Expanded Detection Modules: Forta may continue to develop new modules for emerging threats such as phishing, scams, and social engineering exploits (areas of growing concern across DeFi and consumer applications).Protocol-Level Deployments: With Forta Firewall already integrated into rollups like Mode and Plume, it’s offering could extend to individual protocols and dApps deployed on those chains, offering protocol-specific solutions and significantly increasing its footprint.Compliance Toolkits: There’s a case for Forta to roll out standardized compliance suites, enabling rollups to adopt regulatory-ready infrastructure out of the box.Ecosystem Leveraging: Forta’s partnerships with Conduit, Gelato, and QuickNode allow integration into a wide range of new rollups launched through these platforms. Looking ahead, expanding collaborations with other RaaS providers could further strengthen Forta’s presence across emerging ecosystems, potentially unlocking a powerful network effect.Market Penetration: Forta is well-positioned to serve high-volume, high-risk ecosystems like L2s, RWA-focused chains, and institutional-grade DeFi protocols, segments that could benefit from proactive security and compliance tooling.
Closing Summary
Forta Network is building a new standard for onchain security and compliance. Unlike traditional tools that react after an incident occurs, Forta Firewall operates within the transaction flow, using real-time AI simulations to block malicious and non-compliant activity before it hits the chain. This makes it not only a technical breakthrough, but a critical enabler for compliant and secure onchain ecosystems.
Forta Firewall has already analyzed over 11.3 million transactions and now processes nearly 200,000 per day. Adoption is accelerating through integrations with Mode, Balmy, and Plume, as well as via RaaS platforms like Conduit and Gelato, with additional rollups expected to come online through these and other upcoming partnerships. As Forta Firewall matures and the FORT token expands its role across governance, staking, and access, Forta is positioned to become a foundational layer for securing onchain activity across ecosystems.
Let us know what you loved about the report, what may be missing, or share any other feedback by filling out this short form. All responses are subject to our Privacy Policy and Terms of Service.
This report was commissioned by Forta Foundation. All content was produced independently by the author(s) and does not necessarily reflect the opinions of Messari, Inc. or the organization that requested the report. The commissioning organization may have input on the content of the report, but Messari maintains editorial control over the final report to retain data accuracy and objectivity. Author(s) may hold cryptocurrencies named in this report. This report is meant for informational purposes only. It is not meant to serve as investment advice. You should conduct your own research and consult an independent financial, tax, or legal advisor before making any investment decisions. Past performance of any asset is not indicative of future results. Please see our Terms of Service for more information.
No part of this report may be (a) copied, photocopied, duplicated in any form by any means or (b) redistributed without the prior written consent of Messari®.