bridge-security-watchdog

name	Bridge Security Watchdog
description	Real-time bridge security monitoring tool that analyzes TVL changes, tracks large withdrawals, and generates comprehensive safety scores (0-100) to detect exploits and help users avoid compromised bridges. Monitors Stargate, Wormhole/Portal, Across, Hop, and major cross-chain bridges using on-chain data and multi-dimensional risk assessment.
version	1.0.0
author	Web3 Security Team
tags	["bridge-security","defi-safety","onchain-analysis","risk-assessment","tvl-monitoring","withdrawal-detection","exploit-detection","cross-chain","security"]
activation_triggers	[{"keyword":"bridge safety"},{"keyword":"bridge security"},{"keyword":"bridge exploit"},{"keyword":"tvl drop"},{"pattern":"bridge_safety|withdrawal_detection|cross_chain_security"},{"intent":"analyze_bridge_safety"}]
parameters	[{"name":"bridge_id","type":"string","required":true,"description":"Bridge protocol to analyze (stargate, portal, across, hop, synapse)","example":"stargate"},{"name":"chain","type":"string","required":false,"default":"ethereum","description":"Blockchain network (ethereum, arbitrum, optimism, polygon, base)","example":"ethereum"},{"name":"time_window_hours","type":"integer","required":false,"default":24,"description":"Time window for TVL comparison in hours","example":24},{"name":"blocks_to_scan","type":"integer","required":false,"default":1000,"description":"Number of recent blocks to scan for withdrawals","example":1000},{"name":"detailed","type":"boolean","required":false,"default":false,"description":"Include detailed analysis breakdown in response","example":true}]
difficulty	intermediate
estimated_time	10-30 seconds per analysis

Bridge Security Watchdog

Overview

The Bridge Security Watchdog is a critical safety tool that monitors Lock-and-Mint bridge protocols (Stargate, Wormhole/Portal, Across, Hop) for large or suspicious withdrawals before users interact with them. By combining TVL monitoring, withdrawal pattern detection, and historical stability analysis, it provides actionable safety scores (0-100) to help users avoid compromised bridges.

What Makes This Unique

Unlike simple TVL trackers, this skill actively watches for exploit indicators:

• Real-time TVL drain detection: Spots sudden liquidity drops that may indicate exploits
• Large withdrawal monitoring: Tracks unusual token movements from bridge contracts
• Pattern recognition: Identifies rapid withdrawal sequences characteristic of exploits
• Multi-dimensional scoring: Combines TVL, withdrawals, history, and volume for comprehensive safety assessment

Problem Solved

Bridge exploits have resulted in billions in losses (Wormhole: $326M, Nomad: $190M, Ronin: $625M). Users need pre-transaction safety checks before committing funds to bridges. This skill provides:

1. Pre-Bridge Safety Check: "Is this bridge safe to use RIGHT NOW?"
2. Exploit Detection: Identifies bridges actively being drained
3. Comparative Analysis: "Which bridge is safest for my transfer?"
4. Risk Quantification: Clear 0-100 safety scores with actionable recommendations

---

Core Features

1. TVL Monitoring (bridge_tvl_monitor.py)

Monitors Total Value Locked changes across bridge protocols using DefiLlama API.

Capabilities:

• Real-time TVL tracking across all major bridges
• Chain-by-chain TVL breakdown
• Historical comparison (24h default, configurable)
• Alert generation for TVL drops (>2%, >5%, >10%, >20%)
• Severity classification (SAFE, LOW, MEDIUM, HIGH, CRITICAL)

Detection Patterns:

TVL Drop Thresholds:
- <2% drop: SAFE (normal fluctuation)
- 2-5% drop: LOW RISK 
- 5-10% drop: MEDIUM RISK
- 10-20% drop: HIGH RISK
- >% drop: CRITICAL (potential exploit)