Defimon：基于Streams实时 DeFi 安全解决方案
How Defimon cut block detection latency 4x, expanded from 3 chains to 8, and reduced infrastructure management from a team effort to one engineer.
In DeFi, the window between an exploit landing onchain and a protocol team being alerted can be critical. Defimon exists to close that window with instant security alerts and automated incident response. Built by the security team at Decurity which is trusted by 1inch, Gearbox, and the Arbitrum Foundation, it monitors EVM chains 24/7 and fires Telegram alerts to the protocol teams, security companies and risk curators before hacks make the news. That speed is the product. So when the infrastructure keeping it alive started getting in the way, something had to change.
挑战
传统的流式数据管道难以适应链上监控
Defimon 实时追踪数百万个钱包地址和合约交互。其最初的架构是在 AWS 上运行的 Apache Flink SQL 管道，该架构将这份监控列表保存在内存中。随着监控范围的扩大，内存不足错误促使他们开始寻找替代方案。该系统无法随着需要监控的范围扩大而进行扩展。
$4,000 a month for 3 chains, with a team of 4 to keep it running
Infrastructure cost approximately $4,000 per month on AWS to cover just three networks and required three to four engineers: pulling RPC data manually, managing SQL schemas, debugging pipeline failures. The team's expertise was in detection logic. They were spending it on infrastructure plumbing.
导致告警质量下降的区块延迟
Manual RPC polling produced around two seconds of latency per block. For a product where detection timing determines whether a protocol team gets warned in time, that was a structural problem.
解决方案
Defimon replaced their self-managed pipeline with Quicknode Streams. The migration was near-instant. Existing detection logic carried over, and the team was up and running without having to rebuild from scratch.
内存问题，从源头解决
Streams上游过滤功能及其与键值存储列表的原生集成，Defimon 能够根据地址、合约或事件类型，在数据进入其管道之前，精确定义哪些数据可以进入其系统。监控列表不再以不断增长、容易崩溃的列表形式驻留在内存中。添加或移除受监控的地址已成为一项配置变更，而非工程任务。
一条管道。八条链。
Ethereum, BNB Smart Chain, Arbitrum, Base, Polygon, Avalanche, Optimism, and HyperEVM all run through a single Streams integration. Adding a new chain no longer means new infrastructure. It means updating a config. The team went from three chains managed across a fragmented AWS setup to eight chains managed by one person.
Quicknode Streams 在区块链节点层运行灵活的 JS 过滤器，使我们能够在不造成停机的情况下增强和部署业务逻辑，并能即时发现安全漏洞。”— 阿尔塞尼·雷乌托夫，首席技术官兼联合创始人Decurity