Phylax
Open App Talk to us

The policy engine for programmable capital.

On integrated networks, protocols define the states they must never reach. The network rejects transactions that would create or spread those risks before they settle.

Integrate now See live controls

In production on Linea since January '26, zero downtime.

Read the 0x Settler mitigation report

"For institutional capital to flow into DeFi at scale, we need to move beyond reactive security models. Institutions don't operate in environments where they detect problems after they occur, they require infrastructure that makes certain failure modes impossible. This integration gives institutions the deterministic, auditable controls they need to meet compliance requirements, while also protecting everyday DeFi users who want assurance that protocols won't be exploited."

Declan Fox — Head of Linea

$2.4M in drain attempts stopped.

Read how 0x prevented drains without changing their contracts.

Read the report

The Credible Layer

Financial safeguards enforced with the network’s existing trust model.

The Credible Layer builds circuit breakers into the transaction path without adding a pause committee, trusted signer, or settlement delay.

  1. Declare the states you must never reach

    Set the outcomes your protocol must avoid.

  2. Compose policies in Solidity

    Build checks in the workflow your engineers use.

  3. The network enforces on every transaction

    Invalid transactions are rejected before settlement.

  4. Every decision produces evidence

    Every policy decision leaves a verifiable record.

For networks & appchains

Give every protocol on your chain a way to say no.

Integrate the Credible Layer so apps can enforce their own policies as blocks are built.

  • Network-native enforcement

    Policies are evaluated where transactions are accepted or rejected, not after the fact.

  • No new trust assumptions

    The Credible Layer inherits the network’s trust model without adding a pause committee, trusted signer, or settlement delay.

  • Protocol-owned policies

    Apps define their own rules; the network enforces them neutrally, no matter who sends the transaction.

  • Shared circuit breakers

    Downstream protocols can act on risk signals from the protocols they depend on, containing failures at the boundary.

For networks & appchains

For apps & protocols

Define the states your protocol must never reach.

Stop bad debt and unbacked assets with invariant checks, circuit breakers, and anomaly detection on every transaction.

  • Safes and admin wallets

    Protect admin keys, owner changes, approvals, modules, and emergency operations after a transaction has been signed.

  • Vault mandates

    Enforce outflow limits, share-price checks, NAV bounds, strategy constraints, and collateral safety policies before capital moves.

  • Lending markets

    Prevent borrow, withdrawal, liquidation, oracle, and parameter changes that break account or market-level risk rules.

  • DEX pools and routes

    Reject unsafe swaps, pool manipulation, route settlement failures, and abnormal liquidity movement before LPs inherit bad state.

  • AML and contagion controls

    Block tainted flow exposure, restricted counterparties, unsafe venues, and risk-increasing actions when threat signals are active.

For apps & protocols

For capital & custody

A risk framework that enforces itself.

Public records show which protections are active. Detailed traces stay private. Coverage is something you can verify, not just a claim.

  • Diligence data in one place

    See active policies, curator actions, and outflows to downstream markets.

  • Route capital into covered venues

    Make enforcement coverage an eligibility requirement for deposits and distribution, not a nice-to-have.

  • Size your exposure on real-time evidence

    Use live constraints, changes, and rule-level evidence to decide whether exposure should grow.

  • Export evidence for review

    Carry enforcement records into diligence, risk, insurance, and IC workflows.

For capital & custody
Phylax dashboard showing anomalies caught, inflow breakers, outflow breakers, and outliers flagged

On-chain finance has a risk problem, not a yield problem.

More yield is not worth losing everything. Every protocol also inherits the risk of the systems it relies on. Existing defenses act too late.

Audits are point-in-time

A review of the code you shipped last quarter cannot cover every path the protocol may encounter today.

Monitoring tells you it’s happening

An alert mid-exploit is a post-mortem with better timestamps. Detection is not prevention.

Human response is too slow

Attacks can finish inside a single block. A human-operated pause key may never get pressed in time.

Blockchains have fast settlement which creates fast losses; prevention is paramount here.

“Audits are necessary, tests are necessary, but there seems to be something missing. We would prefer something preventive, not something that responds after the problem.”
Guillaume Dupont — Lead Developer, Lagoon
“Current monitoring systems detect malicious patterns only after an action has been taken. Catching a malicious transaction before it is mined would be the holy grail of monitoring.”
Dariusz Glowinski — Head of Blockchain Engineering, Euler
Blog

Blog

Read product updates, case studies, market analysis, and first-hand essays about preventative security.
Code

Code

Inspect the public repositories behind runtime enforcement, assertion tooling, and the wider Phylax stack.
Docs

Docs

Follow implementation guides for assertions, local workflows, testing, and Credible Layer primitives.

Define the rules, enforce them, and show the evidence.

Declare the states your protocol must never reach. Phylax rejects the transactions that would cross them and publishes the evidence auditors, allocators, and insurers can verify.

Start a conversation Explore Phylax
The Policy Engine for Programmable Capital
Company
About Contact us Work at Phylax
Resources
Documentation Resources Blog
Products
Apps & protocols Networks & appchains Capital & custody
Links
App X LinkedIn
Terms of Use Privacy Notice Risk Disclosure New York · Frankfurt