·
2 min read
Off-chain vs on-chain security, why they're different products
Off-chain security stops the lure, such as fake sites, accounts, ads and apps. On-chain security watches contracts and transactions. Who needs which.
ChainPatrol Team
“Off-chain” and “on-chain” get used as if one were a subset of the other. They are different layers with different tools, and the confusion leads buyers to mark a brand protection vendor down for not doing something it was never built for.
Off-chain security | On-chain security | |
|---|---|---|
What it watches | Websites, social accounts, ads, apps, messages | Smart contracts, transactions, wallets, protocols |
What it stops | The customer being convinced | The transaction being executed, or caught after |
Typical tools | Detection, blocking, takedowns | Transaction simulation, contract monitoring, forensics |
Who needs it | Any brand with customers, such as banks, fintechs and iGaming | Protocols, exchanges, wallets |
Vendors | Brand protection and digital risk protection | On-chain security firms |
How they fit together
A scam begins off-chain, with a fake support reply or a lookalike site, and ends on-chain, with a signed transaction. Off-chain security stops it early and on-chain security is the last line. An exchange or wallet needs both. A bank or a sportsbook has no chain and needs only the first.
Where ChainPatrol sits
ChainPatrol is off-chain by design. Wallet blocklists are the bridge. A confirmed phishing site is flagged in 20+ wallets so users see a warning before they interact. See wallet and browser blocking.
Frequently asked questions
Is off-chain only a weakness?
For a protocol, it is a scope to pair with an on-chain vendor. For a bank or fintech, it is the whole attack surface.
Does blocking a site count as on-chain?
No. It warns the user before the transaction, and nothing on the chain changes.
Want to see what is already out there? Get a free scan or book a demo.
Fakes of your brand already out there?
ChainPatrol finds them, blocks the links in wallets and browsers, and files the takedowns for you.
More from The Impersonation Institute
What automated takedowns are, and what they can't do
Automated takedowns file and follow up removal requests without a person. What's automated, what can't be, and how to spot a relabeled manual queue.
ChainPatrol Team
Automation and takedown mechanics
What is an automated takedown?
An automated takedown is a removal request a system files and follows up without a person. Short definition, the four steps, and what automation can't do.
ChainPatrol Team
Automation and takedown mechanics
What is human-in-the-loop brand protection?
People decide some cases and automation decides the rest. What matters is which cases, and whether the vendor names them. Definition and how to evaluate it.
ChainPatrol Team
Automation and takedown mechanics