The warning was public. You just didn't see it.
Ava keeps the incident-response accounts — CertiK, SlowMist, PeckShield and a dozen more — under watch around the clock, and pings you in Telegram only when something touches a protocol you actually use.
Notify-only. Ava never signs, sells, or moves anything because of a social post.
“Tell me if something I'm in gets hit.”
Exploit Watch
Watching 14 incident-response accounts
Ongoing · 24/7⚠️ SlowMist reports an exploit on a lending market
02:41Matched: you supply USDC there — 5 other posts deduped
02:41One ping sent, with the source and the reason
02:42
Told you in 60 seconds ✅ — what you do next is yours.
Exploit news breaks on X, not in your wallet.
The first credible word comes from a handful of security accounts — and it's a different one every time.
Following them all means a notification feed you'll mute within a week.
By the time it reaches your timeline, the hour that mattered is gone.
And most of it has nothing to do with you — every irrelevant alert costs attention you'll need later.
What Ava does
Only the incidents that are yours
Ava matches each one against your positions and the protocols you named. The rest stays quiet.
The accounts that break it first
A curated list of incident-response researchers, watched continuously — not when you remember.
One ping per incident
Not one per post, per account, or per retweet.
How it works
1
Ava reads what you're exposed to
Your open positions — plus any protocol or chain you name yourself.
2
It watches the security feeds
A curated source list of incident-response accounts, polled around the clock.
3
You get one ping, with the reason
Which account posted it, what happened, and why it matched you. Then you decide.
Why it's safe
Notify-only
A post can't move your funds. Ava tells you; acting is always your call.
Non-custodial
Ava never takes custody of your funds.
Yours to switch off
Opt in separately from your other alerts, and turn it off with one click.
What Ava can and can't do
You sign each action
Ava prepares each transaction. You review and sign it in your own wallet. Ava never holds your wallet's private keys.
Example: “Repay 300 USDC on my Aave loan”
- Prepared by
- Ava
- Sent from
- Your wallet
- Signed by
- You
You approve ongoing access
Fund an Ava smart wallet and sign its permission. Enabled jobs then run without asking each time, using only what's in that wallet.
Example: “Repay my Aave loan if my health factor drops below 1.5”
- Sent from
- Your Ava smart wallet
- Spending limit
- None by default
- Expires
- After 365 days
- Touch funds outside your Ava smart wallet
- Call contracts outside its permission
- Act after the permission expires
- Expand its own permission
Your own wallet stays in your control. Ava can only use what you put in your Ava smart wallet, and you can withdraw it or pause anytime. The standard permission has no practical spending limit and doesn't cap losses. On the web you can choose a narrower permission with a spending limit on one token instead, or revoke access anytime.
Help shape this feature
Request access to this feature. We’ll contact you when it’s ready to try.