The warning was public. You just didn't see it.
Ava keeps the incident-response accounts — CertiK, SlowMist, PeckShield and a dozen more — under watch around the clock, and pings you in Telegram only when something touches a protocol you actually use.
Notify-only. Ava never signs, sells, or moves anything because of a social post.
“Tell me if something I'm in gets hit.”
Exploit Watch
Watching 14 incident-response accounts
Ongoing · 24/7⚠️ SlowMist reports an exploit on a lending market
02:41Matched: you supply USDC there — 5 other posts deduped
02:41One ping sent, with the source and the reason
02:42
Told you in 60 seconds ✅ — what you do next is yours.
Exploit news breaks on X, not in your wallet.
The first credible word comes from a handful of security accounts — and it's a different one every time.
Following them all means a notification feed you'll mute within a week.
By the time it reaches your timeline, the hour that mattered is gone.
And most of it has nothing to do with you — every irrelevant alert costs attention you'll need later.
What Ava does
Only the incidents that are yours
Ava matches each one against your positions and the protocols you named. The rest stays quiet.
The accounts that break it first
A curated list of incident-response researchers, watched continuously — not when you remember.
One ping per incident
Not one per post, per account, or per retweet.
How it works
1
Ava reads what you're exposed to
Your open positions — plus any protocol or chain you name yourself.
2
It watches the security feeds
A curated source list of incident-response accounts, polled around the clock.
3
You get one ping, with the reason
Which account posted it, what happened, and why it matched you. Then you decide.
Why it's safe
Notify-only
A post can't move your funds. Ava tells you; acting is always your call.
Non-custodial
Ava never takes custody of your funds.
Yours to switch off
Opt in separately from your other alerts, and turn it off with one click.
What Ava can and can't do
You sign each action
Ava prepares each transaction. You review and sign it in your own wallet. Ava never holds your wallet's private keys.
Example: “Repay 300 USDC on my Aave loan”
- Prepared by
- Ava
- Sent from
- Your wallet
- Signed by
- You
Ava acts inside a permission you sign
Ava runs the jobs you turn on without asking each time, but only within the apps, amounts and time you allow. Your wallet enforces it on-chain.
Example: “Repay my Aave loan if my health factor drops below 1.5”
- Allowed app
- Aave V3
- Total spend limit
- 500 USDC
- Expires
- In 30 days
- Use an app you didn't allow
- Spend more than your limit
- Act after the permission expires
- Raise its own limits
- Stop you from revoking
Your wallet enforces these limits on-chain. Only you can authorize changes. You can revoke the permission anytime.
Get early access before Ava opens publicly
The private beta is free — and early users help shape what Ava watches and how it acts before public launch.