MPC wallet defense gaps: what changes when screening is real time?

TL;DR: JPEG Trading moved from manual, contract-by-contract diligence to real-time pre-signature screening and onchain monitoring across 500+ assets and 15+ chains, including non-EVM networks, according to Blockaid, so the firm could scale from prop trading into vault curation without changing its workflow. The deeper issue is that signing-time trust assumptions, not post-trade review, now decide whether a wallet programme is operationally safe.

Editorial analysis by NHI Mgmt Group, based on content published by Blockaid: “Prop Desk to Curator: JPEG Trading's Security Evolution With Blockaid”.

By the numbers:

• JPEG Trading expanded coverage to 500+ assets across 15+ chains under its monitoring scope.

Key questions

Q: How should security teams stop malicious onchain transactions before signature release?

A: They should place transaction simulation and policy checks inside the signing workflow, not beside it.

Q: Why do manual wallet reviews fail in fast-moving DeFi operations?

A: Manual review fails because the pace and volume of transactions outstrip human contract-by-contract diligence.

Q: What signals show that onchain monitoring is not covering the real risk surface?

A: A monitoring programme is incomplete when it only tracks expected holdings but misses vault exposure, protocol dependencies, or chains outside the main ecosystem.

Practitioner guidance

• Enforce transaction simulation before signature Require every wallet workflow to evaluate contract behaviour and destination impact before the signing event can complete.
• Model wallet policy by operating purpose Separate trading, operational, and vault-management wallets into different policy sets so approved venues, address whitelists, and notional limits match the use case.
• Extend monitoring to full asset inventory Track assets, vault exposures, and protocol dependencies across all supported chains, including non-EVM networks, so coverage does not stop at the obvious holdings.

Bottom line: The core risk is not only theft, but unsafe transaction approval through a wallet workflow that trusts too much at signing time.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →