Summary
| Rule | Account types | Status |
|---|---|---|
| Program Upgrade | Program | 🟢 Active |
| Program Authority Change | Program (upgradeable) | 🟢 Active |
| Proxy Upgrade Monitor | Upgradeable proxy contracts | 🟢 Active |
| Proxy Admin Changed | Upgradeable proxy contracts | 🟢 Active |
| Contract Ownership Transfer | Ownable contracts | 🟢 Active |
| Contract Pause / Unpause | Pausable / token contracts | 🟢 Active |
| Program and token lifecycle | Program / token | ⚪ Deprecated |
Rules
🟢 Program Upgrade
🟢 Program Upgrade
Detects. A monitored program’s on-chain code is upgraded.
| Trigger | A program is upgraded (or deployed). One rule can monitor multiple programs. |
| Account types | Program |
| Status | Active |
🟢 Program Authority Change
🟢 Program Authority Change
🟢 Proxy Upgrade Monitor
🟢 Proxy Upgrade Monitor
Detects. A monitored upgradeable proxy swaps its implementation to a new
address.
| Trigger | An ERC-1967 proxy upgrade event — the proxy points to new implementation code. |
| Account types | ERC-1967 upgradeable proxy contracts |
| Status | Active |
🟢 Proxy Admin Changed
🟢 Proxy Admin Changed
Detects. The admin that controls upgrading a proxy is changed.
| Trigger | An ERC-1967 proxy admin change — whoever can upgrade the implementation is now a different account. |
| Account types | ERC-1967 upgradeable proxy contracts |
| Status | Active |
🟢 Contract Ownership Transfer
🟢 Contract Ownership Transfer
Detects. A contract’s owner changes, or ownership is permanently renounced.
| Trigger | An OpenZeppelin Ownable ownership transfer; renunciation (transfer to the zero address) is flagged as the most serious case. |
| Account types | OpenZeppelin Ownable contracts |
| Status | Active |
🟢 Contract Pause / Unpause
🟢 Contract Pause / Unpause
Detects. A contract is paused (frozen) or unpaused (re-enabled).
| Trigger | A pause or unpause event — supports both OpenZeppelin Pausable and stablecoin-style pause events. |
| Account types | OZ Pausable / token contracts |
| Status | Active |
Deprecated
⚪ Deprecated rules (migration context)
⚪ Deprecated rules (migration context)
Retired from a previous runner, kept for completeness:
- New Program Deployed — a new program is deployed.
- Program Account Closed — a program account is closed.
- Program Interaction — a program instruction is executed.
- Program Error — a program error occurs.
- SPL Token Authority Change — an SPL token authority is changed.
- Attestation Service New Accounts — new attestation accounts are created.

