Triage model
- Watch: a signal worth reviewing, but not yet proven dangerous.
- Review: strong concern or unusual activity with supporting context.
- Level Fire: credible threat to protocol funds or the wider Solana ecosystem.
Start on the shared bot, or run FireWatch on faster private infrastructure.
Pick the alert target, then copy the command into Telegram.
Watch members help review sensitive alerts, share context, and escalate credible protocol threats before they spread.
This page summarizes the community discussion around FireWatch and how the review layer works. FireWatch members do not replace the indexer. They add human triage on top of raw program, multisig, IDL, and dependency signals.
Level Fire is the highest community escalation. It means the reviewing group believes the alert indicates a real operational threat: malicious upgrade risk, governance compromise, unsafe signer change, exploit path, or another event that should trigger immediate defensive action.
Watch members are the people allowed to discuss and triage alerts inside the FireWatch review layer. The current plan is to keep this group invite-only and FireWatch-first.
Yes. FireWatch is free for members, and that is called out directly in the product because the review layer is designed to support operator safety.
The discussion is about how to add human review without turning FireWatch into a noisy social feed. The goal is a small, trusted group that can assess alerts fast and raise the bar only when the threat is real.
Because moderation matters. The current direction is a narrow review group with accountability, not an open popularity system.