# Real-time Security

All managed, whitelisted Kodiak Islands have real-time pre-crime security monitoring with our security partner HyperNative. HyperNative uses their advanced threat detection algorithms to detect "hacks before they happen." Kodiak Islands are configured to automatically pause \*all\* islands in case malicious activity is detected in any \*one\* of them.  If a malicious threat were to be detected, all deposits and withdrawals are paused until the security partner (HyperNative) investigates.

As of May 2025, a pausing event has been triggered one time (on April 26, 2025) based on HyperNative's monitoring.  Upon investigation, we learned that the alert is benign and a standard arbitrage contract was mistakenly tagged as malicious.  There was never any risk to any Kodiak Islands or user funds, nor was there any malicious targeting.  All islands were promptly unpaused and normal operations resumed within one hour.

Read more here: [https://www.hypernative.io/blog/meet-berachain-projects-joining-hypernatives-ecosystem-wide-security-umbrella](https://www.hypernative.io/blog/meet-berachain-projects-joining-hypernatives-ecosystem-wide-security-umbrella?utm_source=x\&utm_medium=organic_social\&utm_content=berachain-blog-kodiak)

Additionally, all islands are continuously monitored against standard parameters, any abnormal conditions are automatically flagged with both soft and hard thresholds.  For example, islands with high idle balances (indicating a rebalance needs to occur) or ratios that are off from target are automatically flagged using HyperNative Agents.  All large transfers are also monitored for abnormal activity.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://documentation.kodiak.finance/protocol/islands/island-mechanics/real-time-security.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
