# Active Protection

Unlike traditional detection engines, Active-Protection represents a revolutionary approach to security.

Operating entirely autonomously, it functions independently of your browser wallet activity. This innovative system vigilantly monitors your protected wallet addresses across more than seven different blockchains.

It actively searches for signs of attempted attacks and employs a variety of sophisticated mitigation techniques to ensure your safety.

## Protected Addresses

Sentinel3 automatically adds the addresses to Active Protection you attempt transactions with while Sentinel3 is running.

{% hint style="info" %}

#### **Active Protection is a separate security system detached from Sentinel3's core detection performed while you browse Web3 sites.**

{% endhint %}

## Attack Types Detected Only By Active Protection

### Address Poisoning

Crypto address poisoning is a deceptive technique where an attacker leverages various methods to insert their own crypto addresses into areas where users commonly view transaction activity, such as Etherscan, wallet activity logs, or other transaction records.

The goal is to have the user mistakenly use the attacker's address for a transaction, thinking it's a legitimate address they intended to transact with.

This could happen, for example, when a user copies and pastes addresses from these records without thoroughly verifying them.

Since the poisoned address closely resembles a legitimate one, it's easy to overlook the discrepancy, leading to funds being sent to the attacker's address instead of the intended destination.

### Example

<figure><img src="/files/AVo3UzfFikDnQg7hCxvs" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.kerberus.com/kerberus/sentinel3/active-protection.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.