Etherscan has introduced Flow, an AI-powered tool designed to trace, verify, and visualize onchain transactions. The tool is part of the company's Build with AI suite and operates across more than 60 EVM-compatible chains. It allows developers to integrate transaction mapping directly into AI agent workflows, compliance bots, and security monitoring systems.
The tool generates structured 'Flow Case' files from Etherscan's live API data, which can be visualized for investigation. It automates the process of tracing addresses and profiling entities, such as DAOs or protocols, without requiring manual navigation between block explorers or contract calls.
Flow was utilized to analyze the RedSonic Vault exploit that occurred around September 5, 2026. An attacker used a flash loan to drain approximately 9.25 ETH, valued at roughly $23,000, by exploiting a vulnerability in the registerErc20 function that allowed for double-counting collateral.
The exploit was executed in a single transaction with the hash 0xe3cba90e865c6cba950ebce36a52607f51f1fd33cd9fb920c78803f19b57791a. Researchers mapped the attacker's wallet (0x70f2333d21Ed7E7D105F6578227A9A747687982C) and the vault contract (0x4315990d9eeaffdfafd49958b4851f203fa1126f) using the new tool.
