> ## Documentation Index
> Fetch the complete documentation index at: https://docs.extractor.live/llms.txt
> Use this file to discover all available pages before exploring further.

# Vesting

> Trigger recommendations for vesting smart contracts — monitor cliff-period withdrawals, unexpectedly large releases, and other exploit indicators.

A vesting contract is a type of smart contract that is used to manage the release of tokens or other assets to a recipient over a specified period of time.

### Monitor any withdrawals from the contract when the cliff period has not ended

**Trigger:** ERC20 Transfer more than n

**Parameters:**

* **Token address:** the address of the vested token
* **Amount:** should be as small as possible, e.g. 1 wei
* **Destination:** from

**Severity:** Critical

**Alerts:** On

**Use cases:**

* Any withdrawal of funds from the contract before the end of the cliff period clearly signals that there is an issue in the contract and it has been exploited. Remove this trigger after the cliff period is over.

### Monitor unexpected large withdrawals

**Trigger:** ERC20 Transfer more than n

**Parameters:**

* **Token address:** the address of the vested token
* **Amount:** should be greater than the maximum possible amount by 1 wei
* **Destination:** from

**Severity:** Critical

**Alerts:** On

**Use cases:**

* Withdrawing an amount from a contract that exceeds the maximum possible under current vesting rules means that there is an issue with the contract and it has been exploited.

### Set up a list of all beneficiaries

**Trigger:** Whitelisted Callers

**Parameters:**

* **Whitelisted Addresses:** list of addresses of all beneficiaries

**Severity:** Critical

**Alerts:** On

**Use cases:**

* Usually, after the start of vesting, the list of those who interact with the contract is the list of its beneficiaries. If someone not from this list interacts with the contract it could be a sign that the contract has been compromised or hacked in some way.
