Detects flash loan attacks, reentrancy patterns, oracle manipulation, and velocity anomalies in real-time.