Audits

Audited & verified on-chain.

Every audit is a manual, line-by-line review backed by tooling — each finding shipped with a reproducible proof-of-concept, then a verification certificate and a full public report.

Passed

TRND — SeedRound & Multisig

TON · 2026-07-07On request

SeedRound & Multisig audited on TON (Tact). 1 High + 8 Medium found — all resolved & re-verified. 77 Sandbox tests.

1 High8 Med6 Low
Read report
In Progress

TON AMM Router/Pool (WIP)

TON · 2025-06-15Independent

Ongoing independent review of TON AMM router/pool message-flow and bounce handling across multi-hop swaps — preliminary scope notes, no findings yet.

1 Med2 LowAll resolved
Read report
In Progress

Solana LST Depeg Oracle (WIP)

Solana · 2025-06-15Independent

Ongoing independent research into how Solana LST oracle feeds and lending-market circuit breakers behave during depeg and stake-pool rate lag conditions.

1 LowAll resolved
Read report
In Progress

EigenLayer AVS Slashing (WIP)

Ethereum · 2025-05-15Independent

Ongoing independent research into EigenLayer AVS slashing mechanics on Ethereum — correlated risk, veto windows, and operator stake allocation. No final verdict yet.

2 Med3 LowAll resolved
Read report
Failed

Radiant Multisig Compromise (2024)

Arbitrum · 2024-10-15Independent

Radiant Capital post-mortem: malware on signer devices spoofed Safe multisig calldata, enabling a malicious upgrade that drained ~$50M on Arbitrum/BSC.

1 Critical2 High2 Med1 Low
Read report
Failed

Penpie Pendle Reentrancy (2024)

Ethereum · 2024-09-15Independent

Post-mortem: Penpie's Sept 2024 ~$27M loss via a fake Pendle market that reentered reward accounting before state finalization.

1 Critical1 High1 Med1 Low
Read report
Failed

UwU Lend Oracle (2024)

Ethereum · 2024-06-15Independent

UwU Lend lost ~$23M in June 2024 when attackers manipulated its Curve-derived sUSDe price oracle across blocks to over-borrow.

1 Critical2 High2 Med1 Low
Read report
Passed with issues

TON Jetton TEP-74

TON · 2024-06-15Independent

Design review of TON's TEP-74 Jetton wallet/master model: why deterministic per-owner wallets hold, and where sender/bounce checks get skipped.

1 Med3 LowAll resolved
Read report
Failed

Sonne Empty Market (2024)

Optimism · 2024-05-15Independent

Post-mortem: Sonne Finance's May 2024 Optimism exploit — a Compound-fork empty-market donation attack that inflated cToken exchange rates.

1 Critical1 High2 Med1 Low
Read report
Passed with issues

Anchor PDA Security Patterns

Solana · 2024-05-15Independent

Design review of Anchor's PDA, signer/owner-check, has_one, and discriminator patterns on Solana — why they hold and where teams misuse them.

1 High2 Med3 Low
Read report
Failed

Hedgey Flash-Claim (2024)

Ethereum · 2024-04-15Independent

Post-mortem: Hedgey Finance's ClaimCampaigns let attackers claim against third-party ERC20 approvals, draining vesting campaigns (April 2024).

1 Critical2 High1 Med1 Low
Read report
Passed

Jito Stake Pool (Solana)

Solana · 2024-04-15Independent

Independent research on Jito's SPL-based Solana stake pool: how epoch-gated exchange-rate updates and rounding discipline keep share accounting solvent.

2 LowAll resolved
Read report
Failed

Prisma migrateTroveZap (2024)

Ethereum · 2024-03-15Independent

Post-mortem of the March 2024 Prisma Finance exploit: an unchecked arbitrary call in the trove-migration zap let an attacker drain ~$11.6M.

1 Critical2 High2 Med1 Low
Read report
Failed

Munchables Insider Upgrade (2024)

Blast · 2024-03-15Independent

Post-mortem: a Munchables insider dev backdoored a Blast proxy upgrade, forging a locked-balance to drain ~$62.5M (later returned).

1 Critical2 High2 Med1 Low
Read report
Passed with issues

Solady Assembly Libraries

Ethereum · 2024-03-15Independent

Design review of Solady's assembly libraries on Ethereum: where the gas-golfed Yul is safe, and where callers routinely misuse it.

2 Med3 LowAll resolved
Read report
Failed

Stars Arena Reentrancy (2023)

Avalanche · 2024-02-15Independent

Post-mortem of the October 2023 Stars Arena reentrancy exploit on Avalanche: a sell-share function paid AVAX before updating share weight, draining roughly $3M.

1 Critical1 High1 Med
Read report
Passed

OZ Ownable2Step

Ethereum · 2024-02-15Independent

Design review of OpenZeppelin's Ownable2Step: how the pending-owner handshake closes the single-step transferOwnership foot-gun.

1 Med2 LowAll resolved
Read report
Failed

KyberSwap Elastic (2023)

Ethereum · 2024-01-15Independent

Post-mortem of the Nov 2023 KyberSwap Elastic hack: a tick-crossing reinvestment double-count let an attacker drain roughly $48-54M across EVM chains.

1 Critical2 High2 Med1 Low
Read report
Failed

Deus DEI TWAP (2022)

Fantom · 2024-01-15Independent

Post-mortem: Deus Finance DEI on Fantom, 2022. A manipulable AMM TWAP let an attacker mint DEI against artificially inflated collateral value.

1 Critical2 High2 Med1 Low
Read report
Failed

Onyx Compound-Fork Rounding (2023)

Ethereum · 2023-12-15Independent

Post-mortem: Onyx Protocol's 2023 empty-market donation attack, a Compound V2 rounding flaw that let an attacker mint against an inflated exchange rate.

1 Critical2 High2 Med1 Low
Read report
Failed

Solend Governance (2022)

Solana · 2023-12-15Independent

Solend's 2022 SLND1 vote let a few concentrated whale wallets grant the team emergency power to seize a user's account.

1 Critical2 High2 Med1 Low
Read report
Failed

Curve Vyper Reentrancy (2023)

Ethereum · 2023-11-15Independent

Post-mortem: a broken Vyper 0.2.15/0.2.16 reentrancy lock let attackers drain several Curve ETH pools for tens of millions in July 2023.

1 Critical2 High2 Med1 Low
Read report
Failed

Exactly Protocol Market (2023)

Optimism · 2023-11-15Independent

Post-mortem: Exactly Protocol's DebtManager trusted an unvalidated market address in its permit/leverage path, letting an attacker impersonate a market and drain $7.3M.

1 Critical2 High1 Med1 Low
Read report
Failed

Euler Finance Donation (2023)

Ethereum · 2023-10-15Independent

Post-mortem: Euler Finance's donateToReserves() skipped its health check, letting an attacker self-liquidate at a steep discount and drain ~$197M.

1 Critical2 High1 Med1 Low
Read report
Failed

Conic Read-Only Reentrancy (2023)

Ethereum · 2023-10-15Independent

Post-mortem of the July 2023 Conic Finance exploit: read-only reentrancy let an attacker read a stale Curve get_virtual_price mid-callback.

1 Critical1 High2 Med1 Low
Read report
Failed

Ankr aBNBc Mint (2022)

BSC · 2023-09-15Independent

Post-mortem: a compromised Ankr deployer key called an unprotected mint function on aBNBc (BSC), enabling unlimited token issuance.

1 Critical2 High2 Med1 Low
Read report
Failed

Platypus Solvency Check (2023)

Avalanche · 2023-09-15Independent

Post-mortem: Platypus Finance's Feb 2023 Avalanche exploit — a broken solvency check let an attacker mint USP debt against collateral it never validated.

1 Critical1 High2 Med1 Low
Read report
Passed

Aave v3 Risk Framework

Ethereum · 2023-09-15Independent

Independent design review of Aave v3's isolation mode, e-mode, and supply/borrow caps as layered defenses against cross-asset contagion.

2 Med3 LowAll resolved
Read report
Failed

Rubic Arbitrary Call (2022)

Ethereum · 2023-08-15Independent

Post-mortem: Rubic's router forwarded arbitrary calldata to attacker-chosen targets, letting an exploiter pull tokens via existing user approvals.

1 Critical2 High1 Med1 Low
Read report
Failed

Nomad Bridge Replay (2022)

Ethereum · 2023-08-15Independent

Post-mortem of the August 2022 Nomad Bridge hack: a zero-value trusted root let any message pass verification, enabling a ~$190M copy-paste drain.

1 Critical1 High1 Med
Read report
Passed

Compound v3 (Comet) Design

Ethereum · 2023-08-15Independent

Independent design review of Compound v3's single-borrowable-asset model and absorb/liquidation mechanics on Ethereum — why the isolation holds.

1 Med3 LowAll resolved
Read report
Failed

Qubit Bridge Deposit (2022)

BSC · 2023-07-15Independent

Post-mortem of the January 2022 Qubit Finance QBridge exploit on BSC: a deposit function let an attacker mint xETH with zero real collateral.

1 Critical2 High2 Med1 Low
Read report
Failed

Inverse Finance TWAP (2022)

Ethereum · 2023-07-15Independent

Post-mortem: Inverse Finance's April 2022 exploit, where a thin-liquidity Keep3r TWAP on INV let an attacker over-borrow ~$15.6M against inflated collateral.

1 Critical2 High2 Med1 Low
Read report
Passed with issues

ERC-4626 Inflation Attack

Ethereum · 2023-07-15Independent

How ERC-4626's virtual-shares/decimals-offset design defeats the classic first-depositor share-inflation attack, and where custom vaults still get it wrong.

1 Med3 LowAll resolved
Read report
Failed

Cashio Infinite Mint (2022)

Solana · 2023-06-15Independent

Post-mortem of the March 2022 Cashio infinite-mint exploit on Solana: missing collateral-chain validation let an attacker mint CASH from fake accounts, draining ~$52M.

1 Critical2 High2 Med1 Low
Read report
Failed

Crema Finance Tick Spoof (2022)

Solana · 2023-06-15Independent

Post-mortem: a forged Solana tick account bypassed owner checks in Crema's fee-claim path, draining $8.78M via flash loans.

1 Critical1 High1 Med1 Low
Read report
Passed

Gnosis Safe Multisig

Ethereum · 2023-06-15Independent

Independent design review of Gnosis Safe's threshold-signature, module, and guard architecture — why the invariants hold and where integrators break them.

2 Med4 LowAll resolved
Read report
Failed

Wormhole Signature Bypass (2022)

Solana · 2023-05-15Independent

Post-mortem: Wormhole's Solana bridge lost ~120k wETH (~$325M) in Feb 2022 to a spoofed sysvar signature check.

1 Critical1 High2 Med
Read report
Failed

Mango Markets Oracle (2022)

Solana · 2023-05-15Independent

Post-mortem: Mango Markets lost ~$116M in Oct 2022 when an attacker pumped a thin-liquidity oracle to borrow against inflated perp collateral.

1 Critical2 High2 Med1 Low
Read report
Passed

Uniswap v3 Concentrated Liquidity

Ethereum · 2023-05-15Independent

Independent design review of Uniswap v3's tick math and swap accounting — why concentrated liquidity resists common price-manipulation vectors.

1 Med2 LowAll resolved
Read report
Failed

Poly Network Cross-Chain (2021)

Ethereum · 2023-04-15Independent

Poly Network's cross-chain dispatcher let attackers call a privileged keeper-rotation function, forging valid signatures and draining ~$610M across 3 chains (Aug 2021).

1 Critical2 High2 Med1 Low
Read report
Failed

Beanstalk Governance (2022)

Ethereum · 2023-04-15Independent

Post-mortem: Beanstalk's April 2022 flash-loan governance attack — instant quorum via emergencyCommit let an attacker drain ~$182M in one transaction.

1 Critical2 High2 Med1 Low
Read report
Passed

Uniswap v2 Core Invariants

Ethereum · 2023-04-15Independent

Design review of Uniswap v2's x*y=k invariant, reentrancy lock, and TWAP oracle — why the 2020 architecture still holds up.

1 Med3 LowAll resolved
Read report
Failed

Cream Finance yUSD (2021)

Ethereum · 2023-03-15Independent

Post-mortem of Cream Finance's Feb 2021 yUSD exploit: a flash-loan-manipulated vault price let an attacker over-borrow against inflated collateral.

1 Critical2 High2 Med1 Low
Read report
Failed

Visor Finance (2021)

Ethereum · 2023-03-15Independent

Post-mortem: Visor Finance's deposit() trusted a caller-supplied owner address, letting an attacker mint vVISR against approved funds.

1 Critical1 High2 Med1 Low
Read report
Passed

WETH9 Design Review

Ethereum · 2023-03-15Independent

Design review of WETH9's deposit/withdraw/balance invariants — why 1:1 backing holds and where wrapped-ETH forks typically break it.

1 Med3 LowAll resolved
Read report
Failed

bZx Flash-Loan Oracle (2020)

Ethereum · 2023-02-15Independent

Post-mortem of bZx's Feb 2020 flash-loan oracle attacks: a single-source Uniswap spot price let attackers manipulate collateral valuation for profit.

1 Critical2 High2 Med1 Low
Read report
Failed

Harvest Finance (2020)

Ethereum · 2023-02-15Independent

Post-mortem: Harvest Finance's Oct 2020 $24M loss from Curve pool spot-price manipulation in vault share pricing.

1 Critical2 High2 Med1 Low
Read report
Failed

Fei / Rari Fuse Reentrancy (2022)

Ethereum · 2023-02-15Independent

Post-mortem: April 2022 Rari Fuse/Fei reentrancy exploit — a checks-effects-interactions violation in a Compound-fork CEther contract drained ~$80M.

1 Critical2 High2 Med1 Low
Read report
Failed

The DAO Reentrancy (2016)

Ethereum · 2023-01-15Independent

Post-mortem of The DAO's 2016 reentrancy exploit on Ethereum: a pay-before-update bug that drained ~3.6M ETH and forced a hard fork.

1 Critical1 High2 Med
Read report
Failed

Parity Multisig Self-Destruct (2017)

Ethereum · 2023-01-15Independent

Post-mortem of the Nov 2017 Parity multisig freeze: an uninitialized library let anyone claim ownership and selfdestruct it, locking ~513K ETH.

1 Critical2 High1 Med1 Low
Read report