ZK systems
Circom, Halo 2 and proof systems. Our research showed Dusk’s PLONK verifier never validated four of the prover’s polynomial commitments.
ZK AND BEYOND
ZK systems reviewed down to the proof check
We’ve audited code in Solidity, Vyper, Solana Rust, CosmWasm, Go, Aptos Move, Sui Move, JavaScript, Circom, Halo 2 and more.
$1.00B+Vulnerabilities patched
120+Projects audited
Trusted by teams building the next generation of crypto
Public audit reportsFormally verified the Aptos stdlibSolana · EVM · Sui · Aptos · Cosmos · NEAR
WHAT WE AUDIT
Unusual stacks, welcome
We’re not limited to the major chains and languages. Hard, unusual code is where we do our best work.
Compilers and VMs
We have audited the Ethereum stack down to the compiler, and our Solana validator fuzzing led to multiple critical denial-of-service findings.
Formal verification
Our own tooling and a novel verification framework for Solana. We also worked with the Aptos core team to formally verify their standard library.
CLIENTS
Clients on the depth
“Their website says protecting Blockchain ideas, but their command of JavaScript is impressive. If you've got something that you think would be "too hard for pentesters to understand" - these folks will surprise you. They're not your average pentester.”
“As a blockchain, speed, scalability, and security are critical to our everyday operations. OtterSec's responsiveness, attentiveness, and talent are second-to-none when it comes to securing Solana's core code.”
GET IN TOUCH
Bring us your hardest code
Tell us what you’ve built. We’ll look at the repositories in scope and come back with a quote.
Start the conversation