Security services

The practice behind the platform. A human validates. A human files.

What we do

Independent security research

Authorised bug bounty work across EVM and L2s, Move (Sui, Aptos), Solana, Starknet, oracle networks, cross-chain bridges and DEX/perps.

Smart-contract review

Signed, scoped reviews with local or forked reproduction, pinned versions and clear remediation.

CIS Controls v8 audits

A prioritised baseline review grouped by Implementation Groups IG1–IG3. Alignment framing, not a certification.

How an engagement runs

  1. Choose the mode: bounty, signed review or audit.
  2. Lock scope.
  3. Learn the system as a user.
  4. Keep only demonstrated, in-scope harm.
  5. Check for duplicates.
  6. Write a reproducible report with a pinned version and a fix.
  7. A human files it.

Quality bar

Gate 0 · Reality

Reproduced locally or on a fork, not theory.

Gate 1 · Impact

Concrete, in-scope harm or unauthorised action.

Gate 2 · Duplicate check

Checked against known issues, audits and prior reports.

Gate 3 · Report quality

Runnable proof, pinned version, clear remediation.

Request a scoping call

Tell us what you need reviewed.

Contact