Security Audit Report for PopDEX's Dex Topup

Dex Topup provides deterministic, permissionless deposit addresses for bridging ERC20 tokens through the official TokenBridge. Each user’s proxy address can be precomputed before deployment, allowing tokens to be sent there in advance. Once funded, anyone can call the factory contract to deploy the proxy and forward the tokens to the TokenBridge, with the receiver fixed to the original user. The module acts only as a lightweight forwarding layer and does not maintain balances or custody funds long term.

Security Audit Report for Rhea Finance's Agg-Oracle

The reviewed update extends the protocol’s oracle infrastructure by integrating Atlas and Outlayer as dedicated price-data sources. The changes introduce source-specific payload decoding and validation, signature verification, authorized-signer configuration, price normalization, price-reporting interfaces, and token-to-feed mappings. The contract’s storage layout and migration procedures have also been updated to accommodate the new signerrelated state while maintaining compatibility with previously stored oracle data.

Security Audit Report for DeAgentAI's multisig-timelock-contracts

The multisig-timelock-contracts is a token vault deployed on BSC and Sui. It implements a weighted multisig scheme based on off-chain signatures, combined with a conditional timelock. Each owner holds a weight, and an operation is authorized once the combined weight of the signers reaches a fixed threshold. The timelock delay applies only when at least one participating signer is flagged as timelocked. Both chains share identical high-level logic, differing solely in the signature primitive: EIP712 with ECDSA on BSC and Ed25519 on Sui. The configured owners are A (weight 2, timelocked), B (weight 1, and C (weight 1, with a threshold of 2. Accordingly, A alone requires the delay, B and C together may execute immediately, and B or C alone is rejected. The only governed operation is transferring whitelisted tokens out of the vault, and all configuration is fixed at deployment and immutable.

Security Audit Report for BitgetWallet's solver

This project implements a Fusion-style resolver for settling 1inch Limit Order Protocol orders. During settlement, the resolver receives the maker asset, swaps it through an external aggregator into the taker asset, and allows the Limit Order Protocol to complete payment to the maker or receiver. The contract also includes executor access control, pause controls, token sweeping to configured vaults, and native ETH handling for WETH unwrap flows. Its safety model depends on trusted executors, trusted protocol dependencies, and off-chain validation of swap routes and profitability.

Security Audit Report for Puffer's puffer-institutional

Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for Inverter Network's EMUSD Contracts

EMUSD Contracts of Inverter Network introduces the token EmAssetToken, which serves as the issuance token for their RWA tokenization and settlement system. Specifically, the token EmAssetToken can be minted and burned by the contract OrderManager when handling buy and redeem orders. Additionally, some minor changes have been made to the order manager module and related proxy contracts to support the corresponding adaption.

Security Audit Report for AllScale's EIP7702 Contracts

EIP7702 Contracts of AllScale is a gasless wallet infrastructure built on EIP7702 account delegation. It lets whitelisted sponsors relay signed EIP712 authorizations on behalf of EOAs, executing fee-split token transfers and deposits. All wallet logic runs through a three-layer beacon proxy pattern, enabling seamless logic upgrades without changing the delegated contract. Specifically, EOAs delegate to the contract BeaconStub, which resolves the active implementation (i.e., thecontract EIP7702 froman upgradeable beaconcontract. Then, the contract BeaconStub delegatecalls into the implementation to execute transfers.

Security Audit Report for Mantle's mStocks Protocol

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for Bitget's Dispatcher Contracts

The Dispatcher Contracts of Bitget is a payment infrastructure, which serves for two business flows: Checkout payments and Business call dispatch. Specifically, checkout payments pull a user’s tokens, and distribute them to payout recipients within optional swaps through an allowlisted aggregator. As for business call dispatch, it pulls the user’s funds and executes users’ intended calls. It is worth noting that the whitelist for calls targets is per business type and can be circumvented by the owner via the unrestricted flag.

Security Audit Report for Mantle's Fiat24 Contracts

The Fiat24 Contracts of Mantle is a fiat-crypto payment infrastructure on Mantle that enables card authorization processing and operator-controlled vault management for fiat token operations. This update introduces a unified fee configuration module via the contract Fiat24FeeManager, cross-chain deposit paths on the Arbitrum and Tempo chains via LayerZero, a delegation vault extension for partner-managed payouts in the contract DelegationVault, and batch double-booking transfers in the contract Fiat24CardAuthorizationMarqeta.

Security Audit Report for HertzFlow's Perp Contracts

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for KEYRING's multisig-wallet-contracts

This project implements a permissionless multisig wallet system. A factory deploys deterministic minimal-proxy wallets for users and stores each wallet’s signer set and approval threshold. Wallets can receive native tokens, ERC20, ERC721, and ERC1155 assets, and allow withdrawals only after validating threshold EIP-712 signatures from approved signers. Each withdrawal type uses an independent nonce and deadline for replay protection, while recipients are restricted to wallet signers. The factory also emits standardized withdrawal events for created wallets.

Security Audit Report for Rhea Finance's agg-oracle

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for Atoshi's Atoshi Chain

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for Bitget's share-card Contracts

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for PopDEX's Bridge Contracts

The DexChain Bridge implements a Hub-and-Spoke cross-chain bridge architecture consisting of native Rust precompiled contracts on the Hub chain (Core) and Solidity upgradeable contracts on each Spoke chain (EVM). On the Hub side, three Rust modules are deployed as native precompiles: MessageGateway at 0x1001, which handles inbound message verification, hot/cold verifier signature validation, replay protection, and verifier set management; TokenBridge at 0x100f, which manages user withdrawals, deposit execution, and governance configuration synchronization to Spoke chains; and common, which provides shared utilities including EIP-712 digest construction. On the Spoke side, the bridge is implemented through Solidity UUPS-upgradeable contracts. MessageGateway.sol is responsible for receiving and validating cross-chain messages from the Hub chain, enforcing message execution rules, replay protection, and authorized gateway interactions. TokenBridge.sol manages token deposit and withdrawal flows on the Spoke chain, including locking or releasing bridged assets, initiating outbound bridge messages to the Hub, executing inbound bridge instructions, and applying bridge-related governance or configuration updates propagated from the Hub.

Security Audit Report for AlphaX-Protocol's AlphaX-Protocol-Contract-Tron

This project is a TRON-based custody vault and gasless transfer system. The contract DEXVaultV1 is an upgradeable custody vault that allows users to deposit assets and permits withdrawals when predefined risk controls are satisfied. The gasless wallet layer consists of the contract GasFreeController, the contract GasFreeAccount, and the contract GasFreeFactory. Users can store funds in their own GasFreeAccount contracts, sign transactions off-chain, and rely on a relayer to pay for transaction costs during execution. The contract GasFreeController handles EIP-712-based permit execution, while the contract GasFreeFactory deploys deterministic accounts through CREATE2. Note that for contract DEXVaultV1, we only audit its compatibility with Tron.

Security Audit Report for MegaETH's Staking Contracts

The Staking Contracts of MegaETH is a KPI-based staking system for the MEGA token on the MegaETH chain. Users can stake MEGA tokens and earn MEGA tokens based on achieved KPI milestones (i.e., tranches). Each tranche is created with a reward token and maturity curves that scale rewards according to the staking duration. This update introduces two key features: (1) a recommit mechanism, enabling users to claim rewards as new stakes; (2) proportional releases of locked staking rewards.

Security Audit Report for Bitget's RWA EVM Contracts

The protocol introduces an on-chain Real World Asset (RWA) tokenization implementation on EVM-compatible chains, enabling regulated issuance and redemption of asset-backed tokens representing securities. The system is organized around three core contracts: RWAToken, RWATokenManager, and RWATokenFactory. RWAToken is an upgradeable ERC-20 token deployed via a BeaconProxy pattern, implementing a rebase mechanism in which all token balances are stored as raw values and divided by a global rebase index at read time. The rebase index is updated through a split ratio, allowing the protocol to model corporate splits and reverse splits by adjusting the index proportionally across all holders simultaneously without modifying individual balances. Each RWAToken instance also enforces three-layered compliance guards: KYC verification through IDRegistry, freeze controls, and protocol-wide sanctions screening via SanctionsList. RWATokenFactory handles token deployment and wires each instance to shared infrastructure, including a CorporateActionOracle, which governs time-windowed corporate actions such as rebase splits and name and symbol updates. RWATokenManager acts as the primary entry point for user-facing mint and redeem flows, both of which operate through an EIP-712 Attestation signed by a trusted SIGNER_ROLE. Each attestation binds the token, quantity, price, settlement amount, and expiration into a single one-time-use authorization. Price integrity is enforced by SanityCheckOracle, which validates the attested price against an independent reference via either a Pyth Lazer Pro on-chain verification or a SignedPrice signed by multi-party, rejecting deviations exceeding a configurable basis-point threshold. Throughput is governed by RateLimiter, which applies a linear-decay sliding-window quota at both the global per-token and per-user levels. Market session eligibility is enforced by MarketHours. The protocol is designed for a KYC DEX intermediary model, where partner DEX contracts hold calling rights and are responsible for end-user compliance off-chain before invoking the Manager on behalf of their users.

Security Audit Report for Mantle's UR Topup Contract Solana

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for DuboisGold's KBAR

KBAR is an upgradeable ERC721 contract representing ownership of physical gold bars held in custody. The system integrates role-based administration with transfer-time compliance controls and fee mechanisms. Administrative roles manage minting, redemption, freezing, fee configuration, storage-fee enforcement, pausing, and upgrades.

Security Audit Report for MegaETH's Staking Contracts

The Staking Contracts of MegaETH is a KPI-based staking system for the MEGA token on the MegaETH chain. Users can stake MEGA tokens and earn MEGA tokens based on achieved KPI milestones (i.e., tranches). Each tranche is created with a reward token and maturity curves that scale rewards according to the staking duration. This update introduces three key features: (1) a pending reward mechanism, (2) integration with Predicate2 attestations, and (3) a linear maturity curve.

Security Audit Report for Bitget's BGW7702

BGW7702 is a smart-account framework built for EIP-7702 delegation with optional ERC- 4337 compatibility. It separates execution and control planes: BGW7702Logic handles batched call execution (aggregate/aggregateV2), while BGW7702Admin manages EIP-712 dual-signature validation (platform signer + account owner) and unordered nonce tracking. BGW7702Base provides ownership, operator-based pause/rescue controls, and shared admin utilities, and BGW7702Helper maintains business-type metadata mappings. The design aims to keep execution logic lightweight and centralize sensitive state management in a dedicated admin contract, enabling operational control, emergency pause, and consistent signature policy enforcement across delegated accounts.

Security Audit Report for Bitget Wallet's ETH Rust SDK

The ETH Rust SDK is a Rust-based Ethereum wallet library exposed to Go applications through a unified FFI interface. It provides comprehensive wallet capabilities including address derivation, public key generation, message signing, and transaction signing. Developers interact with the SDK via a single entry point, tee_wallet_call, supplying function names and JSON-formatted parameters. The SDK supports multiple Ethereum standards such as EIP 55 addresses, EIP712 typed data signing, EIP1559 and EIP2930 transactions, and advanced EIP7702 authorization-based transactions. Designed for flexibility and security, it allows seamless integration of Ethereum wallet functionality into Go-based systems.

Security Audit Report for Cobo's CoboTokenization

CoboTokenization consists of two upgradeable systems, CoboERC20 and Fund. The CoboERC20 system includes contracts CoboERC20 and CoboERC20Wrapper, where CoboERC20 provides controlled ERC-20 issuance and transfer controls and CoboERC20Wrapper handles underlying asset wrapping and unwrapping with reconciliation-based recovery minting. The Fund system includes contracts CoboFundOracle, CoboFundToken, and CoboFundVault, which maintain APR and compute NAV, manage share subscriptions and asynchronous redemptions, and execute custody settlement payouts. The overall security model relies on role separation and whitelist and blacklist checks on critical execution paths.

Security Audit Report for Pacifica's Bridge Contract

Bridge Contract is a cross-chain bridge protocol on Solana designed to facilitate transfers of SOL and SPL tokens across different chains. The protocol operates by emitting on-chain logs that are observed and processed by an off-chain relayer service, which coordinates and executes corresponding actions on the destination chain. The system is composed of two dedicated programs: sol-bridge, which handles native SOL bridging, and spl-bridge, which manages SPL token registration and transfers. This separation allows for clearer responsibility boundaries and more flexible handling of different asset types within the bridging workflow.

Security Audit Report for Habittrade's Stove Protocol Contracts

The protocol establishes an on-chain stock trading market that enables the issuance and trading of tokenized stocks. Stock tokens are created via a factory contract, while certain stock-related operations, such as dividends, stock splits, and reverse splits are handled through trusted off-chain logic and executed on-chain by privileged operators. User trading activity, including buying and selling stock tokens, is facilitated through the RFQSettlement contract, which manages order execution and settlement. By combining on-chain enforcement with off-chain computation, the protocol aims to provide a flexible and efficient framework for tokenized equity management and trading.

Security Audit Report for Morph Emerald upgrade

The target of this audit is the code repositories of Morph Emerald upgrade. The Morph Emerald upgrade introduces alternative fee transactions, enabling native multi-token gas payments on the Morph L2 chain. This upgrade allows users to pay gas fees using registered ERC-20 tokens.

Security Audit Report for OKX's smart-wallet-recovery & groth16-solana

This project is a smart account recovery system deployed on Solana. It combines ZK-Email zero-knowledge proofs, ECDSA signature verification, and a DKIM registry to provide scalable, low-interaction account recovery. Smart wallet providers can pre-register their DKIM public keys via the DKIM registry, eliminating the need to trust third-party DNS providers. When a user needs to recover an account, they submit proofs to the recovery-manager contract, which consist of an off-chain generated ZK-Email proof demonstrating ownership of a specific email and an off-chain 2FA-verified ECDSA signature. After verification, the smart account’s owner key can be updated, completing the account recovery process.

Security Audit Report for OKX's Smart Wallet Recovery

The project implements a cross-chain recovery system for unified smart accounts, focusing on the Ethereum Virtual Machine (EVM) stack implementation. The system integrates ZKEmail and ECDSA technologies to deliver an extensible, low-interaction, and multi-chain reusable recovery mechanism for EVM-compatible chains.

Security Audit Report for Bitget's bgw-swap-aggregator-evm

BWAggregator is a DEX aggregator that enables swaps across Uniswap and its fork protocols through specialized router and handler actions. The platform supports ERC20-to-ERC20, ETH-to-ERC20, and ERC20-to-ETH swaps through a meta-transaction architecture. Users can specify complex action sequences for the aggregator to execute atomically on their behalf, typically involving multiple swaps across different protocols. The system employs a threephase execution method with fund tracking. Fee collection comprises two components: a fixed deduction amount and a proportional fee amount.

Security Testing Report for MegaETH: MegaEVM, Stateless Validator & SALT

The security testing was conducted over a six-week period, from October 11, 2025 to November 28, 2025, and focused on: MegaETH EVM (MegaEVM), Small Authentication Large Trie (SALT), and Stateless Validator.

Security Audit Report for OKX's OKX Smart Wallet

The project implements an Account Abstraction (AA) wallet implementation on the Ethereum Virtual Machine (EVM) compatible chains, allowing users to deploy AA smart contract wallets. It also allows Externally Owned Accounts (EOAs) to extend transaction execution logic by setting the AA wallet code, simplifying the processing of complex transaction operations.

Security Audit Report for Bitway Labs's Bitway App Chain

The Bitway App Chain of the Bitway Lab is a L1 blockchain, facilitating to unlock the value of underutilized Bitcoins. To support full Bitcoin compatibilities, the Bitway App Chain is designed to enable transactions to be signed with standard Bitcoin wallets for flexibility. The Bitway App Chain natively integrate lending and farming services, powered by Discreet Log Contracts (i.e., DLC). For the Bitcoin-collateralized lending system of the Bitway App Chain, it enables native Bitcoin-backed loans, integrating decentralized oracles (i.e., Oracle++), permissionless liquidity pools, and liquidations. Specifically, The Bitway App Chain implements a liquidity pool-based lending protocol that allows Bitcoin holders to borrow while enabling lenders to earn returns. Loan assets are managed on the Bitway App Chain, removing the need for third-party custodians during the loan period. In addition to lending, the Bitway App Chain also provides a farming service that rewards users for staking their coins. By participating in farming, users can lock their assets and earn incentives, distributed on an epoch basis.

Security Audit Report for Rabby Wallet's swap-router-v1

The protocol is a decentralized exchange (DEX) router that facilitates efficient token swaps by integrating multiple aggregators through a flexible adapter pattern, while ensuring robust fee management. Its core component, the DEX Aggregator, is a smart contract system that optimizes trades by splitting orders across various DEXs to secure better prices and minimize slippage for users.

Security Audit Report for Mantle's Fiat24 Contracts

Fiat24 is a digital banking platform built on blockchain technology that bridges banking services with the crypto ecosystem. The platform provides NFT-based digital accounts as unique identifiers for users, with each account represented as an ERC-721 token featuring customizable features and status management. Fiat24 supports multiple fiat currencies through tokenized representations, including USD24, EUR24, CHF24, GBP24, and CNH24, with real-time exchange rates and seamless cross-currency transactions. The platform features crypto deposit functionality that enables users to deposit USDC and other cryptocurrencies, automatically converting them to fiat tokens at current market rates.

Security Audit Report for Lista's Lista Lending

This audit focuses on the smart contracts located in the src/folder of the repository, excluding the following directories: src/moolah/mocks/* src/moolah-vault/mocks/* src/vault-allocator/mocks/*

Security Audit Report for Side Protocol

Side Protocol serves as the extension layer of Bitcoin. At its core is Side Chain, the first high-performance, fully Bitcoin-compatible dPoS Layer 1 blockchain, designed to shape the future of Bitcoin finance. Side Chain supports bridging for native BTC and other Bitcoin assets, including runes.

Security Audit Report for Halo

Halo is a social monetization platform for the AI era. Earn passive rewards from posts, transactions, and engagements with 1M+ pioneers.

Security Audit Report for SoSoValue Index

The SoSoValue Index Protocol is a cutting-edge spot index solution designed to make crypto investments simple and secured. SSI Protocol leverages on-chain smart contracts to repackage multi-chain, multi-asset portfolios into Wrapped Tokens (SSI). These tokens represent a basket of underlying assets, enabling Wrapped Tokens to track the value fluctuations of the spots basket, effectively achieving the effects of passive index investing.

Security Audit Report for Neo X

Neo X is an EVM compatible sidechain incorporating Neo’s distinctive dBFT consensus mechanism. Serving as a bridge between Neo N3 and the widely used EVM network, Neo X will play a crucial role in expanding the Neo ecosystem and offering developers more opportunities for innovation.

Security Audit Report for PumpBTC Contracts

The audit focuses on PumpBTC Contracts, enabling users to stake Wrapped Bitcoin tokens into the PumpStaking contract and mint pumpBTC tokens at a 1:1 ratio. These assets are then unwrapped into BTC for staking and rewards on Babylon. The protocol offers standard and instant unstake options with fees.

Security Audit Report for DeltaTrade

DeltaTrade is a multi-chain decentralized trading protocol that enhances user capabilities with sophisticated on-chain trading strategies such as Grid Trading, DCA, Rebalancing Grid, MultiChain Support, OrderBook, Full Platform Market Making and AI Powered Strategy.

Security Audit Report for BridgeV2 Contracts

Spherium Bridge utilizes LayerZero framework to bridge tokens from source chain to target chain.

Security Audit Report for Octopus Restaking

The NEAR Restaking project is launched by Octopus Team, and aims at enhancing the utilization of NEAR. Any user can deposit NEAR assets into the Restaking protocol, which provides proof of stake to side chains registered with the protocol through a Restaking method. Users will not only earn rewards on NEAR but also receive token rewards from specific side chains. When a side chain's validator acts maliciously, users' assets may be at risk of being slashed.

Security Audit Report for WenCore

WEN Protocol is a decentralized, censorship-resistant, and community-owned protocol that enables users to secure loans using Liquidity Staking Derivatives (LSDs) as collateral. These loans have minimal fees and provide up to 7x leverage, with repayments made in wenUSD.

Security Audit Report for Puffer Finance pufETH Contracts

Puffer is a decentralized native liquid restaking protocol (nLRP) built on Eigenlayer. It makes native restaking on Eigenlayer more accessible, allowing anyone to run an Ethereum Proof of Stake (PoS) validator while supercharging their rewards.

Security Audit Report for Cakepie Contracts

Cakepie is a yield optimization protocol built upon PancakeSwap. It enables users to manage PancakeSwap V2/V3 positions and claim rewards and convert their CAKE token or locked CAKE positions from PancakeSwap on Cakepie. Users with voting powers can vote in Cakepie and votes will be cast to Pancake’s GaugeVoting. Cakepie also incorporates a bribe market where users can add bribes that are distributed to active voters.

Security Audit Report for PancakeSwap VECake

Pancake launched a governance project VECake for voting. VECake enables users to acquire voting powers by depositing their CAKE tokens. These voting powers empower users to vote on Pancake Gauge weights.

Security Audit Report for BurrowLand

Burrowland is a decentralized lending and borrowing platform based on the NEAR blockchain. Burrowland allows users to lend tokens and earn interest, as well as borrow tokens by providing collateral and paying interest. All supplied collateral assets and borrowed assets for each account are used to compute the health factor of that account. If the health factor is less than 100%, it means the account can be partially liquidated and cannot borrow more without repaying some amount of the existing borrowed assets or providing additional collateral assets. It also provides a farming mechanism to incentivize users.

Security Audit Report for Ref Exchange

Ref-Exchange is a decentralized exchange (DEX) deployed on the NEAR blockchain by Ref Finance. The protocol implements different types of trading pairs based on token characteristics, such as simple pool, stable pool, and rated pool. For instance, for trading pairs involving stablecoins (i.e., stable pool), the protocol adopts the Curve model to minimize impermanent loss, fees, and slippage. Additionally, to facilitate user operations like providing liquidity and swapping, the protocol has implemented an internal account model. Users are required to pay a certain storage fee to register an internal account in order to interact with the protocol for fund transactions.

Security Audit Report for Magpie Radpie

Magpie launched Radpie, a yield optimization protocol built upon Radiant. Users could deposit their assets on Radpie to earn enhanced yields.

Security Audit Report for EOS EVM

The EOS EVM serves as an implementation of the Ethereum Virtual Machine (EVM). It is implemented in C++ and compiled to a WASM binary to be executed within the EOS blockchain. The EOS EVM utilizes a modified version of Silkworm and Evmone for the execution of the EVM operations.

Security Audit Report for StakeTogether st-v1-contracts

StakeTogether is an Ethereum staking protocol designed especially for communities. It allows users to deposit ETH into staking pools and receive stpETH tokens as collateral. The purpose of StakeTogether is to facilitate the creation of validators on the Ethereum 2.0 beacon chain to support the security and operation of the entire Ethereum network.

Security Audit Report for Stratos Chain and Stratos Decentralized Storage (SDS)

Stratos is a decentralized data architecture. Stratos provides scalable, reliable, and self-balanced storage, database, and computation networks, creating a robust foundation for data processing.

Security Audit Report for Noah-DAO

Noah DAO is a decentralized exchange built on the EOS EVM. It introduces a mechanism to incentivize liquidity provision and active governance participation by rewarding users with protocol tokens and voting rights, thereby aligning interests within the ecosystem.

Security Testing Report for Radiant V2

Radiant V2 is a cross-chain DeFi lending protocol developed by Radiant Capital. Radiant Capital has engaged us to perform security testing (as the red team) on the smart contracts of Radiant V2 to identify potential risks.

Security Audit Report for Aura

Aura Network is a high performance Layer1 ecosystem with built-in modularity, leading the mass adoption of Web3 in emerging markets. It has robust partnership network, expansive engineering resources and rich track record.

Security Audit Report for Phoenix Bonds

Phoenix Bonds is a principal-protected bonding platform that helps protocols with liquidity-bootstrapping, provides perpetually-boosted yield to users and works with all yield bearing assets.

Security Audit Report for PancakeSwap Cross Farming Contracts

PancakeSwap launched a cross farming project. It involves allowing users to deposit LP tokens on EVM-compatible chains to the MasterChefV2 contract on the Binance Smart Chain network using the cBridge SGN network as the cross-chain message forwarder.

Security Audit Report for Mellow Vaults

The Mellow project provides an open platform for liquidity providers to earn rewards from their liquidities and strategists to earn performance fees by implementing active liquidity management strategies to manipulate the liquidities.

Security Audit Report for Multichain veMULTI Contracts

Multichain is the ultimate Router for web3. It is an infrastructure developed for arbitrary cross-chain interactions.

Security Audit Report for LiNEAR

LiNEAR Protocol is a liquid staking solution built on the NEAR Protocol. LiNEAR unlocks liquidity of the staked NEAR by creating a staking derivative to be engaged with various DeFi protocols on NEAR and Aurora, while also enjoying over 10% APY staking rewards of the underlying base tokens. LiNEAR is the cornerstone piece of the NEAR-Aurora DeFi ecosystem.

Security Audit Report for Windranger Auction Contract

Windranger facilitates the growth of mantle and web3 ecosystems by partnering with builders to architect extraordinary cultures globally. It provides long-term talent, recruitment, HR, and operations services for companies in the Web3 and Metaverse space - including DAOs.

Security Audit Report for Alpaca Delta Neutral Vault

The Alpaca Finance is a leveraged yield farming and liquidity providing protocol running on Binance Smart Chain (BSC) and Fantom. The audited implementation extends the previous version by adding the support of a new Delta Neutral Vault and its associated workers, including the workers that support MDEX and PancakeSwap.

Security Audit Report for YPool Smart Contract

XY Finance is a cross-chain interoperability protocol aggregating DEXs & Bridges. With the ultimate routing across multi-chains, borderless and seamless swapping is just one click away.

Security Audit Report for Poly Contracts

Poly Network is a global cross-chain protocol for implementing blockchain interoperability and building Web3.0 infrastructure. Poly Network has connected a variety of over 35 different blockchains, including popular ones such as Ethereum, Polygon, Arbitrum, and BNB Chain, as well as others such as Aptos, Optimism, Neo, Metis, and Gnosis Chain. Since the launch, the protocol has enabled cross-chain asset transfer of more than $16 billion USD.