WHAT WE AUDIT
What the audit covers
Different systems call for different techniques. We pick the mix that fits yours.
Smart contract audits
Protocol code reviewed across Solana, EVM, Sui, Aptos, Cosmos, NEAR, Stellar and more, from Layer 1 foundations to the apps built on them.
Pentesting
White-box and black-box testing based on each project’s needs, aimed at the large, underexplored Web2 attack surfaces that remain in many Web3 applications.
Fuzzing
A core discipline: differential compiler fuzzers for Vyper, transactional fuzzers for Solana validators, rBPF JIT fuzzers and Move VM bytecode fuzzers.
Public audit reports
Every public security review from the OtterSec team is published at osec.io/audits, with findings broken down by severity.