About

Independent security research into smart contracts, protocol infrastructure, and the systems that move value.

Method

Findings here come from source-level analysis backed by executed reproduction. A claim is published when it can be demonstrated — a proof of concept, a differential test, or a trace — not when it reads plausibly. Work that produces no finding is a result too, and is not dressed up as one.

Disclosure

Reports are shared with the affected project before publication and are published only after the agreed window has elapsed, or with the project's consent. Nothing on this site is published from an engagement that has not been authorised under its program's scope.

Contact

For corrections or coordination, open an issue or reach out through the platform the report was filed on.