Smart contract audits
Protocol code reviewed across Solana, EVM, Sui, Aptos, Cosmos, NEAR, Stellar and more, from Layer 1 foundations to the apps built on them.
LONG-TERM SECURITY
We’re not done when your report ships
We stay close with our clients, support their communities and build long-term relationships around stronger security.
$36.82B+On-chain TVL secured
120+Projects audited
Trusted by teams building the next generation of crypto
Public audit reports$100,000 Save CTFs FundSecuring Sui since pre-mainnet
FAQ
Working together
What happens after the report?
We’re not done when your report ships. We stay close with our clients, support their communities and build long-term relationships around stronger security.
Do we wait for the final report to see findings?
No. After kickoff we share findings as they emerge and ask questions as needed. The final report collects our findings and suggestions for fixes.
How does an audit start?
With an initial discussion of your goals, timeline and security needs to see whether we’re a fit. We then send an MNDA and review the repositories in scope.
Can we read past audits?
Yes. Every public security review from the OtterSec team is listed at osec.io/audits.
HOW WE AUDIT
How an engagement starts
-
01
A scoping call
Tell us your goals, timeline and security needs, and we work out together whether we’re the right fit.
-
02
MNDA and repositories
Under an MNDA, we review the repositories in scope to understand your project and what you’re asking for.
-
03
A clear quote
Pricing follows the expected duration, the potential vulnerabilities and how complex the system is.
-
04
The audit
Researchers start work, raise findings as they appear and come to you with questions along the way.
-
05
Your report
You receive the written findings with suggested fixes, and we stay close after it ships.
WHAT WE AUDIT
How we support you
Audits are the start. Research, incident help and community support follow.
Published research
Notes on exploits, audits, reverse engineering and security patterns from the field. When a pattern affects our clients, we notify them and publish the work.
Incident response
As members of Seal 911 we join war rooms during active exploits, and our $1 post-hack audit lets us help teams when they need it most.
WHY OTTERSEC
What partnership looks like
- Findings shared as they emerge, not held back for the final report.
- Coverage across Solidity, Vyper, Solana Rust, CosmWasm, Go, Move, JavaScript, Circom and Halo 2.
- A final report with every finding and suggestions for fixes.
- A team that stays close after the report ships and supports your community.
CLIENTS
Partners on OtterSec
“Strong security builds trust across the Sui network. That’s why we partnered with OtterSec, a reputable, fast, and community-oriented company that ensures trust by engaging with both our online and live events.”
“Working with OtterSec on critical audits has been a great experience. It’s clear OtterSec cares deeply about customer satisfaction and the security of our protocols. Their communication and flexibility was refreshing.”
PARTNER WITH US
Start a security partnership with OtterSec
We work with leading teams across multiple blockchains. Put the same collaborative approach to work on your protocol.
Get in touch