OtterSec Get in touch

DEFI SECURITY

Perps, AMMs, lending: DeFi audited by mechanism-minded researchers

We’ve audited DEXes, AMMs and order books, plus staking, vesting, structured products, perps and lending. Many of us use DeFi products daily.

$36.82B+On-chain TVL secured
120+Projects audited
Public audits Talk to our team

Trusted by teams building the next generation of crypto

Public audit reportsSolana · EVM · Sui · Aptos · Cosmos · NEARAudited Solana core code

HOW WE AUDIT

How we work with you

  1. 01

    Initial discussion

    We discuss your goals, timeline and security needs to see whether we’re a fit.

  2. 02

    Info gathering

    We send an MNDA and look at the repositories in scope to understand the details of your project.

  3. 03

    Quote

    We deliver a quote based on expected duration, potential vulnerabilities and the overall complexity of your project.

  4. 04

    Kickoff

    The audit begins. We share findings as they emerge and ask questions as needed.

  5. 05

    Report delivery

    At completion you get a report with our findings and suggestions for fixes.

Get an audit

FAQ

DeFi audit questions

Is it only manual review?

No. Different systems call for different techniques. Pentesting, formal verification and fuzzing are core disciplines, and we pick the mix that fits yours.

Do we wait for the final report to see findings?

No. After kickoff we share findings as they emerge and ask questions as needed. The final report collects our findings and suggestions for fixes.

Who have you worked with?

Teams including Solana, Tether, Sui, Aptos, Circle, Movement, LayerZero, Wormhole, MetaMask, Jupiter, Pyth, Phantom, Jito and Backpack.

What happens after the report?

We’re not done when your report ships. We stay close with our clients, support their communities and build long-term relationships around stronger security.

WHAT WE AUDIT

DeFi, covered

Mechanism design and protocol design are where the expensive bugs hide.

DeFi protocols

DEXes, AMMs, order books, staking, vesting, structured products, perps and lending. Notable audits include Jupiter’s perps, Mango Markets v4 and PancakeSwap.

Formal verification

Our own tooling and a novel verification framework for Solana. We also worked with the Aptos core team to formally verify their standard library.

Fuzzing

A core discipline: differential compiler fuzzers for Vyper, transactional fuzzers for Solana validators, rBPF JIT fuzzers and Move VM bytecode fuzzers.

Published research

Notes on exploits, audits, reverse engineering and security patterns from the field. When a pattern affects our clients, we notify them and publish the work.

CLIENTS

Protocol teams on working with us

“Having OtterSec as a security partner has been a fantastic experience for us. They are diligent, fast, creative and very responsive. Basically everything one could ask from a security audit firm.”
Stepan Simkin Stepan SimkinSquads
“OtterSec is one of the strongest auditors on Solana. Fast, thorough, and a joy to work with. They are the best in the business and I can’t recommend them enough.”
Armani Ferrante Armani FerranteBackpack
“Their website says protecting Blockchain ideas, but their command of JavaScript is impressive. If you've got something that you think would be "too hard for pentesters to understand" - these folks will surprise you. They're not your average pentester.”
Zbigniew Tenerowicz Zbigniew TenerowiczMetaMask

DEFI

Have your protocol reviewed before the market does

Notable audits include Haedal’s liquid staking, Vertex’s LBA, Scallop, PancakeSwap and Parcl Finance. Yours could be next.

Get an audit