A sample of engagements we've published with client permission. Full reports available on request.
ERC721A NFT mint contract & USDT payment flow
Full review of the ERC721A minting logic, max-supply enforcement, and USDT payment/approval flow for Global Web3 Academy's mint platform. No critical, high, or medium severity issues found — contract shipped audit-clean.
View Live Project ↗Decentralized exchange & liquidity router
Reentrancy vector in the fee-collection path allowed draining of LP reserves via a malicious router callback. Patched and re-verified pre-mainnet.
View Full ReportOver-collateralized lending protocol
Oracle price staleness check missing on liquidation path, enabling under-collateralized liquidations during network congestion.
View Full ReportLock-and-mint asset bridge
Validator signature threshold could be bypassed under a specific quorum edge case; full formal verification applied post-fix.
View Full ReportOn-chain governance & treasury module
Flash-loan voting power exploit allowed same-block proposal manipulation; mitigated with snapshot-based voting weight.
View Full ReportRoyalty-enforced NFT trading protocol
Signature replay in the lazy-mint flow could allow duplicate minting of the same listing across marketplaces.
View Full ReportValidator staking & slashing logic
Slashing calculation rounding error could zero out validator penalties under specific stake ratios. Formally verified post-patch.
View Full ReportEvery engagement can include a public disclosure once fixes are verified.