DEFI SECURITY

Secure the mechanism, not just the code

We’ve audited DEXes, AMMs and order books, plus staking, vesting, structured products, perps and lending. Many of us use DeFi products daily.

$36.82B+On-chain TVL secured

$1.00B+Vulnerabilities patched

120+Projects audited

Public audits Request a quote

Trusted by teams building the next generation of crypto

Public audit reportsSolana · EVM · Sui · Aptos · Cosmos · NEARAudited Solana core code

HOW WE AUDIT

How we work with you

01

Initial discussion

We discuss your goals, timeline and security needs to see whether we’re a fit.
02

Info gathering

We send an MNDA and look at the repositories in scope to understand the details of your project.
03

Quote

We deliver a quote based on expected duration, potential vulnerabilities and the overall complexity of your project.
04

Kickoff

The audit begins. We share findings as they emerge and ask questions as needed.
05

Report delivery

At completion you get a report with our findings and suggestions for fixes.

Get an audit

WHAT WE AUDIT

DeFi, covered

Mechanism design and protocol design are where the expensive bugs hide.

DeFi protocols

DEXes, AMMs, order books, staking, vesting, structured products, perps and lending. Notable audits include Jupiter’s perps, Mango Markets v4 and PancakeSwap.

Formal verification

Our own tooling and a novel verification framework for Solana. We also worked with the Aptos core team to formally verify their standard library.

Fuzzing

A core discipline: differential compiler fuzzers for Vyper, transactional fuzzers for Solana validators, rBPF JIT fuzzers and Move VM bytecode fuzzers.

FAQ

DeFi audit questions

Is it only manual review?

No. Different systems call for different techniques. Pentesting, formal verification and fuzzing are core disciplines, and we pick the mix that fits yours.

Do we wait for the final report to see findings?

No. After kickoff we share findings as they emerge and ask questions as needed. The final report collects our findings and suggestions for fixes.

Who have you worked with?

Teams including Solana, Tether, Sui, Aptos, Circle, Movement, LayerZero, Wormhole, MetaMask, Jupiter, Pyth, Phantom, Jito and Backpack.

Do you work beyond the major chains?

Yes. We love niche languages and have worked with teams on Optimism, Arbitrum, Polygon, Algorand, Stellar, Sei, StarkNet and more.

What does OtterSec audit?

Protocol code, infrastructure and ecosystem integrations: Layer 1 foundations, wallets, DeFi protocols, bridges, compilers, ZK systems and Web2 backends, across Solana, EVM, Sui, Aptos, Cosmos, NEAR, Stellar and more.

DEFI

Have your protocol reviewed before the market does

Notable audits include Haedal’s liquid staking, Vertex’s LBA, Scallop, PancakeSwap and Parcl Finance. Yours could be next.

Get an audit