HOW WE AUDIT

The right mix of techniques for your protocol

Different systems call for different techniques. We’ve built our own fuzzers and verification tooling, and we pick the mix that fits yours.

$36.82B+On-chain TVL secured

120+Projects audited

Public audits Talk to our team

Trusted by teams building the next generation of crypto

Formally verified the Aptos stdlibMaintainers of AnchorPublic audit reports

FAQ

About our methods

Is it only manual review?

No. Different systems call for different techniques. Pentesting, formal verification and fuzzing are core disciplines, and we pick the mix that fits yours.

Which languages do you cover?

Solidity, Vyper, Solana Rust, CosmWasm, Go, Aptos Move, Sui Move, JavaScript, Circom, Halo 2 and more, plus Web2 frontends and backends in JavaScript, Rust and Python.

Can we read past audits?

Yes. Every public security review from the OtterSec team is listed at osec.io/audits.

Do you work beyond the major chains?

Yes. We love niche languages and have worked with teams on Optimism, Arbitrum, Polygon, Algorand, Stellar, Sei, StarkNet and more.

How is the price worked out?

We quote from the expected duration, the potential vulnerabilities and the overall complexity of your project.

WHY OTTERSEC

Why technique matters

Coverage across Solidity, Vyper, Solana Rust, CosmWasm, Go, Move, JavaScript, Circom and Halo 2.

Findings shared as they emerge, not held back for the final report.

An MNDA in place before we look at any repository in scope.

A team that stays close after the report ships and supports your community.

GET AN AUDIT

Get the techniques your system actually needs

Start with a conversation about your goals and security needs. We’ll scope the right mix.

Start the conversation