OtterSec Get in touch

BRIDGES AND INFRASTRUCTURE

Cross-chain bridges audited by the team that knows both sides

We audit Layer 1 foundations, wallets, DeFi protocols, bridges and the infrastructure that connects them, including work for LayerZero and Wormhole and Uniswap’s bridge committee.

$1.00B+Vulnerabilities patched
120+Projects audited
Public audits Get in touch

Trusted by teams building the next generation of crypto

Served on Uniswap’s bridge committeeSolana · EVM · Sui · Aptos · Cosmos · NEARSeal 911 members

WHAT WE AUDIT

Infrastructure, chain by chain

Bridges touch several runtimes at once. We review each side and the messaging in between.

Bridges and messaging

Cross-chain infrastructure for teams like LayerZero and Wormhole. We have also served on Uniswap’s bridge committee.

EVM and Solidity

Experts in Solidity who have audited teams like Vyper, LayerZero, Wormhole, Euler and MetaMask, and researched malicious hook usage in Uniswap v4.

Cosmos

Cosmos SDK and CosmWasm, with an ongoing retainer through Binary Builders to audit the Cosmos SDK itself.

Formal verification

Our own tooling and a novel verification framework for Solana. We also worked with the Aptos core team to formally verify their standard library.

HOW WE AUDIT

What the engagement looks like

  1. 01

    Initial discussion

    We discuss your goals, timeline and security needs to see whether we’re a fit.

  2. 02

    Info gathering

    We send an MNDA and look at the repositories in scope to understand the details of your project.

  3. 03

    Quote

    We deliver a quote based on expected duration, potential vulnerabilities and the overall complexity of your project.

  4. 04

    Kickoff

    The audit begins. We share findings as they emerge and ask questions as needed.

  5. 05

    Report delivery

    At completion you get a report with our findings and suggestions for fixes.

Start the conversation

FAQ

Bridge audit FAQ

What does OtterSec audit?

Protocol code, infrastructure and ecosystem integrations: Layer 1 foundations, wallets, DeFi protocols, bridges, compilers, ZK systems and Web2 backends, across Solana, EVM, Sui, Aptos, Cosmos, NEAR, Stellar and more.

Do you work beyond the major chains?

Yes. We love niche languages and have worked with teams on Optimism, Arbitrum, Polygon, Algorand, Stellar, Sei, StarkNet and more.

How is the price worked out?

We quote from the expected duration, the potential vulnerabilities and the overall complexity of your project.

Which languages do you cover?

Solidity, Vyper, Solana Rust, CosmWasm, Go, Aptos Move, Sui Move, JavaScript, Circom, Halo 2 and more, plus Web2 frontends and backends in JavaScript, Rust and Python.

Is it only manual review?

No. Different systems call for different techniques. Pentesting, formal verification and fuzzing are core disciplines, and we pick the mix that fits yours.

CLIENTS

From teams we secure

“Working with OtterSec on critical audits has been a great experience. It’s clear OtterSec cares deeply about customer satisfaction and the security of our protocols. Their communication and flexibility was refreshing.”
John Woods John WoodsAlgorand
“As a blockchain, speed, scalability, and security are critical to our everyday operations. OtterSec's responsiveness, attentiveness, and talent are second-to-none when it comes to securing Solana's core code.”
Dominic Tsang Dominic TsangSolana Foundation
“Strong security builds trust across the Sui network. That’s why we partnered with OtterSec, a reputable, fast, and community-oriented company that ensures trust by engaging with both our online and live events.”
Brian H. Brian H.Sui Foundation

INFRASTRUCTURE

Get your bridge in front of auditors who know both chains

Start with a scoping call on your goals, timeline and security needs.

Start the conversation