Security audit reports

Cozy Safety Module Review

WORM (Proof of Burn)

WORM is a privacy-preserving, cryptographically scarce ERC-20 token protocol that enables users to convert ETH into a new asset through irreversible destruction (burning) at stealth addresses. The protocol leverages zero-knowledge proofs (zk-SNARKs) to prove ETH burns without revealing burn addresses or transaction details, implementing the EIP-7503 Private Proof-of-Burn standard. It uses a two-token model: BETH (1:1 burn receipt) and WORM (time-released scarce token minted at 50 WORM per 30-minute epoch).

Loophole

Phase-based ERC20 presales that launch Baseline bTokens and pools; post-launch fee routing into treasury and NFT marketplace.

Alchemix v3 - strategies

Alchemix V3 is a self-repaying DeFi lending protocol built around yield-bearing collateral and synthetic asset issuance.

Sickle Bridge Strategies

This protocol extends Sickle with cross-chain bridge flows. On the source chain, `BridgeWithdrawStrategy` packages farm harvest/withdraw actions and then delegates bridging to `BridgeLib` inside the user's Sickle. On the destination chain, bridge callbacks land in adapter contracts that either swap bridged tokens through `MultiSwapRouter` or forward them into `BridgeDepositStrategy` for farm/NFT deposits.

Fira - Lending Market

Fira is a fixed-rate lending protocol combining time-tranching yield markets with lending infrastructure. The system allows users to borrow against collateral at fixed rates determined by Fira markets.

Liquity V2 Lender Borrower Strategy

A Yearn V3 tokenized strategy that opens a single Liquity V2 trove against a collateral asset, borrows BOLD, deploys borrowed BOLD into yBOLD and ysyBOLD, and rebalances leverage around a target LTV using Liquity operations and Curve swaps.

Flex

Flex is a fixed-rate money market where borrowers choose their own interest rate. Borrowers open Troves by locking collateral, selecting a fixed annual interest rate, and taking borrow-token debt. Lenders deposit borrow tokens into a Yearn V3-style vault and earn interest, upfront fees, and liquidation surplus. Liquidity exits are maintained through redemptions: when lender liquidity is insufficient, the protocol sells lower-rate borrowers' collateral through a Dutch auction and routes proceeds to the withdrawing lender or redeemer.

RISEx RLP Strategies

RISEx RLP contracts contains two Yearn V3 TokenizedStrategy-based USDC strategies for the RISEx perpetual exchange: a market-making strategy and a liquidation strategy. The system relies on a RISEx adapter for collateral management, order placement, position queries, and liquidation takeovers, with shared epoch-based withdrawal protection and whitelisted deposits.

Resupply Re-Staker

The protocol is a re-staking solution for Resupply Finance. Pooled RSUP from users is forwarded to the upstream GovStaker contract, and staking rewards are managed through configurable strategies. The codebase currently offers two strategies: one that compounds rewards by restaking them as additional RSUP, and another that deposits rewards into the reUSD savings vault.

Alchemix - V3

Alchemix V3 is a self-repaying DeFi lending protocol built around yield-bearing collateral and synthetic asset issuance.

CoW-Euler Integration

The CoW-Euler Integration contracts enable atomic leveraged position management (open, close, collateral swap) by coordinating CoW Protocol settlements with Euler Vault Kit (EVK) operations through the Ethereum Vault Connector (EVC). The system uses a chained wrapper pattern where authenticated solvers call `wrappedSettle()`, which executes custom EVC batch operations atomically around a CoW Protocol settlement. Users authorize operations via either EVC permit signatures or on-chain pre-approved hashes.

Vfat - MultiSwapRouter

The MultiSwapRouter is a unified swapping router that provides a single interface for executing multi-hop and split swaps across numerous DEX types, including Uniswap V2/V3/V4, Solidly/Velodrome/Aerodrome, Algebra, Camelot, Slipstream, and Blackhole.

HAI CurveStableSwapNG Oracle Review

HAI CurveStableSwapNG Oracle provides oracle infrastructure for price feeds. The reviewed component is a Curve StableSwap-NG relayer that combines Curve's EMA price oracle with external rate providers to deliver WAD-scaled price feeds via the IBaseOracle interface.

Twyne 2026-Q1 update

Twyne is a credit delegation protocol that lets borrowers rent unused borrowing power from other lenders to boost their Liquidation LTV. Lenders earn additional yield while borrowers get to ramp up their leverage or insulate their debt.

Euler Layer-Credit

LayerCredit is a permissionless fixed-rate, fixed-term lending protocol built on the Euler Vault Kit (EVK). It allows anyone to deploy ungoverned bond vaults with configurable collateral, interest rates, and early repayment penalties.

Euler evk swap verifier update

This PR allows the swap verifier to use the deposit() function on vaults without a skim().

Centrifuge v3.1 Fix Review

Centrifuge v3.1 implements a decentralized protocol for on-chain asset management. It provides foundations for permissionless deployment and management of highly customizable tokenization solutions.

[Title]

[Protocol Overview]

[Title]

[Protocol Overview]

Twyne account check removal

Twyne is a credit delegation protocol that lets borrowers rent unused borrowing power from other lenders to boost their Liquidation LTV. Lenders earn additional yield while borrowers get to ramp up their leverage or insulate their debt.

Twyne liquidation incentive

Twyne is a credit delegation protocol that lets borrowers rent unused borrowing power from other lenders to boost their Liquidation LTV. Lenders earn additional yield while borrowers get to ramp up their leverage or insulate their debt.

Twyne AAVE deployment script

Twyne is a credit delegation protocol that lets borrowers rent unused borrowing power from other lenders to boost their Liquidation LTV. Lenders earn additional yield while borrowers get to ramp up their leverage or insulate their debt.

Origin - ARM

Origin ARM (Automated Redemption Manager) is a suite of ERC4626 vaults designed to provide efficient liquidity management for liquid staking tokens. The protocol supports multiple liquid staking derivatives including Lido's stETH and EtherFi's weETH, acting as a liquidity pool that enables swaps between staking assets and ETH. ARM generates yield by exploiting the conversion rate difference: when users swap ETH for staking assets, they receive the assets at the favorable market rate (e.g., 1:1.01), while redemptions through the underlying protocol's exit queues return ETH at a 1:1 ratio. This mechanism allows ARM to capture the staking yield premium while providing immediate liquidity to users.

Fira Security Review

Fira is a lending market protocol forked from Morpho Blue, designed to integrate with the Usual ecosystem. It features permissionless and permissioned lending markets, specialized vaults (SisuVault) for managing collateral, and custom oracle adapters for pricing vault shares. The protocol aims to enable efficient lending and borrowing of USD0 and other assets against SisuVault shares.

Twyne AAVE operators

Twyne is a credit delegation protocol that lets borrowers rent unused borrowing power from other lenders to boost their Liquidation LTV. Lenders earn additional yield while borrowers get to ramp up their leverage or insulate their debt.

Euler securitize

ERC4626EVCCollateralSecuritize is an EVC-compatible collateral vault designed for Securitize RWA tokens, enforcing compliance-checked transfers through the Securitize compliance service while providing governance-controlled freeze and seize capabilities for regulated asset management.

Twyne Aave Integration

Twyne is a credit delegation protocol that lets borrowers rent unused borrowing power from other lenders to boost their Liquidation LTV. Lenders earn additional yield while borrowers get to ramp up their leverage or insulate their debt.

Goldilocks Goldilend update

Goldilocks Goldilend is a fixed-term NFT lending protocol that enables users to borrow assets using NFTs as collateral. The protocol features two main lending contracts: RebaseGoldilend (supporting Rebase Bera NFTs with HONEY tokens) and BeraBondGoldilend (supporting BeraBond NFTs with native BERA tokens). The system implements dynamic interest rates based on utilization ratios and loan duration, with upfront interest payment and comprehensive liquidation mechanisms.

3Jane - Moneymarket

3Jane is a credit-based money market built on top of Morpho Blue that provides unsecured credit lines underwritten against DeFi assets and FICO credit scores.

vbSOL Security Review

vbSOL is a wrapper around the Kamino vault that simplifies interactions.

Centrifuge v3.1 Upgrade

Centrifuge v3 implements a decentralized protocol for on-chain asset management. It provides foundations for permissionless deployment and management of highly customizable tokenization solutions.

Euler eUSD And Crosschain Fee Flow Review

eUSD is a synthetic cross-chain stablecoin that will use Euler's EVK vault structure to direct yield from borrowing fees on all chains to a single vault on Ethereum mainnet.

Vfat - Aggregator Connector

The Aggregator Connector contract is a generic swap router interface that enables token swaps through any external aggregator by forwarding arbitrary calldata while ensuring minimum output amounts.

Vfat - Automation

The Automation contracts implement fine-grained access control for specific off-chain infrastructure operators to execute permissioned actions on behalf of a Sickle.

Resupply CurveLend Operator

The CurveLend Operator is a factory model for lending stables (crvUSD) into Curve lending markets (ERC-4626 vaults).

Goldilocks Goldilend

Goldilocks Goldilend is a fixed-term NFT lending protocol that enables users to borrow assets using NFTs as collateral. The protocol features two main lending contracts: RebaseGoldilend (supporting Rebase Bera NFTs with HONEY tokens) and BeraBondGoldilend (supporting BeraBond NFTs with native BERA tokens). The system implements dynamic interest rates based on utilization ratios and loan duration, with upfront interest payment and comprehensive liquidation mechanisms.

Callisto Vault

The Callisto protocol is purpose-built for the Olympus ecosystem, enabling advanced use-cases for OHM holders. It directly interacts with the Olympus contracts and ecosystem tokens OHM, gOHM, and utilizes Olympus Cooler Loans V2 (MonoCooler).

Twyne Incremental Review

Twyne is a risk-modular credit delegation protocol built for the Ethereum Virtual Machine. It addresses a fundamental inefficiency in current DeFi lending markets: the unused borrowing power of users who deposit assets but do not borrow against them. By enabling these depositors (Credit LPs) to earn additional yield by making their unused borrowing power available to borrowers, Twyne unlocks higher capital efficiency while maintaining the security constraints of the underlying lending markets.

Centrifuge v3.0.1 Update

Centrifuge V3 is an open, decentralized protocol for on-chain asset management. Built on immutable smart contracts, it enables permissionless deployment of customizable tokenization products.

Asymmetry - flash zap

The USDaf Flash Zapper Protocol is a capital-efficient leverage system that enables users to open, increase, and decrease leveraged positions in a Liquity-style lending protocol through a single transaction. By utilizing zero-fee crvUSD flash loans, users can leverage their collateral positions without needing to handle complex multi-step operations manually.

Radiant - GLP

The **Guardian gLP Vault** is a core component of the Radiant Guardian architecture. It enables capital-efficient protection and utilization of protocol reserves through tokenized shares (`gLP`), a modular strategy layer, and DAO-controlled asset management via a multisig.

Resupply sreUSD

Resupply Finance is a CDP-based lending protocol that allows simple, low-risk, leveraged yield farming while encouraging the use of value-added ecosystem protocols' underlying stables like Curve's crvUSD and Frax's FRAX.

haiVELO V2 review

haiVELO V2 allows users to use veVELO NFT to mint haiVELO token, while the V1 only allowed VELO tokens. User from haiVELO V1 can easily migrate to the new version.

Origami - CowSwapper

Origami CowSwapper is used to swap farmed tokens

Resupply Update Report

Resupply Finance is a CDP-based lending protocol that allows simple, low-risk, leveraged yield farming while encouraging the use of value-added ecosystem protocols' underlying stables like Curve's crvUSD and Frax's FRAX.

Yield Basis DAO Update Security Review

Yield Basis is a protocol that features a new type of AMM that focuses on solving impermanent loss. The current review targets the DAO contracts of the protocol, including the governance token, along with the mechanism to vote, incentivize pools, and distribute rewards.

Centrifuge V3 Review

Centrifuge V3 is an open, decentralized protocol for onchain asset management. Built on immutable smart contracts, it enables permissionless deployment of customizable tokenization products

Yield Basis DAO Security Review

Yield Basis is a protocol that features a new type of AMM that focuses on solving impermanent loss. The current review targets the DAO contracts of the protocol, including the governance token, along with the mechanism to vote, incentivize pools, and distribute rewards.