WHAT WE COVER
Wallets, Snaps, and the Web2 layers they rely on
We offer white-box and black-box testing based on each project’s needs. Our research examines the large, underexplored Web2 attack surfaces that remain in many Web3 applications.
Snaps reviews
Public reports include Nocturne Snap, Drift Snap, Algorand Snap, and Forta Metamask Snap.
Wallet projects
We’ve worked on Easy Wallet, Pontem’s mobile wallet, and Versa Wallet. Public reports also include Martian Wallet, MSafe, and Here Wallet.
WebView research
Our research found 20+ major wallets where a malicious dApp could access core permissions without authorization through WebViews.
JavaScript and Web2 surfaces
We help secure web2 frontends and backends, including those written in Javascript, Rust, and Python.