DeFi audits that attack the economics, not just the code.

We run two reviews in parallel. The code review is the line-by-line manual audit we do for every smart contract engagement. The economic review writes down the protocol's invariants — what must always be true about balances, prices, shares and debt — then asks what an actor with unlimited capital for one block can do to each of them. The findings that matter most usually come from the overlap: a rounding that is harmless alone and a price read that is harmless alone, which together let an attacker mint value from nothing.

Oracle manipulation through thin liquidity or stale feeds; read-only reentrancy that corrupts a price while a callback is in flight; first-depositor and donation attacks on vault share prices; liquidation paths that leave bad debt or can be front-run; interest and reward accounting that can be gamed by timing; governance attacks with borrowed voting power; and composability failures where an upstream protocol changes behaviour your contracts did not anticipate. Our blog covers each pattern in depth; the audit checks each one against your code.

Automated market makers and DEX aggregators, including concentrated-liquidity and stable-swap designs; lending and borrowing markets, isolated and cross-collateral; yield vaults and strategy frameworks; stablecoins, both collateralised and algorithmic; liquid staking and restaking; perpetuals and options; cross-chain bridges and messaging layers; and the governance and token-distribution contracts that sit around all of them.

A report is a snapshot. The economic invariants we document during the audit are also the things worth watching after launch: total assets versus total shares, collateral ratio floors, oracle deviation from reference prices, and unusual governance activity. We hand them over in a form your team can wire into monitoring, so the audit keeps paying off after the contracts go live.

A single-mechanism protocol — one vault, one pool type — takes about two weeks. A full lending market or multi-pool DEX takes three to four weeks; cross-chain and multi-module systems are scoped per component. Quotes are fixed and in writing, retest included.