Web3 security research
We trace how a system's components interact, then test the guarantees those interactions are meant to preserve. The projects below show selected findings from that work.
Explore the researchOUR WORK / RESEARCH IN PRACTICE
Findings in
complex systems.
Selected Web3 and browser investigations, with the findings and public records we can show.
SELECTED INVESTIGATIONS
Browser security research
Ten High-severity findings across browser sandbox and memory-safety code, including nine published CVEs in Mozilla advisories.
See the CVEs and advisoriesSELECTED DISCLOSURES
Selected findings.
Vulnerabilities and their impact across the systems we've investigated.
Firedancer
Frankendancer validator
IMPACT AREAS
- Network partition
- Transaction confirmation failure
2 findings
Sei
Layer 1 protocol
IMPACT AREAS
- Chain halt
- Unrecoverable node crashes
3 findings
Avail
Layer 1 protocol
IMPACT AREAS
- Chain split
- Finality halt
1 finding
Cosmos
Cosmos EVM
IMPACT AREAS
- User gas loss
- Transaction execution failure
1 finding
Mozilla Firefox
Browser security research
IMPACT AREAS
- Sandbox escape
9 published CVEs
Published CVEs and advisories ↗SECURITY AUDITS