Qortora · Search · Indexed page

osec.ioFetched 2026-08-15T05:56:15Z

OtterSec

Blockchain security audits and research.

Open original source · Full cached text

OtterSec Security audits that protect blockchain ideas $36.82B+ On-chain TVL secured $1.00B+ Vulnerabilities patched We work with leading teams across multiple blockchains to provide a holistic and collaborative approach to security. Read our blog Get an audit Trusted by teams building the next generation of crypto. We audit Layer 1 foundations, wallets, DeFi protocols, bridges, and the infrastructure that connects them. 1 / 5 "As a blockchain, speed, scalability, and security are critical to our everyday operations. OtterSec's responsiveness, attentiveness, and talent are second-to-none when it comes to securing Solana's core code." "Strong security builds trust across the Sui network. That’s why we partnered with OtterSec, a reputable, fast, and community-oriented company that ensures trust by engaging with both our online and live events." "Working with OtterSec on critical audits has been a great experience. It’s clear OtterSec cares deeply about customer satisfaction and the security of our protocols. Their communication and flexibility was refreshing." "Having OtterSec as a security partner has been a fantastic experience for us. They are diligent, fast, creative and very responsive. Basically everything one could ask from a security audit firm." "OtterSec is one of the strongest auditors on Solana. Fast, thorough, and a joy to work with. They are the best in the business and I can’t recommend them enough." "Their website says protecting Blockchain ideas, but their command of JavaScript is impressive. If you've got something that you think would be "too hard for pentesters to understand" - these folks will surprise you. They're not your average pentester." Introducing rCTF v2 We’re releasing rCTF v2, an open-source platform for hosting cybersecurity capture-the-flag competitions. Arsenii, Jason T., Stepan Jul 14, 2026 Announcing the Save CTFs Fund OtterSec is committing $100,000 to keep CTFs competitive in the age of AI. We break down why Jeopardy scoring is breaking down, what better formats might look like, and how to apply for sponsorship. Michael Debono Jul 7, 2026 Auto reverse-engineering the Hyperliquid risk engine, with some agentic help Perps allow traders to leverage beyond their collateral, until the market turns abruptly and losses are clawed back. We auto-reverse engineer Hyperliquid’s risk engine to show how it ranks and deleverages winning users under the solvency–fairness–revenue trilemma. Renato Marziano Jun 22, 2026 The goldmine of insecure WebView integrations WebViews in mobile web3 wallets can quietly inherit the permissions granted to the wallet app itself. We found 20+ major wallets where a malicious dApp could access core permissions without authorization. Bruno Halltari, Caue Obici, Nikolaos Mourousias Jun 18, 2026 Pwning Minecraft: 4-byte heap overflow to RCE We achieved RCE in Minecraft Bedrock, turning a 4-byte heap overflow into complete client compromise. Learn how a universal, Bedrock-specific technique is used to bypass ASLR and achieve arbitrary read/write primitives. Hrvoje Mišetić Jun 2, 2026 Unverified evaluations in Dusk’s PLONK Dusk’s privacy layer protects ~$60M of DUSK and hinges on one proof check. dusk-plonk’s verifier never validated four of the prover’s polynomial commitments, enough to mint DUSK from nothing and forge shielded spends the network confirmed as real. Himanshu Sheoran, Valter Wik Apr 30, 2026 Anchor: Today and Tomorrow The state and roadmap of Anchor, the secure-by-default Solana smart contract framework we maintain. Robert Chen Solana Breakpoint 2025 Decompiling Solana Programs Reverse engineering closed-source sBPF programs with our open-source Binary Ninja decompiler tooling. Robert Chen Scale or Die at Accelerate 2025 Safe Solana Stack Smashing How a one-byte stack frame overflow in the Solana SBF compiler silently corrupts on-chain program state. Robert Chen Solana Breakpoint 2024 Fuzzing, Formal Methods, and a Loss of Funds Why fuzzing and formal verification miss business logic exploits, and the mitigations that catch them. Robert Chen Solana Breakpoint 2023