README.md
June 21, 2026 · View on GitHub
SBSecurity Audit Portfolio
Security reviews for teams that can't afford a hack.
8 out of 10 clients come back for the next audit.
3 years · 60+ audits · $1.1B in TVL reviewed · 400 Crit/High found · zero hacks on audited scope
→ Request an audit — audit kickoff in <24h
Website · X · Telegram · Discord
Why SBSecurity
- We match the team to your protocol. Different stacks need different skills, so we pick auditors who already know your chain and your problem. All are public audit contest winners. On a retainer, two or more are on call any time of day.
- We win public audit contests. Gold at Venus Governance and Fenix Finance. Silver at Recall. Top 5 at ZetaChain, Badger eBTC, Kelp DAO, and Zaros. Full list below.
- We stay with you after the audit. 8 out of 10 clients hire us again. We help you fix the bugs and watch the code after it goes live.
- We work on many chains and languages. Solidity, Rust, Move, and Cairo. Ethereum, Berachain, Hyperliquid, Movement, Stellar, Solana, Starknet, Abstract, Arbitrum, and more.
Selected Work
| Protocol | What we reviewed | Stack |
|---|---|---|
| ENS DAO | OpenZeppelin Governor + 2-day Timelock executing on-chain ENS proposals, with Security Council cancel rights |  |
| WLFI · 4 audits | Vesting logic, Securitize-backed RWA issuance, and Dolomite-locked staked-stablecoin reward loop | |
| M0 | M Portal bridge adapters routing $M stablecoin over Wormhole NTT and Hyperlane | |
| Origami Finance · Report | ERC-4626 auto-compounder wrapping Sky sUSDS savings, with CoW Protocol swap routing |  |
| Cabal · 3 audits — iUSD, Delta-Neutral, Strat LST | ERC-7540 async vault, delta-neutral perp hedge, Move-based LST wrapper |  |
| STBL · Report | Tokenized T-Bill RWA backing: USST stablecoin + YLD yield-claim NFT on Soroban |   |
| Neko.hl · Vaults, OVault | Morpho V2 fork on Hyperliquid with LayerZero OVault cross-chain shares |  |
| Shift Protocol · V1, V2, Cairo port | ERC-4626 vault evolution across three releases and two languages |  |
| CrediFi · Report | Onchain unsecured credit protocol issuing fixed-rate crypto loans | |
Full portfolio below ↓
Public Competitions
Our skill, tested against the best auditors in the world — on Code4rena, Cantina, and Sherlock.
| Protocol | Type | Date | Ranking |
|---|---|---|---|
| Venus Governance | LayerZero module | March 2024 | 🥇 |
| Fenix Finance | Liquidity Marketplace | July 2024 | 🥇 |
| Recall | Stableswap | February 2025 | 🥈 |
| Thorn | Stableswap | October 2024 | 4th |
| ZetaChain | Interoperability protocol | August 2024 | 5th |
| Badger eBTC | CDP | June 2024 | 5th |
| Kelp DAO | Liquid Restaking | November 2023 | 5th |
| Zaros | Perps | July 2024 | 6th |
And over 40 more contests.
What Clients Say
Why 8 out of 10 clients come back:
|
"Across multiple audits with SBSecurity, the experience has consistently been smooth and on-schedule. The team is efficient, highly competent, and friendly — and we've been very happy with the process every time." |
"It is a rare thing to find a team that moves with both speed and precision. Working with you was enjoyable and consistently reliable. An excellent experience end to end." — Near · CTO at Mentorable |
|
"They are proactive, passionate, and precise — consistently supporting you before, during, and after the audit. What we appreciated most was the feeling of a true collaboration rather than a 'you paid for an audit, now it's over' relationship." — Hyper0x0 · CTO at Shift Protocol |
"Provided a lot of context and took input from us to define the true risks. Went into depth distinguishing 'chain' versus 'dApp' problems — helpful for the overall report. Iteration was fast and without hassle." — Ertemann · CSO at Lavender Five |
|
"SB's background in audit competitions is evident in their speed, persistence, and attention to detail. The auditors have strong opinions on how code should be implemented and know what they are talking about — and they are not afraid to dive into new things to bring fresh insights to an audit." — Lux · CTO at Origami Finance |
"Great team to work with, exceptionally fast turnaround. Will be working together again." |
Full Portfolio
Lending, Stablecoins & Credit
| Protocol | Report | Description | Details |
|---|---|---|---|
| CrediFi | Report | Onchain unsecured credit protocol issuing fixed-rate crypto loans | |
| fMoney Market | Report | Compound V2-fork money market with cToken-based supply, borrow, and liquidation logic | |
| Buck | Report | Yield-bearing savings token backed by Strategy (MSTR) STRC perpetual preferreds, redeeming to USD-pegged unit | |
| RootsFi | Report | CDP minting MEAD stablecoin against BGT-earning Berachain LP collateral, preserving Proof-of-Liquidity rewards | |
| Firm Money | Report | Liquity V2 fork minting USF stablecoin against ETH and SNT dual collateral; native CDP for Status L2 | |
| WLFI | 4 Audits | Top-4 stablecoin: vesting logic, Securitize-backed RWA issuance, and Dolomite-locked staked-stablecoin reward loop | |
| STBL | Report | Tokenized T-Bill RWA backing with principal/yield split: USST stablecoin + YLD yield-claim NFT (Soroban) | |
| M0 | Findings: 5 Low | M Portal bridge adapters routing $M stablecoin transfers over Wormhole NTT and Hyperlane messaging frameworks | |
Yield Vaults & Asset Management
| Protocol | Report | Description | Details |
|---|---|---|---|
| Origami Finance | Report | ERC-4626 auto-compounder wrapping Sky sUSDS savings, with CoW Protocol swap routing for reward harvesting | |
| Cabal | Report | ERC-7540-style asynchronous deposit/redeem iUSD vault routing stablecoin liquidity into Echelon lending markets | |
| Cabal | Report | Delta-neutral yield vault pairing Echelon borrow positions with perp shorts to hedge directional exposure | |
| Cabal | Report | Move-based wrapper exposing Strat liquid-staking tokens as Echelon-compatible collateral | |
| Neko.hl | Report | Morpho V2 fork on Hyperliquid: curated vaults route BTC/ETH/HYPE across HyperCore, Morpho and Pendle strategies | |
| Neko.hl OVault | Report | LayerZero OVault wrapper over the Hyperliquid Morpho V2 fork; ERC-4626 shares mintable from any chain | |
| Shift Protocol | Report | ERC-4626 vault aggregating curated yield strategies with single-token deposit and share-based accounting | |
| Shift Protocol V2 | Report | Asynchronous ERC-4626 vault with modular strategy adapters and curator-managed allocation | |
| Shift Protocol V2 | Report | Cairo port of the Shift V2 asynchronous ERC-4626 vault on Starknet | |
| Voyage | Report | Automated yield-farming aggregator: ERC-20 token with staking, vesting schedules and managed strategy vaults | |
| TempleDao - TPI Drip | Report | Treasury Price Index oracle that linearly drips TEMPLE backing toward a DAO-set target, anchoring TLC borrow/liquidation | |
| Lila Finance | Report | Interest-rate swap protocol splitting yield-bearing positions into fixed and floating rate legs (Arbitrum) | |
DEX, Perps & Trading Infra
| Protocol | Report | Description | Details |
|---|---|---|---|
| Venus | Report | Venus Core Pool SwapRouter aggregating BNB Chain liquidity to atomically swap-and-supply or repay vToken positions | |
| Mizuchi | Report | Continuous on-chain auction primitive for permissionless token issuance and price discovery | |
| HyperLink | Findings: 1 High / 4 Medium | TEE-isolated trading frontend for Hyperliquid with rotatable session signer keys for non-custodial order flow | |
| LiquidLoot | Report | Pre-TGE points OTC marketplace with on-chain order book, USDT collateral escrow, and post-TGE settlement | |
| Bebop | Report | RFQ swap router wrapping the Bebop PMM — rewrites the fill amount in maker-signed settlement calldata, with pluggable fee/oracle checkers, pre/post hooks, and a Permit2 gasless settle path | |
Staking & Restaking
| Protocol | Report | Description | Details |
|---|---|---|---|
| Zero-G Finance | Report | Multichain EigenLayer LRT issuing zgETH, with Connext/CCTP cross-chain deposit routing from supported L2s | |
| EnderProtocol | Report | LST liquidity aggregator issuing endETH against time-locked ETH/LST bonds, with END as the stripped yield token | |
| CryptoCrritters(OctoStake) | Report | NFT staking vault locking ERC-721s to accrue ERC-20 emission rewards | |
| Helios Staking V2 | Report | Multi-asset I-PoSR staking on Helios L1, where validators collateralize HLX against bridged stablecoin and RWA deposits | |
| BeeBribes | Report | Permissionless Berachain bribe auction directing validator BGT emissions to reward vaults priced by daily bid share | |
| CoBuilders | Soon | Operator-driven automation around Arbitrum Stylus cache-slot bidding: per-user escrows bid via the upstream CacheManager to keep WASM programs warm, reading status through the ArbWasm/ArbWasmCache precompiles | |
NFTs, Games & Marketplaces
| Protocol | Report | Description | Details |
|---|---|---|---|
| VeeFriends | Report | ERC-721C collection enforcing on-chain creator-royalty policies via Limit Break's transfer-validator and operator allowlists | |
| OmniNFT | Report #1, Report #2 | LayerZero ONFT-based omnichain NFT collection using burn-and-mint messaging across seven EVM chains | |
| PsiFi | Findings: 3 Low | Payments-oriented ERC-721 minted lazily via EIP-712 signed vouchers, with ERC-1155 backed claim and settlement primitives | |
| AwesomeX Hybrid NFT | Report | Hybrid ERC-721 NFTs vaulting tiered $AWX (88.8M/888M/8.88B); burn-to-claim with 8% mint fee routed to treasury/launchpad | |
| Element369 | Report | Yield-bearing NFTs that auto-participate in Flux daily TitanX auctions and accrue E280/Inferno/Flux backing redeemable on burn | |
| JakeX Universe | Report | TitanX-paired NFT collection within the JakeX Universe, leveraging TitanX price coupling and burn mechanics | |
| Titan Legends | Report #1, Report #2 | Hybrid NFT/ERC-20 collection with two-way escrow swapping Titan Legends NFTs for $LGNDX, deflationary in both directions | |
| Kettle.Shop | Report | Tiered gachapon mystery-box NFTs redeemable for authenticated luxury watch RWAs, integrated with Berachain PoL | |
| Gacha | Report | Abstract-chain gamified collectibles marketplace selling randomized on-chain card/pack pulls over a vaulted inventory |  |
| Click.Game | Report | Abstract-chain provably-fair Minesweeper betting game with on-chain seed commitment and payout settlement | |
| Cue | Report | Solana options-style prediction market for binary event contracts with on-chain settlement |  |
| LiquidMint | Report | Berachain Diamond-proxy protocol for NFT liquid backing, lending/borrowing, and rental against jpeg collateral | |
| Tierra | Report | Berachain AI-DAO fundraising platform with AI-agent-compatible smart contracts (Bailoo) orchestrating raises and treasury flows | |
Tokens & Tokenomics Engines
| Protocol | Report | Description | Details |
|---|---|---|---|
| Element280 | Report | ELMNT token and NFT giving leveraged exposure to the TitanX ecosystem via LP bonds and BuyAndBurn flywheel | |
| S88, E280, H420, B88 | Report #1, Report #2, Report #3, Report #4 | LayerZero V2 OFT deployments of Element ecosystem tokens enabling burn/mint omnichain transfers | |
| E280 ARB | Report | Arbitrum deployment of E280 with GMX V2 perp-LP yield routed into protocol-owned BuyAndBurn | |
| E280 BNB | Report | BNB Chain deployment of E280 with chain-native LP bonds feeding the BuyAndBurn engine | |
| E280 NFT | Report | ERC-721 collection auto-accruing E280 buyback rewards, redeemable without staking and transferable with claim | |
| AlienX | Report | Deflationary ERC-20 minted from TitanX over 8 weekly cycles; tax-funded BuyAndBurn converts TitanX into Inferno and burns AlienX | |
| SCALE | Report | Reflection ERC-20 in the DragonX/Baby DragonX HQ ecosystem with BuyAndBurn aggregating TitanX-network tokens | |
| Lotus | Report | TitanX/Volt-based virtual-mining ERC-20 with decentralized BuyAndBurn and tiered staking emitting TitanX rewards | |
| Eden | Report | Hyper-deflationary TitanX virtual-mining ERC-20; tiered stakes earning TitanX, auto-compound, Lotus 1:1 migration sink | |
| FeliX | Report | Deflationary ERC-20 with VRF-driven BlackBox rewards, X28-paired Magic Pool burns, and time-limited Minter NFTs | |
| Sparta | Report | Hyper-deflationary PulseChain ERC-20 with 5% buy/sell tax routed to LP and burns; HEX-paired for Heart's-Law beta | |
| Diamonds | Report | Mining token priced via a custom UniswapV2 TWAP oracle gating mint costs and reward emissions | |
| Uranus | Report | PulseChain reflection memecoin distributing buy/sell taxes to holders in the pair token | |
| SmokeRing | Report #1, Report #2 | PulseChain reflection memecoin redistributing transaction taxes to holders via the Uranus28 ecosystem | |
| Stax | Report | NFT vault aggregating staking positions across Element280 ecosystem tokens and streaming rewards to holders | |
| Janus PLS | Report | Helios-ecosystem token distribution contract orchestrating multi-token claim/airdrop flows on PulseChain | |
| Vernal | Report | USDS-collateralized ERC-20 with on-chain backing redemption against Sky Protocol's USDS | |
| GoldMine | Report | Mining-style ERC-20 with XAUt (Tether Gold) integrated buyback, anchoring token backing to tokenized physical gold | |
| Mentorable | Findings: 1 Crit / 2 High / 3 Medium | Bonding-curve launchpad for tokenized mentor access | |
| BuilDefi | Report | Memecoin launchpad routing liquidity through Uniswap V4 hooks and V3 pools, with Aave-collateralized treasury | |
| Securitize | Report | Permissioned ERC-20 security-token (DSToken) framework; a permissionless ComplianceService variant reduces on-chain enforcement to blacklist, pause, balance, and post-issuance lockup, with KYC handled off-chain | |
Governance
| Protocol | Report | Description | Details |
|---|---|---|---|
| ENS DAO | Findings: 3 Low | OpenZeppelin Governor + 2-day Timelock executing on-chain ENS proposals, with Security Council cancel rights | |
Book a Review
Have code that needs a careful look? We reply in minutes.
→ Request an audit
Find us at the top of the page — Website, X, Telegram, Discord.