- : string = "nowarp"
Security Tools
Misti
Open sourceStatic analyzer for TON smart contracts
TON Scanner
ProprietaryMass-scanner over verified TON contracts
Laron
ProprietaryMetamorphic compiler fuzzer with Lean4-verified mutations
Security Audits
- Smart contractsAcross Ethereum, Move and TON. Non-trivial protocols only.
- Compiler / toolchain / runtimeSecurity across the layers beneath the contract.
The tools we've built and the blog carry our findings and insights. Previous audit reports on request.
Latest Posts
All posts →Compilers · Metamorphic Testing
Compiler Testing — Part 2: Metamorphic Testing with Verified Identities
Hunting compiler miscompilations with differential and metamorphic testing, using mutations proven equivalence-preserving in Lean4. Real-world findings, some rewarded with bug bounties.
Fuzzing · Compilers
Compiler Testing — Part 1: Coverage-Guided Fuzzing with Grammars and LLMs
How coverage-guided fuzzing and LLM-assisted mutators adapt to smart-contract compilers. 100+ bugs found across Sui Move, Cairo, Solang, Solidity, and Leo.
Static Analysis · LLM
Skry: Hybrid LLM Static Analysis for Sui Move
A hybrid static analysis + LLM security tool for Sui Move, focused on access control, governance, and centralization issues.