Skip to content

Latest commit

Β 

History

History
240 lines (210 loc) Β· 45.9 KB

README.md

File metadata and controls

240 lines (210 loc) Β· 45.9 KB

spearbit

Request an audit by filling this form or learn more at Spearbit.com


Public Portfolio

Spearbit is a decentralized network of expert security engineers offering reviews and other security related services to Web3 projects with the goal of creating a stronger ecosystem. Our network has experience on every part of the blockchain technology stack, including but not limited to protocol design, smart contracts and the Solidity compiler. Spearbit brings in untapped security talent by enabling expert freelance auditors seeking flexibility to work on interesting projects together.


Table of Contents



Engagements

Note: All reports herein are published with the consent of our clients.

Protocol Date Report Type Researchers involved
Morpho October 2024 πŸ“„ DeFi, Lending LSR-Saw-Mon and Natalie
LSR-Jonah1005
Sorella Labs October 2024 πŸ“„ MEV Protection, AMM LSR-Desmond Ho
SR-MiloTruck
Royco October 2024 πŸ“„ Vaults, Incentivized Action Markets LSR-Eric Wang
LSR-Leastwood
SR-Devtooligan
ASR-0x4non
Euler October 2024 πŸ“„ DeFi, Vault LSR-Christoph Michel
SR-M4rio.eth
Tezos Etherlink September 2024 πŸ“„ Infrastructure, L2 LSR-Lukasz Glen
LSR-Wei Tang
Omni September 2024 πŸ“„ Bridge, Smart Contracts LSR-Saw-Mon and Natalie
LSR-Optimum
SR-Shotes
ASR-Carrotsmuggler
Coinbase September 2024 πŸ“„ DeFi LSR-Christoph Michel
LSR-Noah Marconi
SR-Phaze
ASR-0xDjango
Coinbase September 2024 πŸ“„ DeFi, Account Abstraction LSR-Noah Marconi
LSR-Riley Holterhus
SR-cccz
ASR-Chinmay Farkya
Omni August 2024 πŸ“„ Infrastructure LSR-Dtheo
LSR-Jtraglia
SR-Shotes
Tradable Finance July 2024 πŸ“„ DeFi LSR-Christoph Michel
LSR-0xIcingdeath
SR-Akshay Srivastav
SR-Cergyk
Centrifuge July 2024 πŸ“„ DeFi LSR-Gerard Persoon
LSR-Leastwood
SR-Devtooligan
ASR-Jonatas Martins
Uniswapx June 2024 πŸ“„ DeFi, Dex LSR-Noah Marconi
SR-Kaden
ASR-Shung
Overprotocol June 2024 πŸ“„ Infrastructure, Node LSR-Dtheo
LSR-Jtraglia
SR-Shotes
Pendle Finance June 2024 πŸ“„ Yield, DeFi LSR-hyh
LSR-Kurt Barry
SR-Xiaoming90
ASR-Mario Poneder
Base June 2024 πŸ“„ Proofs, Disputes LSR-Xmxanuel
LSR-Desmond Ho
SR-0xLadboy
SR-Cryptara
Delv June 2024 πŸ“„ DeFi, Yield LSR-Saw-Mon and Natalie
Overprotocol May 2024 πŸ“„ vCISO LSR-Dtheo
LSR-Jtraglia
SR-Shotes
Fastlane May 2024 πŸ“„ DeFi, MEV LSR-Gerard Persoon
LSR-Riley Holterhus
SR-Blockdev
Euler April 2024 πŸ“„ DeFi LSR-Christoph Michel
LSR-Emanuele Ricci
SR-M4rio.eth
JSR-Christos Pap
JSR-David Chaparro
Euler April 2024 πŸ“„ DeFi LSR-Christoph Michel
LSR-Emanuele Ricci
SR-M4rio.eth
JSR-Christos Pap
JSR-David Chaparro
Euler April 2024 πŸ“„ DeFi, Oracle LSR-Christoph Michel
LSR-Emanuele Ricci
SR-M4rio.eth
JSR-Christos Pap
JSR-David Chaparro
Size April 2024 πŸ“„ DeFi, Lending LSR-hyh
LSR-Leastwood
SR-Slowfi
ASR-0x4non
Delv March 2024 πŸ“„ DeFi, Yield LSR-Saw-Mon and Natalie
LSR-Christoph Michel
SR-M4rio.eth
JSR-David Chaparro
Delv February 2024 πŸ“„ DeFi, Yield LSR-Saw-Mon and Natalie
LSR-Christoph Michel
SR-M4rio.eth
JSR-David Chaparro
Huma Finance January 2024 πŸ“„ Lending, DeFi LSR-Leastwood
LSR-Saw-Mon and Natalie
SR-Kankodu
ASR-Jonatas Martins
Axiom January 2024 πŸ“„ Data availability, Contracts LSR-Riley Holterhus
SR-Blockdev
JSR-Lucas Goiriz
JSR-David Chaparro
Axiom December 2023 πŸ“„ Data availability, Contracts LSR-Desmond Ho
LSR-Riley Holterhus
SR-Blockdev
JSR-Lucas Goiriz
JSR-David Chaparro
Llama December 2023 πŸ“„ Governance, Voting LSR-Noah Marconi
SR-Xmxanuel
Velodrome November 2023 πŸ“„ DeFi, DEX LSR-D-Nice
LSR-Optimum
SR-Alex The Entreprenerd
ASR-Jeiwan
Redacted November 2023 πŸ“„ Infrastructure LSR-Parithosh
LSR-Rafael Matias
Sphinx November 2023 πŸ“„ Infrastructure LSR-Desmond Ho
LSR-Saw-Mon and Natalie
SR-M4rio.eth
JSR-David Chaparro
JSR-Sabnock
Axiom October 2023 Data availability, ZK circuits LSR-CPerezz
LSR-Eduard Sanou
SR-Kyle Charbonnet
Brahma October 2023 πŸ“„ DeFi LSR-Saw-Mon and Natalie
LSR-Gerard Persoon
SR-Xiaoming90
SR-Philogy
Axiom October 2023 πŸ“„ Data availability, Contracts LSR-Desmond Ho
LSR-Riley Holterhus
SR-Blockdev
JSR-Lucas Goiriz
JSR-David Chaparro
zkSync October 2023 πŸ“„ ZK LSR-Wilson Nguyen
LSR-Nirvan
Liquid Collective September 2023 πŸ“„ Liquid Staking, Enterprise Grade Staking
LSR-Optimum
LSR-Saw-Mon and Natalie
SR-Xiaoming90
JSR-Ellahi
Axiom September 2023 Data availability, ZK circuits LSR-CPerezz
LSR-Eduard Sanou
SR-Kyle Charbonnet
Redacted August 2023 Web2, Back-End LSR-Christoph Michel
SR-High_byte
Redacted July 2023 DeFi, Liquid Staking LSR-Rajeev
LSR-0x52
SR-Slowfi
JSR-Ayeslick
Primitive July 2023 πŸ“„ DeFi, Portfolio Management LSR-Kurt Barry
LSR-Christoph Michel
Alchemy July 2023 Smart Contract Wallet LSR-Gerard Persoon
LSR-Riley Holterhus
SR-Blockdev
JSR-Christos Pap
NFTX July 2023 NFT, AMM and Lending LSR-hyh
LSR-Optimum
SR-cccz
ASR-Jonatas Martins
Liquid Collective July 2023 πŸ“„ Liquid Staking, Enterprise Grade Staking LSR-Optimum
SR-Xiaoming90
Astaria July 2023 πŸ“„ NFT, Liquidity LSR-Saw-Mon and Natalie
LSR-Jonah1005
SR-Blockdev
BadgerDAO June 2023 DeFi, Stablecoin LSR-Leastwood
LSR-hyh
SR-Emanuele Ricci
JSR-Calvin Boehr
JSR-Hagrid
Delv June 2023 πŸ“„ DeFi, Yield LSR-Saw-Mon and Natalie
LSR-Christoph Michel
SR-M4rio.eth
JSR-David Chaparro
Flood June 2023 DeFi, DEX Aggregator LSR-Rajeev
LSR-Noah Marconi
SR-r0bert
JSR-Bahurum
JSR-NicolΓ‘s Bevilacqua
OpenSea June 2023 NFT, SeaDrop LSR-Saw-Mon and Natalie
LSR-Harikrishnan Mulackal
Nouns DAO June 2023 πŸ“„ NFT, Governance LSR-Rajeev
LSR-hyh
SR-r0bert
JSR-Christos Pap
JSR-TCHKVSKY
Morpho June 2023 DeFi, Lending and Borrowing LSR-Christoph Michel
SR-Emanuele Ricci
SR-JayJonah8
JSR-Yldp
JSR-EBaizel
Redacted Cartel May 2023 DeFi, Bribes Marketplace. SEAL engagement LSR-Optimum
LSR-0x52
SR-High_byte
JSR-Sabnock
JSR-Maxime Viard
JSR-David Chaparro
Barnbridge May 2023 DeFi, Tokenized Risk Protocol. SEAL engagement LSR-Leastwood
LSR-Riley Holterhus
SR-DefSec
ASR-Pashov Krum
ASR-0x4non
ASR-Jonatas Martins
JSR-TheMystery
Primitive May 2023 DeFi, Portfolio Management LSR-Kurt Barry
LSR-Christoph Michel
Liquid Collective May 2023 πŸ“„ Liquid Staking, Enterprise Grade Staking LSR-Saw-Mon and Natalie
SR-Xiaoming90
Llama May 2023 πŸ“„ DeFi & NFT, Governance LSR-Noah Marconi
SR-M4rio.eth
SR-Xmxanuel
JSR-Parth Patel
JSR-TheMystery
Morpho April 2023 πŸ“„ DeFi, Lending and Borrowing LSR-Christoph Michel
SR-Emanuele Ricci
SR-JayJonah8
JSR-Yldp
JSR-EBaizel
Kiln April 2023 Liquid Staking, Enterprise Grade Staking LSR-Optimum
LSR-Saw-Mon and Natalie
SR-Xiaoming90
ASR-0x4non
Kiln April 2023 Liquid Staking, Enterprise Grade Staking LSR-Optimum
LSR-Saw-Mon and Natalie
SR-Xiaoming90
ASR-0x4non
Opensea Pro April 2023 NFT, Marketplace Aggregator LSR-Saw-Mon and Natalie
LSR-Christoph Michel
JSR-Lucas Goiriz
JSR-David Chaparro
Waterfall April 2023 NFT, Prediction Markets LSR-Desmond Ho
LSR-Riley Holterhus
SR-Csanuragjain
JSR-Maxime Viard
JSR-Christos Pap
Polygon zkEVM - Protocol March 2023 1 2 3 zkEVM LSR-Alex Beregszaszi)
LSR-Andrei Maiboroda
LSR-Christian Reitwiessner
LSR-(Leo Alt)
LSR-Pawel Bylica
Polygon zkEVM - Bridge March 2023 πŸ“„ zkEVM LSR-Gerard Persoon
LSR-Leastwood
SR-Csanuragjain
SR-Xiaoming90
ASR-Pashov Krum
Polygon zkEVM - Cryptography March 2023 πŸ“„ zkEVM LSR-Wilson Nguyen
LSR-Nirvan
LSR-Thibaut Schaeffer
Primitive March 2023 πŸ“„ DeFi, Portfolio Management LSR-Kurt Barry
LSR-Christoph Michel
SR-M4rio.eth
JSR-Sabnock
Liquid Collective March 2023 πŸ“„ Liquid Staking, Enterprise Grade Staking LSR-Optimum
LSR-Saw-Mon and Natalie
SR-Xiaoming90
JSR-Ellahi
JSR-Matt Eccentricexit
LI.FI March 2023 πŸ“„ Aggregator, Bridge & DEX LSR-Gerard Persoon
LSR-Jonah1005
SR-DefSec
SR-Blockdev
Morpho February 2023 DeFi, Lending and Borrowing LSR-Christoph Michel
SR-Emanuele Ricci
SR-JayJonah8
JSR-Yldp
JSR-EBaizel
Velodrome February 2023 πŸ“„ DeFi, DEX LSR-Leastwood
LSR-Jonah1005
SR-Xiaoming90
SR-Alex The Entreprenerd
JSR-0xNazgul
Sudoswap February 2023 πŸ“„ DeFi, P2P NFT Swaps LSR-Gerard Persoon
LSR-Rajeev
SR-Shodan
JSR-Lucas Goiriz
JSR-David Chaparro
Cron Finance January 2023 πŸ“„ DeFi, TWAMM LSR-Kurt Barry
LSR-Noah Marconi
SR-M4rio.eth
JSR-Calvin Boehr
JSR-Christos Pap
Looksrare January 2023 πŸ“„ NFT, Marketplace LSR-Optimum
LSR-Saw-Mon and Natalie
SR-Riley Holterhus
JSR-Maxime Viard
Clober January 2023 πŸ“„ DeFi, DEX LSR-Christoph Michel
LSR-Desmond Ho
SR-Throttle
JSR-grmpyninja
JSR-Taek Lee
Goldfinch December 2022 DeFi, Credit Protocol LSR-D-Nice
LSR-Optimum
JSR-TCHKVSKY
OpenSea December 2022 πŸ“„ NFT, Seaport LSR-Saw-Mon and Natalie
LSR-Harikrishnan Mulackal
SR-Dravee
JSR-Ellahi
Consultant-Alex Beregszaszi
Paladin November 2022 DeFi, Yield Vaults. SEAL engagement LSR-Rajeev
SR-Patrickd
JSR-Zarf
JSR-Andy Li
JSR-TCHKVSKY
0xNazgul
JSR-merkleplant
JSR-Maxime Viard
JSR-Christos Pap
Astaria November 2022 πŸ“„ NFT, Liquidity LSR-Noah Marconi
LSR-Saw-Mon and Natalie
SR-Zach Obront
ASR-Blockdev
Goldfinch November 2022 DeFi, Credit Protocol LSR-D-Nice
LSR-Optimum
JSR-TCHKVSKY
Morpho November 2022 πŸ“„ DeFi, Lending and Borrowing LSR-Christoph Michel
SR-Emanuele Ricci
SR-JayJonah8
JSR-Yldp
JSR-EBaizel
Liquid Collective November 2022 πŸ“„ Liquid Staking, Enterprise Grade Staking LSR-Optimum
SR-Emanuele Ricci
JSR-Ellahi
JSR-Matt Eccentricexit
Goldfinch October 2022 DeFi, Credit Protocol LSR-D-Nice
LSR-Optimum
JSR-TCHKVSKY
Connext October 2022 πŸ“„ Bridge, Cross Chain Liquidity LSR-Saw-Mon and Natalie
LSR-Gerard Persoon
SR-Csanuragjain
SR-Xiaoming90
ASR-Blockdev
Maple October 2022 πŸ“„ DeFi, Borrowing & Lending LSR-Christoph Michel
LSR-Leastwood
SR-Riley Holterhus
JSR-Devtooligan
JSR-Jonatas Martins
OpenSea October 2022 NFT, Marketplace LSR-Saw-Mon and Natalie
LSR-Christoph Michel
Optimism October 2022 L2, Merkle Trie LSR-Kurt Barry
SR-Patrickd
Goldfinch September 2022 DeFi, Credit Protocol LSR-D-Nice
LSR-Optimum
Apprentice-TCHKVSKY
OpenSea September 2022 NFT, Marketplace LSR-Saw-Mon and Natalie
LSR-Harikrishnan Mulackal
SR-Dravee
Apprentice-Devansh Batham
Apprentice-Parth Patel
OpenSea August 2022 πŸ“„ NFT, Marketplace LSR-Saw-Mon and Natalie
LSR-Harikrishnan Mulackal
SR-Dravee
Apprentice-Devansh Batham
Apprentice-Parth Patel
Liquid Collective August 2022 πŸ“„ Liquid Staking, Enterprise Grade Staking LSR-Optimum
LSR-Saw-Mon and Natalie
SR-Emanuele Ricci
Apprentice-Ellahi
Apprentice-Matt Eccentricexit
Goldfinch August 2022 DeFi, Credit Protocol LSR-D-Nice
LSR-Optimum
Apprentice-TCHKVSKY
LI.FI August 2022 πŸ“„ Aggregator, Bridge & DEX LSR-Gerard Persoon
LSR-Jonah1005
SR-DefSec
Apprentice-Blockdev
Ribbon August 2022 DeFi, Option Vaults LSR-Christoph Michel
LSR-Optimum
SR-JayJonah8
SR-M4rio.eth
Apprentice-grmpyninja
Apprentice-Ellahi
Optimism August 2022 πŸ“„ L2, Automation LSR-Noah Marconi
SR-Emanuele Ricci
Apprentice-Hrishikesh Bhat
Apprentice-0xNazgul
Connext July 2022 Bridge, Cross Chain Liquidity LSR-Leastwood
LSR-Jonah1005
QO-Gerard Persoon
Apprentice-Blockdev
Apprentice-Tqts
Consultant-Happenwah
Goldfinch July 2022 DeFi, Credit Protocol LSR-Optimum
LSR-Noah Marconi
Apprentice-TCHKVSKY
Exponent July 2022 DeFi, Token Equity. SEAL engagement LSR-Rajeev
LSR-Desmond Ho
Apprentice-Miguel Palhas
Apprentice-Jonatas Martins
Apprentice-Hagrid
Apprentice-Calvin Boehr
Apprentice-Balag3
Apprentice-Tqts
Apprentice-Maxime Viard
OpenSea July 2022 NFT, Seaport LSR-Leo Alt
LSR-Alex Beregszaszi
LSR-Harikrishnan Mulackal
Paradigm Art Gobblers July 2022 πŸ“„ NFT, Art LSR-Kurt Barry
LSR-Leo Alt
LSR-Harikrishnan Mulackal
SR-Emanuele Ricci
SR-Patrickd
Apprentice-Hrishikesh Bhat
Apprentice-Devansh Batham
Consultant-Alex Beregszaszi
OlympusDAO June 2022 DeFi, Staking & Bonding LSR-Christoph Michel
LSR-Desmond Ho
SR-Blackscale
Apprentice-Jonatas Martins
Apprentice-Hagrid
Connext June 2022 πŸ“„ Bridge, Cross Chain Liquidity. C4 fix review LSR-Leastwood
LSR-Jonah1005
QO-Gerard Persoon
Apprentice-Blockdev
Apprentice-Tqts
OpenSea June 2022 NFT, Seaport LSR-Alex Beregszaszi
LSR-Harikrishnan Mulackal
LSR-Gerard Persoon
LSR-Leo Alt
LSR-Christoph Michel
SR-Throttle
Apprentice-Miguel Palhas
OpenSea June 2022 NFT, Seaport. C4 fix review LSR-Alex Beregszaszi
LSR-Harikrishnan Mulackal
LSR-Gerard Persoon
LSR-Leo Alt
LSR-Christoph Michel
SR-Throttle
Apprentice-Miguel Palhas
Gauntlet May 2022 πŸ“„ DeFi, Financial Modeling LSR-Gerard Persoon
LSR-Eric Wang
SR-Emanuele Ricci
Apprentice-Devansh Batham
Goldfinch May 2022 DeFi, Credit Protocol LSR-D-Nice
LSR-Optimum
Apprentice-TCHKVSKY
Porter May 2022 πŸ“„ DeFi, Bonds LSR-Brock Elmore
SR-DefSec
SR-Satyam Agrawal
Apprentice-grmpyninja
Apprentice-Blockdev
Timeless April 2022 πŸ“„ DeFi, Perpetual Yield Tokens LSR-Christoph Michel
SR-JayJonah8
Apprentice-Calvin Boehr
Apprentice-Sleepy
Paladin April 2022 πŸ“„ DeFi, Governance Lending LSR-Gerard Persoon
SR-JayJonah8
SR-DefSec
Apprentice-Devansh Batham
Optimism April 2022 L2, Merkle Trie LSR-Kurt Barry
LSR-Eric Wang
LSR-Guido Vranken
Apprentice-Patrickd
Apprentice-Tqts
Morpho March 2022 πŸ“„ DeFi, Lending and Borrowing LSR-Christoph Michel
SR-Emanuele Ricci
SR-Hack3r-Om
SR-JayJonah8
Tracer February 2022 πŸ“„ DeFi, Perpetual Pools LSR-Gerard Persoon
LSR-Christoph Michel
SR-Emanuele Ricci
SR-RustyRabbit
POAP Februrary 2022 NFT, Bridge. Private Audit ---
Locke Februrary 2022 πŸ“„ DeFi, AMM LSR-Eric Wang
LSR-Harikrishnan Mulackal
SR-Mukesh Jaiswal
Overlay Februrary 2022 πŸ“„ DeFi, Markets on streams of data LSR-Mudit Gupta
LSR-Gerard Persoon
LSR-Harikrishnan Mulackal
Sudoswap January 2022 πŸ“„ DeFi, P2P NFT Swaps LSR-Gerard Persoon
LSR-Mudit Gupta
LSR-Max Goodman
Sense January 2022 πŸ“„ DeFi, Fixed Yield LSR-Gerard Persoon
LSR-D-Nice
LSR-Max Goodman
Consultant-Kurt Barry
POAP December 2021 NFT, Badges. Private Audit ---
POAP December 2021 WEB2 NFT, Badges. Private Audit ---
Brink November 2021 πŸ“„ DeFi, Automation LSR-Harikrishnan Mulackal
LSR-Alex Beregszaszi
LSR-Gerard Persoon
Brink November 2021 πŸ“„ DeFi, Automation LSR-Gerard Persoon
LSR-Harikrishnan Mulackal
LSR-Max Goodman


Competitions

Competition Date Ranking Links of interest
Code4rena OpenSea 20 May 2022β€”4 June, 2022 #1 Leaderboard
Paradigm CTF, SpearbitVanguard August 20-21, 2022 #11 Leaderboard
Paradigm CTF, SpearbitRearguard August 20-21, 2022 #52 Leaderboard


Responsible Disclosure

Note: Auditors keep 100% of the bounty

Protocol Date Links of interest Auditors involved
Balancer May 2022 Twitter announcement, Balancer article Gerard Persoon, Eric Wang


Content

List of public talks and seminars

Name Additional Resources
Numerical Analysis for DeFi Audits: Kurt Barry Slides
Economic Security with fmrmf Slides
Security Education and Assessment Lab with Rajeev Video
Deep Dive Into Seaport with 0age Slides
Optimal Front Running Attacks & How to Stop Them with Max Resnick Slides
From Exploit to Recovery: Unraveling DeFi Incidents with Spreek Slides
Community Workshop: Zach Obront Slides
How to Foundry 2.0 Demo
EVM Through HUFF: Devtooligan Slides, Demo
ZK Series: Intro with Porter Adams Slides
Community Workshop: Riley Holterhus Slides
EVM Seminar: 7 things about the EVM Slides
OpenSeacurity with Spearbit Show notes
The Bridge Risk Framework Seminar L2 Bridge Risk Framework
Fuzzing Tools Series: Certora Prover --
Fuzzing Tools Series: Echidna Echidna Spearbit Demo
Forta Introduction Seminar --
Simple Security Toolkit Walkthrough Simple Security Toolkit
Spearbit at TrustX: Languages --
Spearbit at TrustX: Simplify Solidity Code with Sorted Contracts and Security Risk --
Understanding Bridge Security with Connext's Arjun Bhuptani --
How to Foundry Foundry Book

Bridges

Title
Bridge Security Introduction
Bridge Security Checklist

Spearbook

Public Spearbit documentation meant for clients



Core Team

Have any questions? Reach out to the core team directly at core-team [at] spearbit [dot] com !