Zealynx

@ZealynxSecurity

Blockchain & AI Security firm | Web3 Membership academy.zealynx.io/membership | Book a Smart Contract Audit (Solidity, Rust, TypeScript)

Poland & Spain

zealynx.io

Replies Reposts Media

Pinned
Zealynx
@ZealynxSecurity
Aug 12
A security portfolio should be inspectable, not just impressive. When evaluating an auditor, look past the logo wall. Check the actual reports: • Was the scope clear? • Are findings explained well enough to reproduce the reasoning? • Is severity justified? • Is remediation
Smart Contract Audit Reports | Public Web3 Security Reviews | Zealynx
From zealynx.io
Zealynx
@ZealynxSecurity
16h
A smart contract audit does not secure the API, game logic, or frontend events around it. For Fair Casino, Zealynx reviewed three connected surfaces: the Solana vault program, the TypeScript core, and a follow-on SOL→FAIR swap flow. The public reports show issues across every
zealynx.io
Fair Labs Audits | Zealynx Security
Public audit reports by Zealynx Security for Fair Labs. 3 reports published.
Zealynx
@ZealynxSecurity
19h
An attacker does not need to break your perps protocol. They just need to aim the funding rate. Funding is the periodic payment between longs and shorts that keeps the perp tethered to its index. It is supposed to emerge from the market. But it is computed from the gap between
1
Zealynx
@ZealynxSecurity
Aug 30
A security-grant partnership should improve access, not buy selection. Zealynx Audit Grants is now open to chains, accelerators, incubators, and hackathons that want to support their builders. Partner affiliation can add verified context during review, but partners get no paid
Partner with Zealynx Audit Grants
From grants.zealynx.io
Zealynx
@ZealynxSecurity
Aug 30
The Uniswap V3 tick bitmap wraps its whole body in unchecked, with a comment saying overflow is "prevented externally by limiting both tickSpacing and tick". That is true. But notice where the guarantees live: one layer up, in checkTicks and in the pool. When you audit a fork,
00:00
1