# CODESPECT

> CODESPECT is a blockchain security firm specializing in smart contract audits, penetration testing, AI adversarial testing, red team exercises, and operations security for Web3 protocols. The firm has secured over $4 billion in total value locked across clients including ETHSign, The Vault, and LST Olas. Primary coverage: EVM chains, Solana, and Starknet, with additional Fogo (SVM) and Sui support.

## About

- [About CODESPECT](https://www.codespect.net/about): company background, team, legal entity, and ecosystems covered
- [Founder: Ondřej Tatýrek (Talfao)](https://www.codespect.net/about/founder): named founder profile, credentials, security practice, and research
- [Methodology](https://www.codespect.net/methodology): 4-phase audit methodology: static analysis, manual review, fuzzing and invariant testing, fix verification
- [FAQ](https://www.codespect.net/faq): pricing, timelines, chains, Safe Harbor, AI adversarial testing, and more
- [Request a Security Assessment](https://www.codespect.net/request-assessment): free 30-minute pre-assessment: submit project details for an audit, pen test, or red team engagement

## Services

- [Web3 Security / Smart Contract Audits](https://www.codespect.net/web3-security): Solidity (EVM), Rust (Solana), Cairo (Starknet), with Move support; SEAL-aligned methodology
- [Penetration Testing](https://www.codespect.net/pentesting): Web apps, APIs, cloud, CI/CD (OWASP, PTES, SEAL Infrastructure)
- [AI Hacking / Adversarial Testing](https://www.codespect.net/ai-red-teaming): AI agents, LLMs (OWASP LLM Top 10, MITRE ATLAS, Google SAIF)
- [Red Teaming](https://www.codespect.net/red-teaming): Social engineering, phishing, insider threat
- [Operations Security](https://www.codespect.net/opsec): Multisig, key management, upgrade governance, supply chain

## Recent Research and Writing

- [8 Common Vulnerabilities in On-Chain Options Protocols](https://www.codespect.net/blog/common-vulnerabilities-on-chain-options-protocols): Options protocols fail when time-dependent claims drift away from collateral, settlement, pricing, and accounting. This guide turns public findings into an audi
- [Why Smart Contract Audits Aren't Enough for DeFi Agents](https://www.codespect.net/blog/agent-trust-framework-defi-agents): Owney's Agent Trust Framework scores autonomous DeFi agents across security, risk and robustness. CODESPECT contributed the security and risk perspective. This 
- [Cross-Context Ciphertext Replay: A Confidentiality Pitfall in Arcium MXEs](https://www.codespect.net/blog/cross-context-ciphertext-replay-arcium-mxe): An encrypted input on Arcium is a bearer token bound to the MXE key and nothing else. Replaying a victim's public ciphertext into a different computation in the
- [PDA Seed Collision: How a Sequential Counter Affected Account Isolation on Solana](https://www.codespect.net/blog/pda-seed-collision-sequential-counter-account-isolation-solana): During a review of the TokenTable Solana Unlocker V2 program, we observed a scenario in which token allocations associated with cancelled accounts could be acce
- [The Bug That Slipped: Stale Balance Accounting in YieldBasis (Sherlock Contest)](https://www.codespect.net/blog/the-bug-that-slipped-stale-balance-accounting-in-yieldbasis): How a simple staleness issue in a gauge contract went unnoticed by professional auditing firms due to isolated audit scope.
- [Implementation and Security Pitfalls of LST on Hyperliquid](https://www.codespect.net/blog/implementation-and-security-pitfalls-of-lst-on-hyperliquid): While LSTs on Hyperliquid open exciting opportunities for decentralised staking, they also introduce hidden technical and security pitfalls that can silently un
- [The Bug That Could Prevent Withdrawal: Merkle Tree Corruption in a Cairo Privacy Mixer](https://www.codespect.net/blog/merkle-tree-overflow-cairo-privacy-mixer): A subtle edge condition in a Cairo-based privacy mixer caused the 1,025th deposit to silently corrupt the Merkle tree state, invalidating withdrawal proofs for 
- [Zero to Hero: Hackathon Workshop at CTU Prague](https://www.codespect.net/blog/zero-to-hero-workshop-ctu): CODESPECT co-hosted the first "Zero to Hero" hackathon workshop at ChainLab CTU. We helped students go from idea to MVP and start building for the Solana Coloss
- [Security Workshop with La Familia](https://www.codespect.net/blog/la-familia-security-workshop): A hands-on security session covering how to prepare for a real audit, the most common mistakes in programs, and how to strengthen your project for Colosseum.
- [Talfao on Starknet Security](https://www.codespect.net/blog/talfao-starknet-security-talk): Watch Talfao present on Starknet security covering common vulnerabilities, audit insights, and best practices for building secure contracts on Starknet.

## Audit Reports

- [Swell ETH Staking Deposit Bot (ethereum)](https://www.codespect.net/reports/swell-eth-staking-deposit-bot): Off-chain CLI tool that deposits Swell node-operator validators for swETH and rswETH on Ethereum mainnet.
- [Hyperwave Sub-Account Strategy Framework (hyperliquid)](https://www.codespect.net/reports/hyperwave-sub-account-strategy-framework): Sub-account strategy framework for Hyperwave's BoringVault-based vault, letting strategists deploy vault funds into external protocols under Merkle-gated permissions and per-strategy limits.
- [Realms: Core Attribute Voter (solana)](https://www.codespect.net/reports/realms-core-attribute-voter): NFT-based voting weight plugin for the SPL Governance program, enabling Realms DAOs to use NFT holdings as voter weight.
- [Vesu Vault Allocator (starknet)](https://www.codespect.net/reports/vesu-vault-allocator-adapters): Ekubo liquidity adapter, CCTP/Hyperlane/LayerZero bridge middlewares and decoder-sanitizers for the Vesu vault allocator on Starknet.
- [Hyperbeat Multi-Asset Withdrawal Queue (hyperliquid)](https://www.codespect.net/reports/hyperbeat-withdrawal-queue): Multi-asset withdrawal queue for Hyperbeat's BoringVault-based vault, supporting queued and instant withdrawals into approved assets.
- [Hyperbeat Credit Fund (hyperliquid)](https://www.codespect.net/reports/hyperbeat-credit-fund): BoringVault credit-fund strategy allocating USDC and beatUSD into Morpho vaults through Hyperbeat's permissioned wrapper and orchestration layer.
- [Vesu V2 Periphery (starknet)](https://www.codespect.net/reports/vesu-v2-periphery): Periphery contracts for Vesu V2 on Starknet covering position migration, liquidation, multiply and swap flows.
- [Vesu Vaults (starknet)](https://www.codespect.net/reports/vesu-vaults): Vesu vault periphery on Starknet: AUM provider, Merkle-tree permission registry and integrations for Avnu, ERC-4626 and Vesu V1/V2.
- [Vesu Starknet Vault Kit (starknet)](https://www.codespect.net/reports/vesu-starknet-vault-kit): ERC-4626 style vault, allocator and decoder-sanitizer permission layer for the Vesu Starknet Vault Kit.
- [RedStone Oracles (ethereum)](https://www.codespect.net/reports/redstone-oracles): Oracle protocol offering customizable and cost-efficient data streams for EVM-compatible chains.
- [RedStone Token (ethereum)](https://www.codespect.net/reports/redstone-token): ERC-20 token contract for the RedStone oracle protocol.
- [RemusDEX (starknet)](https://www.codespect.net/reports/remusdex): Fully on-chain Central Limit Order Book (CLOB) decentralized exchange on Starknet.
- [Tempest Bridge Oracle (ethereum)](https://www.codespect.net/reports/tempest-bridge-oracle): Bridge oracle contract handling sequencer downtime for cross-chain price feeds.
- [Tempest DepositIdle (ethereum)](https://www.codespect.net/reports/tempest-depostidle): New depositIdle feature for Tempest vault enabling integration with Royco's Vault.
- [TokenTable Solana Unlocker V2 (solana)](https://www.codespect.net/reports/tokentable-solana-unlocker-v2): Solana programs for on-chain token distribution with an Unlocker and Fee Collector system.
- [TokenTable Solana Merkle Airdrop (solana)](https://www.codespect.net/reports/tokentable-solana-merkle-airdrop): Solana program for merkle-proof-based token airdrop distribution.
- [TokenTable Solana Unlocker V2 Follow-Up (solana)](https://www.codespect.net/reports/tokentable-solana-unlocker-v2-follow-up): Follow-up audit of the Solana Unlocker V2 and Fee Collector programs after initial remediation.
- [TokenTable Fractionalizer & SellNow (ethereum)](https://www.codespect.net/reports/tokentable-fractionalizer-sellnow): EVM contracts for fractionalizing token allocations and facilitating secondary market sales.
- [TokenTable UnlockerV2 EVM (ethereum)](https://www.codespect.net/reports/tokentable-unlockerv2-evm): EVM token distribution suite with Unlocker, Fee Collector, and Tracker token contracts.
- [Swell Withdrawal Update (ethereum)](https://www.codespect.net/reports/swell-withdrawal-update): Minor update to Swell's liquid staking contracts for EigenLayer withdrawal integration.

## Machine-Readable Extras

- [llms-full.txt](https://www.codespect.net/llms-full.txt): full page bodies for this site
- [sitemap.xml](https://www.codespect.net/sitemap.xml): every indexable URL on codespect.net
- [robots.txt](https://www.codespect.net/robots.txt): explicit allow list for AI/LLM crawlers

## Contact

- Email: audits@codespect.xyz
- Telegram: https://t.me/talfao
- GitHub: https://github.com/CODESPECT-security
- X / Twitter: https://x.com/CODESPECT/
- LinkedIn: https://www.linkedin.com/company/105509183/