HyperLend
May 26, 2026
HyperLend
Security research
Published smart contract and Web3 security audit reports across DeFi protocols, privacy systems, and blockchain infrastructure, organized as a public technical record.
Selected work
Three completed engagements presented through their real scope, report date, protocol identity, and documented findings.
HyperLend
May 26, 2026
HyperLend
castr.fun
August 13, 2026
castr.fun
Mystic Finance
May 11, 2026
Mystic Finance
Report library
Search the archive or narrow it by publication year and disclosed technology.
19 security reviews

Review of Fluton’s confidential DeFi and cross-chain infrastructure, including FHE token flows, bridge integrations, and a Diamond-based Aave V3 adapter.
Review of eight Solidity contracts implementing on-chain bounty programs, escrow, report adjudication, disputes, and payouts.

Review of the Base ERC-20 token and its replaceable Fibonacci-schedule emission module.

Review of a Base token launchpad using Bancor-style bonding curves and migration to Aerodrome Slipstream liquidity.

Review of leveraged-lending strategy management, looping, and swap-adapter contracts for HyperLend on Hyperliquid. Public data recorded more than $328M in protocol TVL during the engagement window.

Review of the Plume liquid-staking minter and myPLUME price feed, including withdrawal batching and validator allocation.

Review of Arche’s Ethereum yield infrastructure for the USDC-backed arUSD ERC-4626 vault.

Review of the optimized 0x deployment script and its contract-verification constructor arguments.

Review of Encifher’s Solana privacy-bridging services, including swap slippage, Kafka consumers, and solver balance handling.

Review of Mystic Finance’s Plume staking, validator allocation, withdrawal, rewards, and price-feed contracts.

Review of the Forwarder strategy’s vault-deposit validation and fund-deployment logic.

Review of access management, sanctions controls, price-oracle, staking-vault, and USH token contracts.

Review of token launch, bonding-curve, liquidity-locking, state-management, and transfer-library contracts.

Second June review of stPlumeMinter and frxETH, focused on rewards accounting and concurrent withdrawal availability.

Review of stPlumeMinter and frxETH withdrawal, validator-deposit, rewards, and governance-withdrawal logic.

Review of FactCheckExchange order settlement, signature validation, fee enforcement, and treasury-role management.

Second review of the private-withdrawal contract and circuit, focused on relayer request validation and fee visibility.

Review of the Pip contract and withdrawal circuit, covering recovery of stuck funds and relayer-fee configuration.
Review of borrowing, repayment, asset deposit and withdrawal, and swap logic documented in the RWA report.
Try a broader search or reset the report library.
Start a conversation
Start with a stable scope, current architecture context, and enough time for remediation and fix verification.