Finding counts cover the 146 named engagements only. Risk assessments and development work do not produce findings in the same way an audit does, and the 36 confidential engagements contribute nothing to any number on this page — so every figure here is a floor, not a total. Read how we audit, meet the team, or take the whole thing as machine-readable data.
Decurity audits decentralised exchanges and automated market makers — constant-product and concentrated-liquidity AMMs, aggregators, intent and order-flow systems, and cross-chain swap routing.
Decurity audits lending markets and collateralized debt positions — liquidation logic, interest accrual, oracle dependence, and the integration surface of collateral adapters.
Decurity audits staking systems, liquid staking derivatives and restaking protocols — reward accounting, withdrawal queues, validator trust assumptions and share-price manipulation.
Decurity audits bridges and cross-chain systems — message verification, relayer and MPC trust assumptions, HTLC swap flows, and the replay and ordering problems that only appear across chains.
Decurity audits yield strategies, farming systems and vaults — strategy accounting, share-price manipulation, reward distribution and the integration risk of every external protocol a vault touches.
Decurity audits the centralised half of decentralised systems — backends, APIs, custody and key management, exchange infrastructure, wallets and dApp frontends that smart contract audits do not cover.
Decurity audits Solana programs in Rust and Anchor — account constraint validation, PDA derivation, CPI trust boundaries and SVM-specific vulnerability classes.
Decurity audits stablecoins and real-world-asset protocols — peg mechanics, collateral and redemption paths, oracle dependence, and the permissioning that RWA issuance requires.
| 1inch Network — 1inch SwapVM | July 2026 |
| Symbiosis Finance — Symbiosis Depository Audit | June 2026 |
| Flap.sh — Flap Curve Store Audit | June 2026 |
| Gearbox Protocol — Gearbox Securitize Audit | April 2026 |
| Flap.sh — Flap Dividend Contract Audit | April 2026 |
| Rubic Exchange — Rubic Stellar Audit | April 2026 |
| Stable — Stable Update Audit | February 2026 |
| 1inch Network — 1inch SwapVM&Aqua Audit 2601 | January 2026 |
| Gearbox Protocol — Gearbox Integrations Audit 1225 (KelpLRT) | December 2025 |
| Stable — Stable Web2 Audit | November 2025 |
| Vooi — Vooi Frontend Audit | November 2025 |
| Vooi — Vooi Staking Audit | November 2025 |
Every engagement is staffed with a full-time team led by a technical lead, and runs as an internal contest with a blind phase.