Exchange logic is where accounting bugs turn directly into stolen funds. The failure modes are rarely a missing access-control modifier — they are rounding that favours the caller, invariants that hold for two tokens but not three, fee maths that drifts under fee-on-transfer or rebasing tokens, and swap routing that trusts a value it should have recomputed.
Our exchange work spans classical constant-product pools, concentrated liquidity, aggregation and intent-based routing, and the resolver and settlement contracts that sit behind them. Several of these engagements were on systems handling a large share of onchain spot volume.
Tell us what you're building. DEX and AMM Security Audits is an area we work in constantly.