Independent security reviews for Ethereum and EVM L2 protocols. I pair ODIN — an automated static-analysis and invariant-fuzzing pipeline — with hands-on manual review, so you get broad coverage and real exploit reasoning. Free scoping, quote within 24 hours.
Focused on EVM / Solidity — Ethereum, Arbitrum, Optimism, Base, Polygon, Scroll.
Full review of your contracts at a frozen commit: logic flaws, economic/accounting bugs, access control, oracle and bridge risk — with proof-of-concept where it matters.
Targeted review of changes since your last audit — ideal before an upgrade or new module ships.
Foundry invariant harnesses that state what must always hold (solvency, no-free-profit, share-price monotonicity) and fuzz to break them — the class of bug that actually drains funds.
After launch, ODIN watches for risky on-chain activity and newly deployed components so issues surface early.
Transparent, fixed-scope, fast.
Free scoping (24h). Send the repo/docs, a commit hash and rough LoC. You get a written scope, timeline and fixed quote — no commitment.
Review. Automated pass (static analysis + invariant fuzzing) to map the surface, then manual deep-dive on the money paths and economic logic.
Report. Findings by severity with impact, proof-of-concept, and concrete fixes.
Fix review. I re-check your remediations against the original findings, included in the engagement.
Why automated tooling + manual review beats either alone.
Slither/Mythril static analysis and continuous scanning cover the whole surface fast, so manual time goes to the bugs that matter.
Fork-mode invariant fuzzing targets the high-payout classes — rounding/precision, share inflation, solvency — against real on-chain state.
Every candidate is validated by hand: is it exploitable by an unprivileged user? Is there real loss? That gate is what makes a report worth reading.
Fixed-scope, quoted per engagement. Often eligible for ecosystem audit subsidies.
| Scope | Lines of code | Typical fee | Timeline |
|---|---|---|---|
| Small contract | < 500 | $5k – $8k | 3–5 days |
| Medium protocol | 500 – 2,000 | $10k – $20k | 1–2 weeks |
| Large protocol | 2,000 – 5,000 | $20k – $40k | 2–3 weeks |
| Complex system | 5,000+ | from $40k | 3–4 weeks |
Send your repo or docs, a commit hash and rough LoC — quote back within 24 hours.
Callum Fitzgerald · Independent EVM security researcher · United Kingdom