OtterSec

osec.io

OtterSec provides security audits and research for blockchain software and smart contracts. Services span manual code review, threat modeling, dynamic testing, and exploit reproduction, producing findings with remediation guidance. Expertise covers DeFi protocols, cross-chain bridges, wallets, exchanges, and client-side components such as authentication and OAuth flows. A public verification API at verify.osec.io enables verification of repository metadata for greater transparency. The team publishes technical write-ups on vulnerabilities, Solidity compilation pipelines, and the Linux kernel patch gap, and maintains open-source resources. Engagements address risks across multiple chains and support teams before deployment and during ongoing updates.