Yieldcoin v2 Crosschain Vaults
Vaults / YieldCrosschain epoch-batched stablecoin yield vaults for Contract Level. Zealynx Audit Grants, Season 1. Details in preparation.
SolidityZealynx2026-08-17
Public audits · curated
Audits.
Public engagements delivered as Zealynx (founded 2023) and as contractor for partner firms. Click into any report for the full write-up; click into a finding for the citable artifact.
45 audits total · 33 by Zealynx · 11 by Carlos (Bloqarl) as contractor (Cyfrin · Pashov Audit Group · Sherlock · Shieldify · Codespect · Composable Security)
Findings by severity
463 totalReports by chain
45 totalReports by protocol type
45 total45 of 45 reports
Hold Escrow and Arbitration Protocol
Payments / EscrowNon-custodial escrow and juror-arbitration protocol on Polygon, settled in cNGN. Report in preparation while the client completes remediation.
SolidityZealynx2026-08-04
Pear Vault Service
Vaults / YieldBackend security review of Pear's Privy-backed vault and agent-wallet signing service for Hyperliquid, via Shieldify. Report in preparation.
Typescriptvia Shieldify2026-08-03
IdeaSafe ipVault Registry
NFTCustodial soulbound NFT registry on Polygon for IP-evidence anchoring. Report withheld under client NDA pending publication.
SolidityZealynx2026-06-02
Dripster Backend Pentesting
Prediction MarketsBackend pentest of the Dripster NestJS API, covering auth, business logic, rate limiting, and Polymarket integration. 21 issues identified (1 High, 4 Medium); 13 fixed during the engagement.
TypescriptZealynx2026-04-29
Dripster Leveraged Prediction Vault
Prediction MarketsCustodial USDC vault opening leveraged Polymarket positions on Polygon. 17 issues identified (2 Medium, no Critical/High); 9 fixed, 8 acknowledged.
SolidityZealynx2026-04-28
YadaCoin Bridge Infrastructure
Bridges / Cross-chainBNB ↔ YadaCoin cross-chain bridge with KERI key registry and ERC-2612 permits. 28 issues identified (3 Critical, 2 High); all fixed before mainnet.
SolidityZealynx2026-03-05
Fair Casino Core Pentest
GameFiTypeScript backend and provably-fair pentest for Fair Casino. 13 issues identified (4 High, 6 Medium, 3 Low), all fixed and verified.
TypescriptZealynx2026-01-27
Fair Casino Swap Pentest
GameFiFollow-on pentest of the Fair Casino SOL→FAIR swap flow. 2 High issues identified in the WebSocket confirmation layer, both fixed and verified.
TypescriptZealynx2026-01-27
Fair Casino Solana Vault Program
Vaults / YieldSolana vault program with PDA token custody and Ed25519 instruction introspection. 5 issues identified (1 High, 1 Medium, 3 Low), all fixed and verified.
RustZealynx2026-01-19
Novaswap Blackbox Pentest
DEX / AMMBlackbox pentest of the Novaswap frontend and Mynth API endpoints. 9 issues identified (1 Medium, 4 Low, 4 Informational), all fixed and verified.
TypescriptZealynx2026-01-17
Spicenet TypeScript Audit
Bridges / Cross-chainTypeScript audit via Pashov Audit Group. Report not public.
Typescriptvia Pashov Audit Group2026-01-15
How we audit. Multi-layer methodology combining manual review, custom Foundry invariants, mutation testing, stateful fuzzing, and symbolic execution. Each layer calibrated against a seeded bug before its passing result is trusted.
Read methodology →Need this level of review for your protocol? Run a free Krait audit readiness check first, then send the repo and launch context for a private audit scope, or check whether a grant can subsidize the engagement before you commit budget.