Early rate$2,400 of senior audit time for $500. Early members keep the rate as it climbs.$2,400 of senior audit time for $500See how →
Public audits · curated

Audits.

Public engagements delivered as Zealynx (founded 2024) and as contractor for partner firms. Click into any report for the full write-up; click into a finding for the citable artifact.

49 audits total · 35 by Zealynx · 13 by Carlos (Bloqarl) as contractor (Cyfrin · Pashov Audit Group · Sherlock · Shieldify · Codespect · Composable Security)

Reports published
49since 2023
Findings identified
522across 49
Critical + High
93all remediated

Findings by severity

522 total
522FINDINGS

Reports by chain

49 total
49REPORTS

Reports by protocol type

49 total
49REPORTS
49 of 49 reports
PlakxioBase · Solidity
2026-09-18

Plakxio Badge Marketplace: Full Audit

NFT

Full audit of Plakxio's badge marketplace contracts and deployment scripts on Base, following the Founder Security Sprint. Report in preparation.

Awaiting publication
SolidityZealynx2026-09-18
YieldcoinArbitrum · Solidity
2026-09-15

Yieldcoin v2 Crosschain Vaults

Vaults / Yield

Crosschain epoch-batched stablecoin yield vaults for Contract Level, settled over Chainlink CCIP and CRE. 11 issues identified (1 Critical, 1 High); 8 fixed, 2 mitigated, 1 accepted.

1C1H6M3L0I
SolidityZealynx2026-09-15
RainArbitrum · Solidity
2026-09-11

USDR (Rain Dollar)

Stablecoins

Multi-collateral over-collateralized stablecoin on Arbitrum One, adapted from MakerDAO MCD. Three-week review via Composable Security, in progress.

Awaiting publication
Solidityvia Composable Security2026-09-11
RainArbitrum · Solidity
2026-08-27

Rain Vaults

Vaults / Yield

Non-custodial strategy vaults for Rain prediction markets on Arbitrum One, via Composable Security. Report in preparation.

Awaiting publication
Solidityvia Composable Security2026-08-27
HoldamPolygon · Solidity
2026-08-04

Hold Escrow and Arbitration Protocol

Payments / Escrow

Non-custodial escrow and juror-arbitration protocol on Polygon, settled in cNGN. 32 issues identified (1 Critical, 12 High); 29 fixed, 2 mitigated, 1 open.

1C12H10M7L2I
SolidityZealynx2026-08-04
PearHyperliquid · Typescript
2026-08-03

Pear Vault Service

Vaults / Yield

Backend security review of Pear's Privy-backed vault and agent-wallet signing service for Hyperliquid, via Shieldify. Report in preparation.

Awaiting publication
Typescriptvia Shieldify2026-08-03
IdeaSafePolygon · Solidity
2026-06-02

IdeaSafe ipVault Registry

NFT

Custodial soulbound NFT registry on Polygon for IP-evidence anchoring. Report withheld under client NDA pending publication.

Private report
SolidityZealynx2026-06-02
DripsterOffchain · Typescript
2026-04-29

Dripster Backend Pentesting

Prediction Markets

Backend pentest of the Dripster NestJS API, covering auth, business logic, rate limiting, and Polymarket integration. 21 issues identified (1 High, 4 Medium); 13 fixed during the engagement.

0C1H4M11L5I
TypescriptZealynx2026-04-29
DripsterPolygon · Solidity
2026-04-28

Dripster Leveraged Prediction Vault

Prediction Markets

Custodial USDC vault opening leveraged Polymarket positions on Polygon. 17 issues identified (2 Medium, no Critical/High); 9 fixed, 8 acknowledged.

0C0H2M7L8I
SolidityZealynx2026-04-28
Yada CoinBNB · Solidity
2026-03-05

YadaCoin Bridge Infrastructure

Bridges / Cross-chain

BNB ↔ YadaCoin cross-chain bridge with KERI key registry and ERC-2612 permits. 28 issues identified (3 Critical, 2 High); all fixed before mainnet.

3C2H4M16L3I
SolidityZealynx2026-03-05
Fair LabsOffchain · Typescript
2026-01-27

Fair Casino Core Pentest

GameFi

TypeScript backend and provably-fair pentest for Fair Casino. 13 issues identified (4 High, 6 Medium, 3 Low), all fixed and verified.

0C4H6M3L0I
TypescriptZealynx2026-01-27
How we audit. Multi-layer methodology combining manual review, custom Foundry invariants, mutation testing, stateful fuzzing, and symbolic execution. Each layer calibrated against a seeded bug before its passing result is trusted.
Read methodology →
Need this level of review for your protocol? Run a free Krait audit readiness check first, then send the repo and launch context for a private audit scope, or check whether a grant can subsidize the engagement before you commit budget.
ZEALYNX SECURITY · public audit catalogue
49 reports · last published 2026-09-18