Early rate$2,400 of senior audit time for $500. Early members keep the rate as it climbs.$2,400 of senior audit time for $500See how →
Engagement record · attribution first

Case studies.

A report tells you what was found. A case study tells you how it was found — the system, the invariant under pressure, the reasoning that got there, and who actually did the work. Published only against evidence records.

Material engagement claims are linked to evidence records. Work delivered through a partner security firm is labelled as such, with the firm named and the exact role stated.

Audit records
45
Protocols
40since 2023
Partner firms
6

Two kinds of engagement

Never blurred

Direct Zealynx engagement

The protocol contracted Zealynx. We set the scope, ran the review, wrote the report, and own the outcome end to end.

CLIENT
The protocol, named directly
REPORT
Published by Zealynx

Delivered through a partner firm

The protocol contracted another security firm. Carlos worked the engagement as part of that firm’s team. Real proof of work — and never described as our client.

CLIENT OF
The named partner firm
CodespectComposable SecurityCyfrinPashov Audit GroupSherlockShieldify

What a case study contains

Fixed structure
01AttributionDirect or partner, firm named
02System contextWhat the code actually does
03Security challengeThe hard part of the review
04InvariantThe trust boundary under test
05ApproachHow the question was attacked
06OutcomeWhat was found, or ruled out
07RemediationThe fix, and how it was verified
08Reusable lessonWhat it teaches other teams
09Public evidenceLinks anyone can check
10Next stepWhere a buyer goes from here
1 of 1
Yada CoinBNB · YadaCoin · Solidity
Mar 2026

Direct Zealynx engagement

YadaCoin Bridge Audit: Transaction-Level Backing

Bridges / Cross-chain

A bridge audit showed why local checks were not enough to preserve transaction-level backing, token identity, and key continuity.

INVARIANT
Wrapped supply must remain fully backed, and every bridge operation must preserve the intended token identity and authorization chain.
OUTCOME
The public report marks all 28 findings as fixed.
Smart contract security review team2 evidence records

Evaluating an audit partner?

Read a finished report end to end, or send the scope and get a written plan back — not a brochure.

Browse auditsRequest an audit →