PUBLIC SECURITY ASSESSMENTS BY XORS SOFTWARE — SLOPLESS AUTOMATED ANALYSIS COMBINED WITH MANUAL REVIEW AND FOUNDRY PROOF-OF-CONCEPT EXPLOITS. PUBLISHED WITH CLIENT CONSENT.
LAUNCHPAD CONTRACTS — o1.exchange
ABSTRACT
Security assessment of the o1-launch launchpad contracts — LaunchHook and LaunchpadFactory (Solidity 0.8.26): initializer guards, fee distribution and treasury controls, launch governance, token-metadata roles, and Uniswap v4 hook tick and anti-snipe surfaces.
METHODOLOGY — Slopless automated analysis + manual review + Foundry proof-of-concept exploits.
$O CROSS-CHAIN BRIDGE (OFT ADAPTER) — o1.exchange
ABSTRACT
Security assessment of the $O cross-chain bridge — the LayerZero OFT Adapter (lockbox) on Base and the BSC↔Base mint/release solvency path.
METHODOLOGY — Slopless automated analysis + manual review + Foundry proof-of-concept exploits.
$O TOKEN CONTRACT — o1.exchange
ABSTRACT
Security assessment of the $O token contract: airdrop pool, vesting pool, stake pool, factory, and timelock surfaces.
METHODOLOGY — Slopless automated analysis + manual review + Foundry proof-of-concept exploits.
SMART DCA SOLANA PROGRAM — dcamarkets.com
ABSTRACT
Security assessment of the Smart DCA Solana program's configuration and key-management surfaces — identified a service access key committed directly to a project file, exposing it to anyone with repository access.
METHODOLOGY — Slopless automated analysis + manual review.
DCA CRANK SERVICE — dcamarkets.com
ABSTRACT
Security assessment of the DCA crank service — connection resilience for the automated execution cycle, and configuration hygiene across test and production environments.
METHODOLOGY — Slopless automated analysis + manual review.
DCA DAPP FRONTEND — dcamarkets.com
ABSTRACT
Security assessment of the DCA dApp frontend's documentation and configuration surfaces, including credential hygiene across setup guides.
METHODOLOGY — Slopless automated analysis + manual review.