6 reports, findings and all, including the ones that were ours to fix.
Security assessment of the o1-launch launchpad contracts: LaunchHook and LaunchpadFactory (Solidity 0.8.26): initializer guards, fee distribution and treasury controls, launch governance, token-metadata roles, and Uniswap v4 hook tick and anti-snipe surfaces.
Security assessment of the $O cross-chain bridge: the LayerZero OFT Adapter (lockbox) on Base and the BSC↔Base mint/release solvency path.
Security assessment of the $O token contract: airdrop pool, vesting pool, stake pool, factory, and timelock surfaces.
Security assessment of the Smart DCA Solana program's configuration and key-management surfaces. It identified a service access key committed directly to a project file, exposing it to anyone with repository access.
Security assessment of the DCA crank service: connection resilience for the automated execution cycle, and configuration hygiene across test and production environments.
Security assessment of the DCA dApp frontend's documentation and configuration surfaces, including credential hygiene across setup guides.