SUI AND APTOS

Securing Sui since pre-mainnet. Your protocol is next.

We’ve partnered with Sui Foundation and Mysten Labs since pre-mainnet and with Aptos since testnet, and formally verified the Aptos standard library with its core team.

$36.82B+On-chain TVL secured

$1.00B+Vulnerabilities patched

120+Projects audited

Public audits Request a quote

Trusted by teams building the next generation of crypto

Securing Sui since pre-mainnetSecuring Aptos since testnetFormally verified the Aptos stdlib

HOW WE AUDIT

Five steps, no surprises

01

Talk it through

A first conversation about what you’re building, when you need it secured and what worries you most.
02

Look at the code

We sign an MNDA and read the in-scope repositories before committing to anything.
03

Agree the scope

You get a quote sized to duration, likely vulnerabilities and overall complexity. No guesswork.
04

Findings as they land

Once we kick off, issues reach your team as we find them, not weeks later.
05

Report and fixes

A final report with every finding and our suggestions for fixing it.

Get secured now

CLIENTS

Trusted across Move ecosystems

“Strong security builds trust across the Sui network. That’s why we partnered with OtterSec, a reputable, fast, and community-oriented company that ensures trust by engaging with both our online and live events.”

Brian H.Sui Foundation

“Working with OtterSec on critical audits has been a great experience. It’s clear OtterSec cares deeply about customer satisfaction and the security of our protocols. Their communication and flexibility was refreshing.”

John WoodsAlgorand

“Their website says protecting Blockchain ideas, but their command of JavaScript is impressive. If you've got something that you think would be "too hard for pentesters to understand" - these folks will surprise you. They're not your average pentester.”

Zbigniew TenerowiczMetaMask

FAQ

Common questions

Which languages do you cover?

Solidity, Vyper, Solana Rust, CosmWasm, Go, Aptos Move, Sui Move, JavaScript, Circom, Halo 2 and more, plus Web2 frontends and backends in JavaScript, Rust and Python.

How does an audit start?

With an initial discussion of your goals, timeline and security needs to see whether we’re a fit. We then send an MNDA and review the repositories in scope.

What happens after the report?

We’re not done when your report ships. We stay close with our clients, support their communities and build long-term relationships around stronger security.

Is it only manual review?

No. Different systems call for different techniques. Pentesting, formal verification and fuzzing are core disciplines, and we pick the mix that fits yours.

WHAT WE AUDIT

Built on Move experience

Chain-level work on Sui and Aptos, applied to the protocols building on them.

Sui

With Sui Foundation and Mysten Labs since pre-mainnet: the validator client, the Sui framework, ZK Login, the native bridge and the token standard.

Aptos

Securing Aptos since testnet, and partners across the ecosystem including Thala, Econia, Pontem, Tortuga and PancakeSwap.

Formal verification

Our own tooling and a novel verification framework for Solana. We also worked with the Aptos core team to formally verify their standard library.

Fuzzing

A core discipline: differential compiler fuzzers for Vyper, transactional fuzzers for Solana validators, rBPF JIT fuzzers and Move VM bytecode fuzzers.

MOVE

Secure your Move protocol with auditors who know Sui and Aptos from the inside

From Scallop, Navi and Cetus to Thala and Econia, we know these ecosystems. Tell us about yours.

Get secured now