We don't flag vulnerabilities. We prove them.

Every finding ships a signed, independently replayable exploit receipt — the exploit executed on a real EVM, moving real value. No proof, no finding.

Other checkers guess. We fork the chain and attempt the sell — execution is the verdict. Ethereum & BNB Chain.

138execution-verified vuln classes

0 / 351proven false-positives on audited code

216proven exploit cases

2026-07-12last updated

Proof Wall

Each row is a vulnerability class we prove by execution — a vulnerable contract broken, a patched control that resists. Receipts are signed and independently verifiable.

Class	Behind	Verdict	Receipt
loading…

Full wall →

How to read our claims. We prove the vulnerability class/mechanism behind each incident, reproduced on a real EVM with a signed receipt. Where we state a dollar figure, it is the public loss attributed to that class — not a claim that we replayed that exact transaction. When a finding is a full fork-replay of a specific on-chain incident, the receipt says so explicitly.

Why proof beats opinion

Static analyzers and LLM auditors answer "is there a check here?" They miss the class that costs the most: a check that exists but is wrong. Our verdict is execution truth — the exploit either moves value on a real EVM, or it is not a finding. A signed receipt lets anyone confirm the result without trusting us. Read the Verdict Standard → (no model, prover internals, or detection method disclosed — trade secrets)