Oak Security

Oak Security is a security firm centred on smart contract and protocol audits, registered in Munich, covering EVM, Solana, Cosmos CosmWasm, Polkadot Substrate and ink!, Stellar Soroban, plus Cairo and Move contracts, and extending to consensus protocols, light clients, virtual machines, zero-knowledge circuits and bridges. Clients are protocol teams and chain foundations needing independent code review before launch, and it addresses the scarcity of auditors fluent across languages and virtual machines.

Audits use a blinded process in which several researchers review the same codebase independently and in parallel before findings are cross-checked, reducing single-reviewer misses; deliverables include threat modelling, itemised findings and fix verification. The firm publishes the TRACE threat-modelling method under an open licence and maintains a Web3 security dataset counting audit findings against realised exploit losses to calibrate review priorities. Its public archive exceeds 200 engagements, covering Osmosis, Astroport, Neutron, Babylon Bitcoin staking and dYdX v4, with a dedicated IBC track examining light-client verification, channel lifecycle correctness and relayer trust boundaries.