VulSight

VulSight is a smart contract security firm centred on adversarial audits, combining static analysis, manual review, formal verification and economic attack modelling, with test cases written against the target protocol's actual business logic instead of a template report. The team sits near the top of Cantina's public leaderboard and placed in audit contests within the Move language ecosystem.

Its disclosed findings include a consensus-layer bug in Geth, the widely used Ethereum execution client, tracked as CVE-2026-26314 and handled through responsible disclosure. In July 2026 VulSight completed an audit of Elios smart-account modules, covering an ERC-7579 validator and a withdrawal cooldown hook, with scope and conclusions published by both sides.