Pioneers of AVSS and quantitative security, and founding team of GEEKCON
DARKNAVY, headquartered in Singapore and Shanghai, is an independent cybersecurity research and services organization. We are pioneers in AVSS (Adversarial Vulnerability Scoring System) and quantitative security, as well as the founding team behind the international hacking competition GEEKCON.
Founded upon the legacy of KeenTeam, established in 2011 and globally recognized as a multiple world-record holder and international hacking competition champion, DARKNAVY inherits over a decade of cutting-edge security research experience across operating systems, chipsets, AI, mobile, IoT, and Web3. Guided by the founding team’s unique vision, we have built a collaborative research team dedicated to solving the most critical security challenges faced by our clients.
Since its official launch in 2023, DARKNAVY has proudly delivered advanced security research services to leading enterprises across multiple industries. Our signed clients include Huawei, Alipay, DJI, WeChat, ByteDance, Xiaomi, vivo, Zeekr, OPPO, Huazhu, and others. We provide in-depth product and system security assessments and make cybersecurity one of their core competitive strengths.
Our research outcomes and technical insights have contributed significantly to the safer and more sustainable development of the cybersecurity industry. We see ourselves not only as thinkers, but as leaders driving the field forward.
For security collaboration or technical inquiries, please contact us at coop@darknavy.com . We look forward to hearing your needs and delivering the most valuable, competitive, and deeply technical cybersecurity services. Thank you for your trust and support.
Talk presented at Qualcomm Product Security Summit (QPSS) 2026. The talk revisits a neglected attack surface in Android’s biometric authentication flow and explores how weaknesses around biometric AuthToken handling can …
When a phone starts “taking action” on its own, it’s no longer just answering questions like how to get a cheaper takeout—it can actually open apps, compare prices, and place orders. Control shifts from the user’s …
On blockchains, whoever controls the private key to an address controls the funds in the corresponding account. In October 2025, the U.S. government announced the seizure of 127,000 BTC from Prince Group. On‑chain …
The history of humanity’s domestication of wolves has spanned forty thousand years – we used firelight and patience to soften the wildness in their eyes, …
Both the Attackers and Victims Made Critical Mistakes On February 21, 2025, the cryptocurrency exchange Bybit experienced the most significant financial loss …
In the era of mobile internet, user traffic is the lifeline of manufacturers. In this battle for traffic, smartphone manufacturers hold the most overwhelming …
In the field of cybersecurity, vulnerability disclosure has long been regarded as a crucial step in safeguarding users. However, in practice, this process is …
Smart contract auditing, blockchain client auditing, and on-chain exploit investigation by DARKNAVY
DFS-based multi-agent Solidity audit with adversarial validation
7-stage orchestrated audit for blockchain node codebases (Go, Rust, C/C++)
Multi-agent pipeline for on-chain attack analysis with Analyst-Validator debate loop