Web3 Security

Smart contract auditing, blockchain client auditing, and on-chain exploit investigation by DARKNAVY

Security Capabilities

Contract Auditor

DFS-based multi-agent Solidity audit with adversarial validation

Client Auditor

Staged blockchain client audit workflow with per-finding files and verification gates

Go / Rust / C++

Exploit Investigator

Multi-agent pipeline for on-chain attack analysis with Analyst-Validator debate loop

Exploit Analysis Reports

New Market Trading SquidRouterModule Forged Express Payload Safe Swap Exploit

2026-05-25Ethereum0.25361701 WBTC, 0.293599251 wTAO, and 0.022100612795638534 WETHAccess Control

ElevateFi Staking Vault Spot-Price Oracle Manipulation

2026-05-19Polygon~$25,000 (6,256.5334 EFI realized)Oracle Manipulation

Ethereum Bridge BTC Import/Proof Path Trace-Attributed Unauthorized Payout

2026-05-17Ethereum≥$147.7KLogic Error

SEA Settlement Adapter Round Redemption Inflation

2026-05-17Arbitrum$13.9KLogic Error / Flash Loan Abuse

WrappedADS Privileged `wrapTo()` Mint Through the Authorized Minter Allowance Path

2026-05-15Ethereum1.00M wADSAccess Control

WOJAK Uniswap V2 Public-Mempool Sandwich on Ethereum

2026-05-14Ethereum~$201.97Price Manipulation

MAIL token drain via Moolah flash-loan callback reentrancy

2026-05-13BNB Chain54.6K USDTReentrancy

BoostHook Leveraged Long Drain via Spot-Priced `openLong()` and Capped Same-Block Liquidations

2026-05-12Ethereum20.9329 WETHPrice Manipulation

Eonx.ai IEXCBP reward drain via Pancake spot-price payout manipulation

2026-05-12BNB Chain97.4K USDTPrice Manipulation

SQ Token Staking Drain via Hardcoded Owner Backdoor

2026-05-12BNB Chain~$346.1KAccess Control