Oak Security

About

Oak Security is a Web3 security firm operated by Oak Security GmbH, registered in Munich, Germany. Audits are the core of its work: smart contracts, consensus algorithms, virtual machines and bridges are reviewed through a blinded process in which several security researchers work independently and simultaneously. Its listed specialisations include EVM (Solidity), Solana, Cosmos (CosmWasm), Polkadot and Substrate (ink!), Stellar (Soroban), Rust, Cairo on Starknet, Noir, ZK circuits, cryptographic primitives, light clients, liquid staking, cross-chain bridges, sequencers and off-chain infrastructure. It also sells operational security reviews, continuous audits with pull request reviews, a vCISO service, Web3-native penetration testing of wallets, browser extensions, web interfaces and backends, operational security training, security and economic advisory and technical due diligence. The firm is accredited for the Security Alliance (SEAL) operational security certification, publishes the TRACE threat modelling framework under an open licence and a State of Web3 Security report. Its public GitHub repository organises reports by technology stack, including Move on Aptos and Sui.

At a glance

• Blinded audit process with several independent researchers
• Covers EVM, Solana, CosmWasm, Substrate, Soroban and Cairo
• Sells Web3-native penetration testing and operational security reviews
• Accredited for the SEAL operational security certification
• Publishes the open TRACE threat modelling framework
• Publishes audit reports on GitHub, organised by technology

Oak Security: frequently asked questions

What services does Oak Security offer?

According to its public information, Oak Security offers: Audit and Penetration testing.

Which blockchains does Oak Security work with?

Oak Security works with Ethereum, Solana, Cosmos, Polkadot, Starknet, Aptos, and Sui.

Which smart contract languages does Oak Security use?

Oak Security works with Solidity, Rust, Cairo, Move, and Go.

Where is Oak Security based?

Oak Security is headquartered in Germany.

Is Oak Security verified on smart-contract.com?

Not yet. This listing was compiled from public information and Oak Security has not claimed it or gone through the vetting process of smart-contract.com.

How can I get a quote from Oak Security?

Describe your project once on smart-contract.com: you receive comparable quotes from vendors that match it, in the same format. Development and audit are always entrusted to two independent companies.