WALLET SECURITY

Protect the app that holds your users’ keys

Our research found 20+ major wallets where a malicious dApp could reach core permissions through WebViews, and we’ve published deep work on MetaMask’s Snaps sandbox.

$36.82B+On-chain TVL secured
$1.00B+Vulnerabilities patched
120+Projects audited

Trusted by teams building the next generation of crypto

Public audit reportsSeal 911 membersSolana · EVM · Sui · Aptos · Cosmos · NEAR

HOW WE AUDIT

How the audit runs

  1. 01

    Initial discussion

    We discuss your goals, timeline and security needs to see whether we’re a fit.

  2. 02

    Info gathering

    We send an MNDA and look at the repositories in scope to understand the details of your project.

  3. 03

    Quote

    We deliver a quote based on expected duration, potential vulnerabilities and the overall complexity of your project.

  4. 04

    Kickoff

    The audit begins. We share findings as they emerge and ask questions as needed.

  5. 05

    Report delivery

    At completion you get a report with our findings and suggestions for fixes.

WHY OTTERSEC

What wallet teams get

  • A public report history at osec.io/audits you can check before you hire us.
  • Findings shared as they emerge, not held back for the final report.
  • Coverage across Solidity, Vyper, Solana Rust, CosmWasm, Go, Move, JavaScript, Circom and Halo 2.
  • A team that stays close after the report ships and supports your community.
  • An MNDA in place before we look at any repository in scope.
  • CLIENTS

    Wallet teams on OtterSec

    “Their website says protecting Blockchain ideas, but their command of JavaScript is impressive. If you've got something that you think would be "too hard for pentesters to understand" - these folks will surprise you. They're not your average pentester.”
    Zbigniew Tenerowicz Zbigniew TenerowiczMetaMask
    “OtterSec is one of the strongest auditors on Solana. Fast, thorough, and a joy to work with. They are the best in the business and I can’t recommend them enough.”
    Armani Ferrante Armani FerranteBackpack
    “Working with OtterSec on critical audits has been a great experience. It’s clear OtterSec cares deeply about customer satisfaction and the security of our protocols. Their communication and flexibility was refreshing.”
    John Woods John WoodsAlgorand

    WALLETS

    Have your wallet tested by researchers who study wallet attack surfaces

    White-box or black-box, based on what your project needs. Tell us where you are.

    Get in touch