The Composable Security 🛡️⛓️ is a small team with a holistic approach that goes beyond the code. A combination of expertize in Solidity smart contract security and experience gained through 6+ years securing global fintechs and Polish banks help comprehensively take care of DApp security. Learn more about us.

About our approach you can read here: https://composable-security.com/blog/how-we-do-smart-contract-audit/

• Creators of the first security standard for smart contracts Smart Contract Security Verification Standard.
• Our research was supported by Uniswap Foundation grant.
• Our articles are valued by projects like Morpho Blue, LayerZero.
• Speakers & mentors at EthCC, ETHGlobal London, Web3 Security Conference, EthereumZurich and more.
• Creators of the first Security Guide for DApps (100+ pages of free knowledge).
• First place during War Room Games Paris @ EthCC 2023 organized by Yearn, yAudit, and Tenderly.
• In the previous company, we developed an interactive video program for developers that trained 1,000+ developers.

• Smart contract security reviews/audits
• Threat modeling
• Threat analysis
• Security consultation

Let us help you info@composable-security.com

Companies that have allowed us to speak about our work can be found here:

Many more remain confidential.

• Outline Investment - The primary goal was to develop a systematic approach for evaluating the risks associated with stablecoin pools, which Outline Investment was considering for potential investment opportunities.
• Gasbot V2 - The main objective was verification of the security of smart contracts and identification of threats occurring at the edge of integration with web2 components.
• Research Portfolio - The main objective was verification of the security of smart contracts and identification of threats occurring at the edge of integration with web2 components.

When the project is interesting or we have free slot, we take part in contests.

• Best ways to secure your X account
• Uniswap V4: Bad hook with broken access control
• Uniswap V4: Further research to improve hooks security
• Protect your account: SIM swap hack
• Uniswap V4: Oracle hook with malicious owner
• Uniswap V4: Liquidity Theft via Hook Fee
• Uniswap V4: Re-Initialization Leading to Funds Locked
• Threats for Uniswap V4 hooks
• How to choose the best smart contract auditing firm?
• INSIDER! Impersonating others on GitHub
• Secure integration with LayerZero
• White hack policy
• Uniswap V4 - threat modeling for secure integration
• Account Abstraction - a tale on the evolution of wallets
• The Role of Access Control in Solidity Smart Contracts
• Understanding the Tornado Cash Governance Attack
• 6 security sins of Web3 bridges
• Key threat based cross-checks
• How we do smart contract audit
• Shapella, EIP-4895, and challenges faced by staking protocols
• DeFi price oracles - all you should know about a TWAP
• WOW! ChatGPT-driven threat modeling for smart contracts
• NFT Best Practices - build safe
• Threat Modeling for Smart Contracts: Best Step-by-Step Guide
• Smart contract audit - the best tips on how to be prepared better
• BNB Bridge hack ELI5 explained and visualised

• ETHWarsaw 2022 - Security Panel
• ETHWarsaw MeetUp - Bridge Sins Presentation
• Secrets of Uniswap V4: A Deep Dive into Hooks Security
• Filecoin Dev Summit #4 - How to be secure by design and not pay millions?

• Smart Contract Security Verification Standard
• Security Guide