SBSecurity

Team of experts doing security audits right. 🤝

Trusted by @origami_fi, @MontraXYZ, @ClutchMarkets & @ponsdotfamily.

[SBSecurity @SBSecurity_]

$2.23M left Arcus through a self-transfer.

A new account inflated its balance, then withdrew against it.

Self-transfers in subaccounts are rarely harmless:
- from == to
- same owner, different subaccount IDs
- partial amounts and rounding
- transfer then withdraw in one flow

One invariant to always enforce: total balances before == total after.

[SBSecurity @SBSecurity_]

$2.23M left Arcus through a self-transfer.

A new account inflated its balance, then withdrew against it.

Self-transfers in subaccounts are rarely harmless:
- from == to
- same owner, different subaccount IDs
- partial amounts and rounding
- transfer then withdraw in one flow

One invariant to always enforce: total balances before == total after.

[Arcus @arcus_xyz]

On Nov 9, Arcus identified and fixed a bug which permitted an unauthorized withdrawal.

No user funds were affected and Arcus has covered the shortfall from its company treasury. Trading and withdrawals are operating normally.

Full incident report:
https://t.co/Rtv0XqVBhq

[SBSecurity @SBSecurity_]

Officially surpassed 1,600 vulnerabilities found.

All with a team of 15 vetted senior researchers.

Grateful to every project that trusted us with their code 🫡

[SBSecurity @SBSecurity_]

Officially surpassed 1,600 vulnerabilities found.

All with a team of 15 vetted senior researchers.

Grateful to every project that trusted us with their code 🫡

[SBSecurity @SBSecurity_]

@HoodLockRH 🫡

[SBSecurity @SBSecurity_]

@MontraXYZ gMontra 🤝

[SBSecurity @SBSecurity_]

8 out of 10 teams we've worked with come back for more audits.

That's the metric we care about most.

Thank you all. 🤝

[SBSecurity @SBSecurity_]

Launchpads will be a big play.

It's not copy-paste anymore. Everyone's chasing the 1% improvement, and that's where the bugs live.

We've secured 7 of them, processing $17B+ in volume, and disclosed live bugs in 2 others.

We know how to take care of yours 🫡

[SBSecurity @SBSecurity_]

Launchpads will be a big play.

It's not copy-paste anymore. Everyone's chasing the 1% improvement, and that's where the bugs live.

We've secured 7 of them, processing $17B+ in volume, and disclosed live bugs in 2 others.

We know how to take care of yours 🫡

[SBSecurity @SBSecurity_]

We started 2026 with a goal: 100 high-quality audits.

53 done. 2 months left, 47 to go.

It was ambitious. Still a big year for a team our size.

We'll push for it anyway, no matter how impossible it looks.

Every audit gets everything we have. 🫡

[SBSecurity @SBSecurity_]

We started 2026 with a goal: 100 high-quality audits.

53 done. 2 months left, 47 to go.

It was ambitious. Still a big year for a team our size.

We'll push for it anyway, no matter how impossible it looks.

Every audit gets everything we have. 🫡

[SBSecurity @SBSecurity_]

@folio_market gfolio

[SBSecurity @SBSecurity_]

@adeolRxxxx 😉

[SBSecurity @SBSecurity_]

One underrated trait in a security firm: starting an engagement in under 12 hours.

We can. Without cutting corners on quality.

Your deadline is part of the job. We plan around it, properly. 🫡

[SBSecurity @SBSecurity_]

One underrated trait in a security firm: starting an engagement in under 12 hours.

We can. Without cutting corners on quality.

Your deadline is part of the job. We plan around it, properly. 🫡

[SBSecurity @SBSecurity_]

October wrap-up:

- 12 audits, our best month yet.
- 54 findings: 10 High, 44 Medium.
- 90% of clients came back or were referred.

Every project had already been through at least one AI audit before us.

Smart contract security isn't solved. Not even close. 🫡

[SBSecurity @SBSecurity_]

@MontraXYZ @Uniswap 🦋🛡️

[SBSecurity @SBSecurity_]

October wrap-up:

- 12 audits, our best month yet.
- 54 findings: 10 High, 44 Medium.
- 90% of clients came back or were referred.

Every project had already been through at least one AI audit before us.

Smart contract security isn't solved. Not even close. 🫡

[SBSecurity @SBSecurity_]

SBSecurity 🤝 @MontraXYZ

Audit kicked off.

Montra is the place to launch and grow tokens on @Enter_Elysium.

Our senior team is on it.

Looking forward to yet another strong audit with the team behind it. 🫡

[SBSecurity @SBSecurity_]

@MontraXYZ @Enter_Elysium 🫡🛡️

[SBSecurity @SBSecurity_]

SBSecurity 🤝 @MontraXYZ

Audit kicked off.

Montra is the place to launch and grow tokens on @Enter_Elysium.

Our senior team is on it.

Looking forward to yet another strong audit with the team behind it. 🫡