Vulnerability research on live protocols.

Alongside its pay-per-call data services, Arysphere does security research where the money already is: Immunefi bounty programs, where rewards are committed before research begins. We find vulnerabilities and report them through the program — every finding backed by a reproducible proof-of-concept, because that is what the programs require and what we require of ourselves.

Current focus

Enzyme Onyx on Immunefi — a live program with bounties up to $200,000 for critical findings, no KYC required, paid in USDC. We do not discuss in-progress research publicly.

How we work

1. Audit-gap first. We diff the current code against its last audit and hunt what the auditors missed, and what has changed since.
2. Category passes. Systematic passes by vulnerability class, each ending in a candidate or a written dead end — never in a vague "looked at it."
3. Follow the money. Economic analysis of where value concentrates and where incentives break.
4. Composition. How the protocol behaves when combined with the protocols around it.
5. Fresh code first. The newest diffs get attention before the oldest code.
6. Proof, or it is not a finding. Every candidate gets a Foundry proof-of-concept on a local fork. Theory without a PoC is not submitted.
7. Adversarial review. Every candidate is red-teamed before submission — findings ship only if they survive argument against them.

For protocols and programs

If you run a protocol with a live bounty program and want experienced eyes on it, reach us at ari@arysphere.com. Findings are submitted through Immunefi and paid by the program on acceptance.

Arysphere's other work — token verdicts, transaction decoding and chain reads, priced per call — is at Services.