Composable Security 🛡️⛓️ performs threat-based security reviews that go beyond code, across Smart Contracts, Off-chain Components and AI Integrations. We review smart contracts, custom blockchain implementations, oracles, bridges, relayers and backend services, looking at how the whole system works and where its assumptions can break.

We are actively expanding our work in AI security, researching emerging threats and reviewing AI agents, LLM-powered applications, AI workflows and development environments. Our focus includes prompt injection, unsafe tool access, data exposure and the risks that arise when AI can act on real systems.

Since 2022, we have repeatedly worked at the frontier of new technology, taking on security challenges where established practices and specialist expertise were still limited. From custom blockchain implementations to complex AI integrations and AI agents, we combine this hands-on experience with the knowledge gained during our earlier 6+ years securing global fintechs and Polish banks.

Trusted by market leaders including Mistral AI, Lido, RedStone, Tellor and Filecoin, alongside YieldNest, Othentic and many more.

Learn more about us and our work.

Read about our approach to smart contract audits.

• Creators of the Smart Contract Security Verification Standard (SCSVS).
• ETHSecurity Badge holders.
• Part of the Lido DAO GateSeal / CircuitBreaker Committee.
• Part of the first accreditation cohort of the Security Alliance's SEAL Certification program, currently undergoing accreditation.
• Our Uniswap V4 security research was supported by a Uniswap Foundation grant.
• Our articles are valued by projects such as Morpho Blue and LayerZero.
• Speakers and mentors at EthCC, ETHGlobal London, Web3 Security Conference, EthereumZurich and more.
• Creators of the Security Guide for DApps: 100+ pages of free, practical security knowledge.
• Two-time War Room Games winners: Paris at EthCC 2023 and Brussels at EthCC 2024.
• Before founding Composable Security, we developed an interactive video training program that trained 1,000+ developers.

• Smart contract audits and security reviews.
• AI security reviews: AI integrations, agents, LLM-powered applications, workflows and development environments.
• Off-chain component security reviews: oracles, bridges, relayers and backend services.
• Custom blockchain implementation security reviews.
• Threat modeling and threat analysis.
• SEAL Certification assessments: operational security reviews within the SEAL Certification program, while undergoing accreditation.
• Security consultations.

Contact us to discuss your project.

Companies that have allowed us to speak about our work can be found here:

Many more remain confidential.

• Lido – Security Review of Oracle V8 update
• Red Stone – Security review of Oracle AVS
• Neverland – Security Review of lending protocol
• Lido – Security Review of Oracle V5 update
• Othentic – Security Review of Rewards V2
• YieldNest – Security Review of Max Vaults and integration with Kernel
• Braintrust – Safe Wallet and Coinbase Integration
• Outline Investment – Case Study
• Gasbot V2 – Case Study
• Research Portfolio – Case Study
• Tapioca – Key threat based security review during the contest

We take part in security contests when a project interests us and our schedule allows.

• Your AI Coding Agent Has a Shell. Here’s How to Sandbox It.
• AI Development Setups Review and When to Use Each
• Top 7 mistakes that lead to prompt injection you must avoid
• SEAL Certification Goes Live: Composable Security in the First Accreditation Cohort
• Bypassing Cursor’s Command Allowlist with GTFOBins-Style Execution
• How to Minimize the Risk of Prompt Injection?
• Securing $29 199 014 133 – Methodology to Secure One of the Biggest Project on Ethereum
• Top 7 Findings in Off-Chain Components
• Thoughts After Auditing Multiple Off-chain Components
• ERC-8004: a practical explainer for trustless agents
• Red Flags and Green Flags of Yield Bearing Stablecoins
• Yield bearing stablecoins
• Smart Security Practices From The Best
• Security Guide
• Secure Private Key Management for DApps
• Build secure Uniswap V4 Hooks in AVS
• ERC-4626: Easy To Understand Essentials
• Web3 Founder: 5 questions that help improve security for FREE
• Best ways to secure your X account
• Uniswap V4: Bad hook with broken access control
• UniswapV4: Further research to improve hooks security
• Protect your account: SIM swap hack
• Uniswap V4: Oracle hook with malicious owner
• Uniswap V4: Liquidity Theft via Hook Fee
• Uniswap V4: Re-Initialization Leading to Funds Locked
• Threats for UniswapV4 hooks
• How to choose the best smart contract auditing firm?
• INSIDER! Impersonating others on GitHub
• Secure integration with LayerZero
• White hack policy
• Uniswap v4 – threat modeling for secure integration
• Account Abstraction – a tale on the evolution of wallets
• The Role of Access Control in Solidity Smart Contracts
• Understanding the Tornado Cash Governance Attack
• 6 security sins of Web3 bridges
• Key threat based cross-checks
• How we do smart contract audit
• Shapella, EIP-4895, and challenges faced by staking protocols
• DeFi price oracles – all you should know about a TWAP
• WOW! ChatGPT-driven threat modeling for smart contracts
• NFT Best Practices – build safe
• Threat Modeling for Smart Contracts: Best Step-by-Step Guide
• Smart contract audit – the best tips on how to be prepared better
• BNB Bridge hack ELI5 explained and visualised

• Lido – Missing pending top ups in CL pending balance calculation
• Neverland – Back-running reward notification
• Lido – Node Operator can exit and slash their validator to move withdrawal finalization border epoch
• Lido – Uncaught exception on creating ejection report
• Othentic – Invalid EigenLayer reward submission
• Othentic – Uncleared claims
• Othentic – Permanent revert on rewards submission
• YieldNest – Invalid decimals used to calculate totalAssets
• YieldNest – Inflating vault’s share rate via reentrancy
• YieldNest – Invalid amounts of asset returned by strategies
• YieldNest – Fee on withdrawal from strategy can lead to protocol’s loss
• YieldNest – Inability to unstake required assets from Kernel
• YieldNest – Rate provider for ynBNBx is missing ynClisBNBk strategy
• YieldNest – Invalid rate for vaults
• YieldNest – Vault not compliant with ERC4626 in maxWithdraw function
• YieldNest – Back-running the rewards transfer
• Renzo – Inability to deposit funds due to incorrect filling the withdraw buffer
• Renzo – users will suffer from other projects LST price fluctuations
• Renzo – Enabling stETH deposits causes miscalculations and permanent losses for users as rebase tokens are not supported
• Mento – Voting power remains despite withdrawal
• Tapioca – OFT can be impersonated through _lzCompose with multiple compose messages
• Tapioca – Nesting remote transfer messages to steal tokens
• Tapioca – Unprotected executeModule function allows to steal the tokens
• Tapioca – Unverified _srcChainSender parameter allows to impersonate the sender
• Ethena – SOFT_RESTRICTED_STAKER_ROLE can withdraw stUSDe for USDe
• Ethena – FULL_RESTRICTED stakers can bypass restriction through approvals

• ETHWarsaw 2022 – Security Panel
• ETHWarsaw MeetUp – Bridge Sins Presentation
• Secrets of Uniswap V4: A Deep Dive into Hooks Security
• Filecoin Dev Summit #4 - How to be secure by design and not pay millions?
• EthCC - The streets of Dark Forest are paved with gold

• Smart Contract Security Verification Standard
• Security Guide