Published with client approval
Evidence from real security engagements: what Firepan reviewed, which findings survived client calibration, and what changed before publication. Each case study links to the corresponding technical report.
Firepan's continuous review of Curve's twocrypto-ng AMM independently surfaced and re-verified a high-severity donation-protection soundness finding (F-7) resolved before redeployment, alongside resolved governance and quote-path findings.
Firepan's private-repo review of VIA Labs' EVM v1 cross-chain messaging gateway surfaced two confirmed auth-bypass primitives in _validateMessage, both acknowledged by the VIA Labs team with inline fixes proposed in the same review pass.
Yield Basis Fee Distributor cleared a five-round Firepan audit with no high-severity findings before mainnet deployment.
Firepan's invariant-driven review found and reproduced a live reward-accounting flaw in Stake DAO's lending wrappers; Stake DAO remediated every affected market before publication.