Complete Lifecycle Security For Onchain Systems. Leading teams choose Sherlock for private audits, AI-native review, bug bounties, and institutional security.
- Tweets 7,222
- Following 1,897
- Followers 28,757
- Likes 9,186
Pinned Tweet
Today, we are proud to introduce Sherlock Audit Engine.
Audit Engine brings the strongest available AI security approaches into one coordinated review.
We’ve spent months building it in private and testing it against high-stakes code.
A new era of AI-native security review starts now.
Audit Engine is now live.
81
46
327
57,975
We’re excited to welcome @_AurelienDo as Sherlock’s new CISO!
He brings 10+ years of security leadership, most recently in DeFi and institutional finance at Morpho and Société Générale–Forge.
At Sherlock, he’ll lead and build our operational security and incident response services for protocols and financial institutions.
4
4
37
2,015
Scope: Kamino Liquidity, KLend, KFarms, KVault, Scope + official web apps.
Onchain findings need a reproducible local validator or LiteSVM PoC. No live exploit testing. KYC required for payment.
Read the full rules and submit through Sherlock.
→ audits.sherlock.xyz/bug-boun…
1
8
557
Sherlock retweeted
Sherlock is powering the onchain economy.
In 2026, our private audits have helped secure ~$24.6B in onchain TVL - from @babylonlabs_io Bitcoin vaults to @centrifuge tokenized assets and @MeteoraAG liquidity infrastructure.
More to come.
3
10
27
2,402
Sherlock retweeted
4/5
We're also introducing Pontifex, our in-house bridge connecting KSKD on Igra to Robinhood Chain.
Pontifex is now LIVE at kaskad.live, allowing KSKD holders on Igra to bridge their tokens directly to RH, with zero bridge fees.
The bridge has undergone a collaborative security audit with @sherlockdefi.
Trading of kaskad:native on @MEXC remains open as usual, so holders can continue trading there or move their tokens to RH through Pontifex.
We're happy to bring KSKD to a new ecosystem, with more ways for holders to trade, provide liquidity, and soon use it on Kaskad.
Thanks to the Fables team for helping make this happen!
Links and repos below 👇
3
2
14
601
Security remains a key priority for IOTA.
Our bug bounty program is now live on @sherlockdefi, inviting everyone to help identify vulnerabilities and strengthen the network.
Check out the details below.
The @iota bug bounty is now live on Sherlock!
IOTA is a Move-based Layer 1 blockchain, supporting applications across digital identity, tokenization and trade.
The program covers selected source files in IOTA’s monorepo and companion SDK.
Scope and reward details below ↓
8
49
221
9,902
The @iota bug bounty is now live on Sherlock!
IOTA is a Move-based Layer 1 blockchain, supporting applications across digital identity, tokenization and trade.
The program covers selected source files in IOTA’s monorepo and companion SDK.
Scope and reward details below ↓
5
33
114
11,605
Rewards:
• Critical: $15,000–$25,000
• High: $5,000–$15,000
Review the Scope tab for the covered repositories and files, check the severity definitions, then submit your report through Sherlock 👇
audits.sherlock.xyz/bug-boun…
2
4
18
1,037
One of the biggest questions we're getting about Sherlock Audit Engine:
Does Sherlock have access to gated AI models from the world's leading AI labs?
The answer is yes.
We've been securing access to restricted frontier models and pursuing the approvals needed for client use.
4
3
31
3,277
Leading teams are increasingly choosing AI-only Audit Engine engagements for faster, more affordable, high-intensity security reviews.
Audit Engine combines specialized Web3 AI auditors and frontier base LLMs into custom rosters for each codebase audit.
Learn more: sherlock.xyz/solutions/audit…
1
3
617
DLMM Pro opens up a world of possibilities for our retail market makers.
But with every new liquidity primitive, security continues to be our utmost priority.
Appreciate the work @sherlockdefi has done with us so far!
With $32.1B traded in H1 2026, @MeteoraAG sits at the heart of Solana’s trading infrastructure.
Across 2026, our teams partnered together for 3 collaborative audits.
The focus: trading execution, staking controls and new AMM architecture.
7
9
56
1,891
With $32.1B traded in H1 2026, @MeteoraAG sits at the heart of Solana’s trading infrastructure.
Across 2026, our teams partnered together for 3 collaborative audits.
The focus: trading execution, staking controls and new AMM architecture.
6
7
35
5,291
The audits followed Meteora’s roadmap:
• DLMM: swaps, native limit orders / fee accounting
• Referral Staking: withdrawals, cooldowns / penalties
• DLMM Pro: new AMM architecture / NFT positions
Returning Sherlock researchers worked across releases: @bin2chen & @carrotsmuggler
1
9
931
The DLMM review surfaced 17 findings: 6 Medium and 11 Low/Informational.
Meteora aligned swap estimates with execution and tightened pool-state controls, improving reliability for traders and LPs.
Read the full story 👇 sherlock.xyz/case-studies/me…
1
5
391
The @aeroxyz Audit Engine engagement is complete!
Security researchers and AI auditors examined Aero's MetaDEX cross-chain and reward systems and Slipstream's concentrated-liquidity pools.
Our first flagship public engagement was a success. Let's look at the outcomes. ↓
25
20
180
11,803
Human researchers and AI auditors each reported findings the other group didn't.
Neither group accounted for the full set on its own. The engagement's results reflect the contributions of both.
2
8
886