Sorry to say,
Lazarus Group might be the hardest working security researchers in Web3.
Other security auditors charge $70K+ to find vulnerabilities.
Lazarus finds them for free by compromising the people, keys, multisigs and interfaces around the contracts.
Their Resume:
β’ Bybit: $1.5B
β’ Drift: $285M
β’ Bitget: $350M
β’ WazirX: $235M
β’ KelpDAO: $292M
β’ Ronin Bridge: $625M
β’ DMM Bitcoin: $308M
And many more.