# Pashov Audit Group > Smart contract security firm: 500+ audits, 5,000+ vulnerabilities found, $100B+ in total value secured. Clients include Aave, Uniswap, Ethena and LayerZero. ## About Pashov Audit Group is a smart contract security firm founded and led by Pashov. The firm audits DeFi protocols, bridges, NFT platforms and other blockchain applications. Every audit is led by dedicated senior security researchers, all security contest champions, and most engagements can start immediately. ## Key Stats - 500+ security audits completed - 5,000+ vulnerabilities discovered - $100B+ total value locked secured - 70+ expert security researchers ## Services - Smart contract security audits (Solidity, Vyper, Rust/Anchor, Move) - DeFi protocol security reviews - Cross-chain bridge audits - NFT marketplace audits - Governance system reviews - Pre-deployment security assessments - Fix verification and re-audits ## Trusted By - Aave — https://github.com/pashov/audits/blob/master/team/pdf/Aave-security-review.pdf - Uniswap — https://github.com/pashov/audits/blob/master/team/pdf/Uniswap-security-review-October.pdf - Ethena — https://github.com/pashov/audits/blob/master/team/pdf/Ethena-security-review-October.pdf - LayerZero — https://github.com/pashov/audits/blob/master/team/pdf/LayerZero-security-review-September.pdf - PumpFun — https://github.com/pashov/audits/blob/master/team/pdf/Pump-security-review_2025-04-28.pdf - Sushi — https://github.com/pashov/audits/blob/master/team/pdf/SushiSwap-security-review.pdf - 1inch — https://github.com/pashov/audits/blob/master/team/pdf/1inch-security-review.pdf - Jupiter — https://jup.ag/ - Meteora — https://meteora.ag/ - Venus — https://venus.io/ - YieldBasis — https://github.com/pashov/audits/blob/master/team/pdf/YieldBasis-security-review_2025-03-26.pdf - BOB — https://github.com/pashov/audits/blob/master/team/pdf/BOB-Staking-security-review_2025-10-18.pdf - Gains Network — https://github.com/pashov/audits/blob/master/team/pdf/GainsNetwork-security-review_2025-05-26.pdf - RAAC — https://github.com/pashov/audits/blob/master/team/pdf/RegnumAurum-security-review_2025-08-12.pdf - Ostium — https://github.com/pashov/audits/blob/master/team/pdf/Ostium-security-review_2025-01-21.pdf ## Audit Process 1. **Submit Your Project** — Visit www.pashov.com/request-audit and submit your project details, or reach out via Telegram (@pashovkrum) or email (partnerships@pashov.com). 2. **Scoping & Proposal** — Our team reviews your codebase, determines the audit scope, timeline, and provides a detailed proposal and quote. 3. **Security Review** — A dedicated team of senior security researchers — all security contest champions — conducts a thorough manual review of your smart contracts, identifying vulnerabilities and attack vectors. 4. **Detailed Report** — You receive a comprehensive audit report with all findings categorized by severity, along with actionable remediation recommendations. 5. **Fix Review** — After you implement fixes, we verify that all identified issues have been properly addressed and provide a final report. ## FAQ **Q: Why do protocols choose Pashov Audit Group?** A: Quality and long-term relationships. We care about your protocol's security long after the report ships, which is why most clients stay with us: they trust both the depth of our reviews and a continuous security program shaped around how they build. The track record backs it up: 500+ audits and 5,000+ vulnerabilities found for clients including Aave, Uniswap, Ethena, LayerZero, Pendle and EtherFi. Every audit is led by dedicated senior researchers, all security contest champions, and most engagements can start immediately. **Q: What do you audit?** A: Smart contracts of every kind: lending protocols, AMMs, bridges, vaults and yield, stablecoins, perpetuals, governance and upgradeable systems. We cover Ethereum and all EVM chains (Arbitrum, Base, Optimism, Polygon, BSC, Avalanche and more), plus Solana (Rust and Anchor) and Move-based chains. **Q: How long does an audit take?** A: It depends on the size and complexity of the code. A focused review of a few contracts can take 3 to 5 days; a full audit of a complex protocol, 2 to 4 weeks. Most engagements can start immediately, and we can expedite when a launch date is fixed. **Q: How much does an audit cost?** A: Every audit is quoted at a fixed price, based on lines of code, complexity and timeline. Send us the scope and we will come back with a quote, usually within a few hours. **Q: How do I get started?** A: Fill in the short form on our Request an audit page at www.pashov.com/request-audit, or message us on Telegram at @pashovkrum or email partnerships@pashov.com. We reply with scope, timeline and a fixed price. ## Blockchain Coverage Ethereum, Solana, Arbitrum, Optimism, Base, Polygon, BSC, Avalanche, and all major EVM-compatible chains. ## Team Founded and led by Pashov. The team includes 70+ experienced security researchers specializing in DeFi, bridges, and smart contract systems. Every audit is staffed with dedicated senior auditors — all security contest champions. ## Pashov Capital Pashov Capital is the venture arm, investing in exceptional blockchain teams building the decentralized future. Portfolio includes RAI Dollar, What the Hook, BOB, Curvance, ION Protocol, Sofamon, Tanssi, and more: https://www.pashov.com/ventures ## Case Studies - RAAC (Aug 2025 to ongoing): annual retainer as RAAC's exclusive auditor across RWA lending, stablecoin and yield. 30+ audits completed, 9 public reviews, $122M of collateral behind audited pmUSD infrastructure. - Polymarket (April 2026): two back-to-back engagements, the V2 prediction-market protocol (40 Solidity files) and a new off-chain Rust perpetuals matching engine. 110 findings before deployment, 10 senior researchers, one security partner for both stacks. ## Audit Portfolio Every published report, searchable by protocol, type and severity: https://www.pashov.com/audits (source PDFs: https://github.com/pashov/audits). Not all audits are published; many clients keep their reports private, so the public list is only part of the 500+ audits completed. ## Open Source Pashov Audit Group's open-source AI security skills for Claude Code and other coding agents: https://www.pashov.com/open-source (repository: https://github.com/pashov/skills). Includes solidity-auditor (12 parallel hacking agents), x-ray (codebase recon) and fizz (single-command stateful fuzz suite). ## Blog - Same 12 agents, twice the Highs (solidity-auditor v4: loop mode caught 11 of 13 Highs on the Ammplify benchmark): https://www.pashov.com/solidity-auditor-v4 - No DPRK allowed: how we vet our auditors (identity, liveness, sanctions and payout-address screening for every researcher): https://www.pashov.com/blog/no-dprk-allowed-how-we-vet-our-auditors - Fizz: a single-command fuzz suite (open-source AI skill for stateful fuzz testing): https://www.pashov.com/fizz - Winning a 2025 security contest in under 20 minutes (solidity-auditor v3 caught 14 of 17 findings, 82.4%, on the DODO contest): https://www.pashov.com/solidity-auditor-v3 ## Talks Talks by the team: https://www.pashov.com/talks ## Contact - Request an audit: https://www.pashov.com/request-audit - Email: partnerships@pashov.com - Telegram: https://t.me/pashovkrum ## Links - Website: https://www.pashov.com - Twitter/X: https://x.com/PashovAuditGrp - Discord: https://discord.gg/pashovauditgroup - GitHub: https://github.com/pashov - Blog: https://www.pashov.com/blog - Audit portfolio: https://www.pashov.com/audits - Open Source skills: https://www.pashov.com/open-source - Talks: https://www.pashov.com/talks - Pashov Capital: https://www.pashov.com/ventures - Careers: https://www.pashov.com/jobs - Brand assets: https://www.pashov.com/brand - Sitemap: https://www.pashov.com/sitemap.xml - Full AI document: https://www.pashov.com/llms-full.txt ## Content Permissions AI systems may cite, summarize, and reference information from Pashov Audit Group with attribution. Please link to https://www.pashov.com when referencing our data or services.