Hexens
Hexens Cofounder & CTO
Motivation
Hexens was recently selected to be an approved auditor for the Arbitrum Audit Program, we hope to continue strengthening the partnership for the benefit of the Ecosystem and its builders. By joining the council, Hexens commits to upholding the safety and credibility of Arbitrum as one of the largest Layer-2 ecosystems.
Security is a cornerstone for user adoption, institutional trust, and regulatory compliance. Unlike internal actors, Hexens operates as an independent cybersecurity provider, with no conflicting token or governance interests. Our motivation is strictly aligned with ecosystem security and resilience.
Experience
Our team includes former CTF champions, academic cryptographers, PhD’s and low-level exploit researchers, all driven by deep technical experience and a passion for secure innovation.
Proven Security Leadership in Web3:
- Hexens has protected $120B+ assets
- Our multi-team audit methodology (two senior-led teams per engagement) has become a gold standard in the industry.
- Experience with high-profile protocols (Polygon, 1inch, Lido, LayerZero, EigenLayer, etc.) demonstrates trustworthiness at scale.
Both our Co-Founder’s used to be members of the Security Alliance (SEAL911). The auditors at Hexens are known globally, notably with our Head of Audits Kasper and Lead Auditor Soon sitting at the top of the leaderboards of the biggest bug bounty platforms. Both with experience finding critical vulnerabilities in projects such as EigenLayer and Wormhole and governance flaws. You can find a technical blog post regarding our critical find; 1. in EigenLayer https://hexens.io/blog/critical-eigenpods-bug 2. In NounsDAO using Glider https://mirror.xyz/verbsteam.eth/TP917T6vm6gXuVAxbQ34ZCn7dNiHabu3UW-ninwalVc
Skills
Cybersecurity
Background of the representative of Hexens, Vahe Karapetyan: Vahe’s journey in cybersecurity started at 12yo, when he learned C++ and started developing kernel drivers, anti-rootkits, VM and Hypervisor security modules while still going to school.
During university studies he worked as an offensive security engineer and reverse engineer also uncovering 0-day vulnerabilities on various vendors.
Highlights & Achievements: Winner of over 20 international cybersecurity competitions (CTFs), both solo and with the world-renowned team, MSLC. Pioneered security reviews for innovative technologies, including zero-knowledge proofs. Designed and currently developing the only scalable vulnerability and data research tool for smart contracts. Fun fact: Proved a theorem in lambda calculus for his master’s thesis— ask me about it if we ever meet!
Primary Expertise: VM and low-level components security EVM and Blockchain internals Zero-Knowledge audit Reverse Engineering and Vulnerability Research
Projects
Hexens provides security and auditing services to a broad range of projects across a number of chains; these include but are not limited too; 1inch, EigenLayer, LayerZero, Ava Labs, Pancakeswap, Polygon, Fuel, Tokemak, Lido, Celo, Mantle, Swell, Stakewise, and Quickswap. We currently foresee no conflict of interest. To manage any real or perceived conflicts of interest, we apply a mature confidentiality and conflict-management framework: 1. Strict NDAs & Engagement Letters – Every client signs a bilateral NDA and a project-specific engagement letter that clearly defines permitted information flows and ownership of findings. 2. Access-Controlled Workspaces – Source code, test suites, and deliverables reside in segmented, access-controlled environments with per-project encryption keys and audit logs. 3. Ethics & Compliance Training – All personnel complete annual training covering client confidentiality, trade-secret protection, and responsible disclosure. Current Status: Hexens treats