Zellic
Zellic (Blockchain Security)
Motivation
Zellic is a vulnerability research firm with deep expertise in blockchain security. The Security Council furthers our mission to maximize TVL secured. It is an extension of our commitment to the Arbitrum Foundation, ecosystem projects, and public service.
Experience
We’re a founding member of the Security Alliance (SEAL) led by samczsun, an industry effort to raise the bar for blockchain security with a 24/7 emergency hotline for help with incident response, vulnerability disclosure, and other security concerns. More details here: https://securityalliance.org/
We have audited and/or have on retainer several leading protocols on Arbitrum, including Hyperliquid, Timeless, Perennial Finance, Y2K, and Premia.
We work with some of the largest L1s—Solana Foundation, Aptos Labs, and Mysten Labs—and L2s—StarkNet, Scroll, and Mantle—to identify bugs in networks, application layers, custom precompiles, and more. Earlier this year, we discovered a critical vulnerability in Move’s bytecode verifier that put billions of dollars at risk across multiple chains.
Prior to Zellic, we founded the #1 CTF (competitive hacking) team worldwide in 2020 and 2021. Our engineers bring a rich set of skills and backgrounds, including cryptography, web security, mobile security, low-level exploitation, and finance.
Skills
Cybersecurity
We have been a blockchain security firm since 2021, and have worked with 150+ clients on security reviews, advisory, and incident response.
With regards to off-chain security, we have expertise spanning the major web application tech stacks — ranging from dynamic backends built in Javascript, Python, and Ruby, to high-performance APIs in Golang and Rust, to client-side applications in React and Electron, and cloud enclave stacks like KMS and AWS Nitro Enclaves.
As part of our security researchers’ bug bounty efforts, we have discovered vulnerabilities in the largest technology companies and public institutions including the US Department of Defense, Github, Yahoo, Shopify, PayPal, Adobe, CrowdStrike, Amazon, and Bitfinex.
Projects
You can find a full list of our clients here: https://www.zellic.io/our-work