Code4rena
#1 - Panoptic
Security team auditing Solidity, DAML, and Rust projects. We read your code line by line, prove what’s broken, and stay with you through remediation. Every engagement is taken personally by both co-founders and additional SRs.
- Vulnerabilities found
- 300+
- Lines of code audited
- 150K+
- Post-audit exploits
- 0
- Secured protocols
- 40+
Pressure-tested
before mainnet.
Proven Results
Competitive audit results from leading Web3 security platforms
Code4rena
#3 - SukukFi
Sherlock
#3 - Monolith
About Us
Built by Researchers,
for Builders
Valves Security is a specialized Web3 security team founded by Veselin and Valeri. With deep experience across EVM-based protocols, Canton Network DAML and Rust systems, we help projects identify and eliminate critical vulnerabilities before they reach mainnet and be exploited.
Our mission is to raise the security baseline of the Web3 ecosystem through careful manual and top-tier AI code review.
Battle-Tested
Competed on Sherlock and Code4rena, ranking in the top 3 across multiple audit competitions with over 1500 participants on each one.
Multi-Technology Expertise
Specialized in Solidity, DAML, and Rust. Covering EVM protocols, Canton Network projects, and Rust systems.
Transparent Process
Communication is key throughout the audit process. We maintain constant communication with our clients from start to finish.
Our security process
From scope definition to remediation, we keep the audit structured, communicative, and focused on all vulnerabilities from critical to informational.
-
1
Kickoff & Context Alignment
A direct kickoff call helps us understand protocol architecture, threat assumptions, trust boundaries, and intended behavior.
-
2
Scope & Preparation
Review the codebase, confirm scope, timeline, dependencies, and special risk areas before engagement begins.
-
3
AI-Assisted Code Comprehension
We apply our custom AI tooling in the early days to accelerate code comprehension and broaden initial coverage - giving the manual audit a faster, sharper start.
-
4
Manual Audit & Adversarial Review
We perform deep manual analysis focused on exploit paths, invariant breaks, edge cases, accounting risks, and integration assumptions.
-
5
Findings Confirmation & Sharing
Issues are confirmed and shared with the client in the end of our engagement. Some tougher to mitigate issues may be shared immediately on discovery.
-
6
Remediation Review
We review submitted fixes, verify whether vulnerabilities are fully resolved, and flag partial or incorrect mitigations.
What clients can expect
- Direct communication with the auditors
- Clear, exploit-focused findings
- Fast feedback during remediation
- Professional audit report PDF
Why this process works
- Real-time communication reduces delays
- Early findings reduce remediation risk
- Fix verification improves final security posture
- We are focused on every little detail
Protocols we
& our auditors
have secured
What Our Clients Say
From start to finish, the audit experience was outstanding. The entire process was smooth and professional, we recommend them to any project looking for a trusted audit partner.
Valves Security is the best security firm I've ever worked with, and their audits are top notch. I feel confident knowing our users' funds are safe after Valves Security went over Snuggle, MaxFi and Agent Max line by line with a fine tooth comb in addition to using their advanced analysis and testing systems.
You guys have been really great throughout this process. We'll definitely recommend you to anyone we come across in the future, and look forward to working with you again soon.
The Team
The duo that made Valves possible
Vesko210
Veselin is a smart contract security researcher with a strong Web2 background. What started as a suggestion from his cousin quickly turned into a deep passion for vulnerability research.
CO-FOUNDER & SECURITY RESEARCHER
Merulez99
Valeri specializes in adversarial analysis of EVM-based DeFi protocols, focusing on lending, vault, and stablecoin systems, with expertise in share accounting, debt models, and invariant-breaking exploits.
CO-FOUNDER & SECURITY RESEARCHER
Ready to Secure Your Codebase?
Get in touch and we’ll respond within 6 hours with price and timeline estimate.