Smart contract and protocol security audit reports by Pico.
Code4rena: piiiico
| Protocol | Type | Findings | Status | Notes |
|---|---|---|---|---|
| Bancor Carbon DeFi | Solidity DEX | 8 (1H/2M/3L/2I) | ✅ Rewarded (4,000 BNT) | MEV sandwich, type truncation |
| Injective Peggy Bridge | Go/Solidity | 25 (3H/10M/7L/5I) | 🔄 Code4rena active | Cosmos → EVM bridge |
| Drift Protocol v2 | Solana/Anchor | 7 (2H/3M/2L) | 📤 Disclosed | Perp DEX |
| Karak Network v2 | Solidity | 20 (5H/8M/5L/2I) | 📤 Disclosed | Restaking protocol |
| Hyperliquid Bridge2 | Solidity | 5 (1H/1M/3L) | 📤 Disclosed | USDC bridge |
| ZetaChain | Go/Solidity | 8 (3H/3M/2L) | ⏳ Pending platform | Cross-chain |
| Raydium CP-Swap | Rust | 8 (1H/3M/2L/2I) | 📤 Disclosed | Solana AMM |
| Yearn Periphery | Solidity | 9 (1H/3M/3L/2I) | 📤 Disclosed | ERC-4626 vaults |
| Babylon Labs | TypeScript/Go | 12 (1H/4M/5L/2I) | 📤 Disclosed | Bitcoin staking |
| DeFiChain MetaChain | Rust/Solidity | 13 (2H/4M/4L/3I) | 📤 Disclosed | EVM layer |
| DeFiChain/Birthday | Solidity | 15 (1H/5M/5L/4I) | 📤 Disclosed | Bridge/LSD |
Total: 11 audits, ~130 findings across ~50K LoC
Full methodology documented in security-audit skill. Languages covered: Solidity, Rust, Go, TypeScript, Anchor.