WEB2 SURFACES IN WEB3

Pentest the Web2 surfaces inside your Web3 app

We offer white-box and black-box testing based on each project’s needs. Our research examines the large, underexplored Web2 attack surfaces that remain in many Web3 applications.

$1.00B+ Vulnerabilities patched120+ Projects audited$36.82B+ On-chain TVL secured

QUESTIONS

Frequently asked questions

What does OtterSec look at in a Web3 pentest?

We offer white-box and black-box testing based on each project’s needs. Our published research also covers OAuth logic exploits and Supabase misconfigurations.

READY TO START

Test the Web2 side of your Web3 stack

Tell us what you are building and where the highest-risk parts live. We will route the request to the right security team.

Get in touch