Autonomous AI Security Research

Smart Contracts & Blockchain

Powerful agentic security workforce for your security needs

Powerful agentic security workforce for your security needs

Deploy highly specialized security agents that work in parallel to uncover novel findings that evade manual review.

Book a Demo

Book a Demo

tempo

/

reth-execution-engine

Link GitHub Repo

Active

File browser

crates

evm

src

lib.rs

execute.rs

processor.rs

payload

src

lib.rs

builder.rs

transaction-pool

src

lib.rs

pool.rs

validator.rs

precompiles

src

lib.rs

primitives

src

lib.rs

consensus

src

lib.rs

commonware-node

src

lib.rs

execute.rs

processor.rs

builder.rs

1

use crate::TempoEvmConfig;

2

use alloy_consensus::crypto::RecoveryError;

3

use alloy_primitives::Address;

4

use rayon::prelude::*;

5

use reth_evm::{

6

ConfigureEngineEvm, ConfigureEvm, EvmEnvFor, ExecutableTxIterator, ExecutionCtxFor,

7

FromRecoveredTx, RecoveredTx, ToTxEnv, block::ExecutableTxParts,

8

};

9

use reth_primitives_traits:: {SealedBlock, SignedTransaction};

10

use std::sync::Arc;

11

use tempo_payload_types::TempoExecutionData;

12

use tempo_primitives::{Block, TempoTxEnvelope};

13

use tempo_revm::TempoTxEnv;

14

15

impl ConfigureEngineEvm > TempoExecutionData > for TempoEvmConfig {

16

fn evm_env_for_payload(

17

&self,

18

payload: &TempoExecutionData;

19

) -> Result<EvmEnvFor<Self>, Self::Error> {

20

self.evm_env(&payload.block)

21

}

22

23

fn context_for_payload<'a>(

24

&self,

25

payload: &'a TempoExecutionData,

26

) -> Result<ExecutionCtxFor<'a, Self>, Self::Error> {

27

let TempoExecutionData { block, validator_set } = payload;

28

let mut context = self.context_for_block(block)?;

29

30

context.validator_set = validator_set.clone();

31

32

Ok(context)

33

}

34

35

fn tx_iterator_for_payload(

36

&self,

37

payload: &TempoExecutionData,

38

) -> Result<impl ExecutableTxIterator<Self>, Self::Error> {

39

let block = payload.block.clone();

All threads

Tempo/reth-execution-engine

Open

Nathaniel

Auron triage Team

19:20

A thread for project-level discussions and important notifications.

Auron

19:20

@Protocol team New finding available:

H-01: Pre-T2 Fee Swap DoS: Fee AMM liquidity can be drained mid-tx to force collect_fee_post_tx() to error as EVMError::Custom

Horsefacts

Protocol team

19:20

Thank you! Great findings so far, will review this now.
I think this one is quite significant too.

Auron

19:20

@Protocol team New finding available:

H-02: StablecoinDEX pre-T1A swallowed OutOfGas during flip placement commits partial state

Georgios

Protocol team

19:20

These are some nice finds.

Your message here...

tempo

/

reth-execution-engine

Link GitHub Repo

Active

File browser

crates

evm

src

lib.rs

execute.rs

processor.rs

payload

src

lib.rs

builder.rs

transaction-pool

src

lib.rs

pool.rs

validator.rs

precompiles

src

lib.rs

primitives

src

lib.rs

consensus

src

lib.rs

commonware-node

src

lib.rs

execute.rs

processor.rs

builder.rs

1

use crate::TempoEvmConfig;

2

use alloy_consensus::crypto::RecoveryError;

3

use alloy_primitives::Address;

4

use rayon::prelude::*;

5

use reth_evm::{

6

ConfigureEngineEvm, ConfigureEvm, EvmEnvFor, ExecutableTxIterator, ExecutionCtxFor,

7

FromRecoveredTx, RecoveredTx, ToTxEnv, block::ExecutableTxParts,

8

};

9

use reth_primitives_traits:: {SealedBlock, SignedTransaction};

10

use std::sync::Arc;

11

use tempo_payload_types::TempoExecutionData;

12

use tempo_primitives::{Block, TempoTxEnvelope};

13

use tempo_revm::TempoTxEnv;

14

15

impl ConfigureEngineEvm > TempoExecutionData > for TempoEvmConfig {

16

fn evm_env_for_payload(

17

&self,

18

payload: &TempoExecutionData;

19

) -> Result<EvmEnvFor<Self>, Self::Error> {

20

self.evm_env(&payload.block)

21

}

22

23

fn context_for_payload<'a>(

24

&self,

25

payload: &'a TempoExecutionData,

26

) -> Result<ExecutionCtxFor<'a, Self>, Self::Error> {

27

let TempoExecutionData { block, validator_set } = payload;

28

let mut context = self.context_for_block(block)?;

29

30

context.validator_set = validator_set.clone();

31

32

Ok(context)

33

}

34

35

fn tx_iterator_for_payload(

36

&self,

37

payload: &TempoExecutionData,

38

) -> Result<impl ExecutableTxIterator<Self>, Self::Error> {

39

let block = payload.block.clone();

All threads

Tempo/reth-execution-engine

Open

Nathaniel

Auron triage Team

19:20

A thread for project-level discussions and important notifications.

Auron

19:20

@Protocol team New finding available:

H-01: Pre-T2 Fee Swap DoS: Fee AMM liquidity can be drained mid-tx to force collect_fee_post_tx() to error as EVMError::Custom

Horsefacts

Protocol team

19:20

Thank you! Great findings so far, will review this now.
I think this one is quite significant too.

Auron

19:20

@Protocol team New finding available:

H-02: StablecoinDEX pre-T1A swallowed OutOfGas during flip placement commits partial state

Georgios

Protocol team

19:20

These are some nice finds.

Your message here...

Protocols we’ve helped secure

Tired of generic AI scans? Finally, highly specialized agents you can trust

Auron lets you deploy a swarm of highly specialized agents fine-tuned to work the way a world-class security team does: building real understanding of your codebase first, then hunting for exploitable paths, and only surfacing issues they can validate with a working proof of concept.

HOW IT WORKS

Your codebase: understood, investigated, and secured by specialized AI agents.

Auron doesn’t deploy one generic scanner. It coordinates specialized AI security agents. Together, they follow the same four-phase workflow used by elite security researchers, operating continuously and at scale to uncover novel findings across your entire codebase.

01

Context Building

02

Threat Modeling

03

Exploit investigation

04

Validation

01

Context Building

Before Auron hunts for anything, it reads everything.

Context-building agents ingest the full repository: code, documentation, architecture diagrams, annotations, and developer intent. They build a shared working model of the system: what it’s supposed to do, how the components relate, and where the design assumptions live.

This step is what separates Auron from tools that scan in isolation. Real vulnerabilities often hide in the gap between what the code does and what it was meant to do.

BATTLE-TESTED IN LIVE COMPETITIONS

Ranked against the world's best security researchers.

We’ve tested Auron in open, judged audit competitions on Code4rena and Sherlock, placing against top human security researchers under real conditions.

Verify

Verify

1st place

Chainlink Payment Abstraction v2

3 medium risk findings

2nd place

XRP Ledger

3 high & 6 medium risk findings

2nd place

Monetrix

1 medium risk finding

3rd place

Kakarot

2 high risk findings

TWO WAYS TO WORK WITH AURON

Embedded in your workflow.
Or run by our team.

Auron Platform

Deploy Auron’s agentic security workforce through an API and dashboard. Integrate specialized agents into pull requests, commits, and releases for continuous coverage without the overhead of scheduling reviews.

API-first design for seamless CI/CD integration

Dashboard for tracking findings, severity, and remediation status

Supports Solidity, Rust/Anchor, Move, Go/EVM, and more

Proof-of-concept-backed findings on every run

Findings triaged and validated by our team before delivery

Auron Audit

A full security audit, delivered by our team. For protocol teams preparing for launch, major upgrades, or post-incident recovery. Auron Labs runs a complete review of your codebase, combining specialized Auron agents with human security researchers for maximum depth and coverage.

Professional audit report with severity classifications

Proof-of-concept exploit for every confirmed finding

Remediation guidance from researchers who understand the code

A deliverable you can share with investors, users, and stakeholders

Continuous communication with your team throughout the engagement

Request an Audit

Request an Audit

ECOSYSTEM COVERAGE

Wherever your protocol lives, Auron can audit it.

Auron is language-agnostic by design. The research pipeline adapts to the primitives, tooling, and vulnerability patterns unique to each ecosystem, not just EVM assumptions carried over elsewhere

Solidity / EVM

Go / EVM

Rust / Anchor (Solana)

Move

Cairo / Vyper

BUILT FOR

For teams that can't compromise on security.

DeFi Protocol Teams

Audit Firms & Internal Security Teams

Teams Preparing for Launch or Upgrade

DeFi Protocol Teams

CTOs, engineering leads, and security teams at protocols that need continuous coverage embedded in development, not scheduled reviews that leave weeks of new code exposed. Auron integrates into pull requests and releases so findings surface before deployment, not after.

Audit Firms & Internal Security Teams

For researchers under time pressure who need to scale coverage without scaling headcount at the same rate. Auron amplifies what your team can find, surfacing issues that manual review can miss, backed by the level of proof your clients expect.

Teams Preparing for Launch or Upgrade

For researchers under time pressure who need to scale coverage without scaling headcount at the same rate. Auron amplifies what your team can find, surfacing issues that manual review can miss, backed by the level of proof your clients expect.

DeFi Protocol Teams

Audit Firms & Internal Security Teams

Teams Preparing for Launch or Upgrade

DeFi Protocol Teams

CTOs, engineering leads, and security teams at protocols that need continuous coverage embedded in development, not scheduled reviews that leave weeks of new code exposed. Auron integrates into pull requests and releases so findings surface before deployment, not after.

Audit Firms & Internal Security Teams

For researchers under time pressure who need to scale coverage without scaling headcount at the same rate. Auron amplifies what your team can find, surfacing issues that manual review can miss, backed by the level of proof your clients expect.

Teams Preparing for Launch or Upgrade

CTOs, engineering leads, and security teams at protocols that need continuous coverage embedded in development, not scheduled reviews that leave weeks of new code exposed. Auron integrates into pull requests and releases so findings surface before deployment, not after.

Frequently
Asked Questions

How is Auron different from static analyzers?

Auron is not a point-in-time scanner or a single generic model. It deploys specialized AI security agents to build codebase context, map likely attack surfaces, investigate exploitable paths, and validate findings with working proofs of concept.

Does Auron support languages beyond Solidity?

Yes. Auron is language-agnostic by design and built for ecosystems beyond Solidity, including Go / EVM, Rust and Anchor for Solana, Move, and other DLT ecosystems.

Are findings always backed by a PoC?

That is the standard. Auron validates findings end to end in an isolated environment, and if it cannot produce a working proof of concept, it does not report the issue.

Is this a replacement for manual audits?

No. Auron Platform deploys specialized agents to extend and strengthen continuous security research, while Auron Audit combines that agent workforce with human researchers for formal review, human judgment, professional reporting, and actionable findings.

Can Auron integrate into CI/CD workflows?

Yes. Continuous, workflow-integrated security research is a core part of the platform direction, with Auron designed to fit into pull requests, commits, releases, and remediation workflows.

What does the audit deliverable include?

Auron Audit delivers a professional audit report with proof-of-concept-backed findings, severity classifications, and remediation guidance. It is designed as a formal review teams can act on and share with stakeholders.