INDEPENDENT SECURITY COMPANY

Security for
systems people
depend on.

We review smart contracts and critical digital asset infrastructure — from DeFi protocols to the systems that sign, move and protect value.

Infrastructure & integrationsSmart contracts & DeFi
INDEPENDENT EXPERTISE Security review ANALYSE / TEST / VERIFY Smart contractsProtocols & DeFiApplications InfrastructureKeys & signingIntegrations 01 / CODE02 / LOGIC03 / ACCESS04 / SYSTEMS05 / CONTROL06 / CONNECTIONS From the code to the systems around it.

PUBLIC WORK

Audit reports. Client feedback. Clear scope.

Explore our work ↗

01 / EXPERTISE

Two disciplines.
One security standard.

For infrastructure teams, digital asset businesses and DeFi builders bringing critical systems into production.

01

INFRASTRUCTURE SECURITY

Secure the systems
behind the assets.

Independent reviews of signing, key management and the integrations your financial infrastructure relies on.

  • Signing flows & key management
  • Protocol & cloud KMS integrations
  • Access controls & critical backend logic
  • Architecture & threat modeling
Review focus Signing & key management↗
02

SMART CONTRACT SECURITY

Review the logic
that moves value.

Security audits for DeFi protocols and onchain applications, with findings your engineers can act on.

  • Smart contract & protocol audits
  • Business logic & economic invariants
  • Targeted testing & fuzzing
  • Release changes & remediation review
Review focus Protocol logic & integrations↗
NOT SURE WHERE TO START?

Share your architecture or planned release. We’ll help define the right review scope.

Start a conversation ↗

02 / SELECTED WORK

Real engagements.
Evidence you can open.

Explore published reports and confirmations from the teams whose systems we reviewed.

Report library ↗

KEY MANAGEMENT / CANTON

Canton KMS Driver

Security review of the KMS driver connecting Canton infrastructure with external key management.

Every audit covers a defined scope and version. Refer to the report for its boundaries and findings.

03 / TESTIMONIALS & CLIENT CONFIRMATIONS

In our clients’
own words.

Client feedback, alongside public audit
announcements from the teams we work with.

CLIENT TESTIMONIAL / DZAP

“

We’d like to recommend the team at Null Return as a professional and experienced audit partner. What stood out to us was their thorough, in-depth approach — they took the time to deeply understand both the codebase and the documentation.

Throughout the audit, they maintained clear and consistent communication with our developers, which helped the process run smoothly.

The team was also very responsive and flexible, adapting to our needs as they arose.

D
Shivam C.Co-Founder, DZap
Read testimonial on X ↗
CLIENT CONFIRMATIONLINKEDIN ↗
“Audited by Null Return.”

Launchnodes · Canton KMS Driver

Read on LinkedIn ↗
CLIENT CONFIRMATIONX ↗
“2xSwap has been independently audited by Null Return.”

AlphaDEX / 2xSwap · 5 March 2026

Read on X ↗

04 / HOW WE WORK

A clear scope.
A defensible review.

From the first architecture discussion to the final report, the engagement is built around your system and its risks.

  1. 01

    Define

    Align on architecture, code version, trust assumptions, priorities and deliverables.

  2. 02

    Review

    Examine the agreed scope with manual analysis and targeted testing.

  3. 03

    Resolve

    Discuss findings with your engineers and review fixes within the agreed scope.

  4. 04

    Document

    Receive a report with findings, severity, remediation status and review boundaries.

THE COMPANY BEHIND THE REVIEW

Independent expertise.
Direct engineering dialogue.

NullReturn is a security company working across smart contracts and digital asset infrastructure. We help teams identify and address security risks across on-chain logic, applications, and the infrastructure that connects them.

Discuss the system with us. Explore our published work. Define an engagement around the risks that matter to your team.

BEFORE WE START

A few practical
questions.

Can we work with you during development?+

Yes, even if your code and specification are not yet complete. We can start with your architecture or individual modules to identify potential issues early. Together, we will define what is useful to review now and what should be checked before launch.

Can you tailor an audit to our budget?+

Tell us about your project, priorities, and budget. We will propose a suitable scope, from reviewing a single component to a comprehensive audit or a phased engagement. We agree on the fee and review boundaries before work begins.

What do you need to get started, and how long will it take?+

A short project description and your preferred timeline are enough to start. A repository or architecture diagram helps with the estimate if available. We will clarify the details and propose a scope, fee, and realistic schedule.

What happens if you find vulnerabilities?+

We discuss findings with your engineers, explain the risks, and recommend ways to address them. We review fixes within the agreed scope and timeframe, and document the results in the final report.

Can our project and report stay confidential?+

Yes. If needed, we can agree an NDA before you share code. Publication of a report or case study is discussed with you separately and is not a requirement for working with us.

Not sure where to start? Tell us about your project — we will help you define the next step.

Discuss your project →

LET’S DEFINE YOUR SCOPE

What are
you building?

Tell us about your system and the review you need. We’ll use the brief to discuss scope, timing and a tailored proposal.

hi@nullreturn.io ↗
Prefer to start with a conversation?Contact us on Telegram ↗
↳

A high-level description is enough to start.
We can discuss an NDA before code access.

REQUEST AN AUDIT01 / 03
  1. Scope
  2. Project
  3. Contact
Where can we help?

Choose the closest match. We can refine it together.

Interactive preview. This form does not send or store your data.

Discuss a similar review ↗