CASES — REDACTED, REAL

Proof,
not promises.

Sanitized case studies — names redacted under NDA, outcomes real. Full reports delivered as PDF + Notion + Loom.

DEFI • 18.4K LOC • VAULT • 7 DAYS • STANDARD $14.5K

Reentrancy guard bypass — $42M TVL saved before launch

After two prior audits, we found tx.origin vs msg.sender guard bypass → vault drain in Foundry invariant test. PoC: exploit.t.sol + Loom. Patch: CEI + nonReentrant. Re-test in 48h, shipped with fuzz corpus in CI. 87.4% coverage, 1.2M cases.

"OBSIDIAN found what two prior audits missed. PoC in 48 hours, patch in 12." — CTO, redacted
FIRMWARE • ELF 1.2MB • BINARY • 5 DAYS • EXPRESS $4.9K

Heap overflow @ 0x4012a8 → ROP chain in lab

parse_header lacked bounds check on hdr->len → heap overflow, adjacent chunk overwrite → ROP chain demo. PoC: poc_obs001.py + poc_obs001.mp4. Patch: explicit bounds + unit test. Client quote: "The best binary report we've received."

"Actual ROP chain, not just theoretical overflow." — Head of Security, hardware wallet
View 12-page sample report (sanitized) →