Some of our eyes are always open.

Our AI learns to break smart contracts. It attacks yours on a private fork of the chain, an Argus auditor confirms every finding, and you get the working exploit and a verified fix before anyone else gets the chance.

Request an audit Watch it work
01Watch

Every block, read

A new block lands every twelve seconds, and our AI reads each one the way an attacker would. In 2025, some of those blocks were attacks.

02One of them

Balancer V2, 3 Nov 2025

Block 23,717,397. One transaction drained stable pools on seven chains, over $100M in all. The flaw had been in live, audited code since 2021.

03Unfold

One transaction, unfolded

A freshly created contract sends the Balancer Vault one large batch of swaps. We map every hop: the Vault, the pool, its rates, its shares.

04Analyse

Follow the value

Each swap rounds a sliver the wrong way. One is harmless. Hundreds in a single batch, and the pool's value per share collapses. That is a rule that must never break.

05Break it

An AI that learns to break it

Now rewind to before the attack, as if Balancer were launching with us. We fork mainnet, and the Argus AI attacks hundreds of simulations of the fork at once, learning from every run until one breaks the rule.

Argus AIsimulations 0

Ready, on a fork of mainnet

06Prove

Replay the winning run

The winning run is replayed step by step on the fork, one block before the real attack: same pools, same balances. Proof, not opinion.

07Fix

Patch it. Re-run it. Ship it.

Round every conversion in the pool's favour, and the same batch now reverts. You launch with evidence, not hope.

Request an audit
Why Argus

Fast.

Our AI attacks your contracts first, so findings arrive faster.

Expert.

Our AI is the expert. It's trained on the history of real exploits and millions of rounds of simulated attacks, so it knows how contracts break.

Affordable.

The AI does the heavy lifting, so a full audit costs less than a traditional firm's.

Services

Four wayswe keep watch.

01

Smart contract audits

Our AI goes through your contracts first, then an Argus auditor reviews every line and every finding. Each critical and high issue comes with a working exploit, a recommended fix, and a re-test.

Solidity & VyperPre-launch & upgradesFix review
02

Adversarial simulation

Our AI attack engine learns to break your protocol and everything it touches, on a live-state fork, hunting multi-step and cross-protocol failures that rule checks alone miss.

Flash loans & oraclesComposabilityEconomic attacks
03

Continuous monitoring

New pools, new integrations, new prices. Your deployed contracts live in a changing world, so we keep re-running our checks against it.

Re-simulation on changeAlerting
04

Incident response

When something goes wrong, we reconstruct what happened, map what's still exposed, and help you contain it fast.

ReconstructionExposure analysisPost-mortem
How we work

From first callto a safe launch.

  1. First call

    Scope

    Tell us what you're shipping and when. We come back with a scope and a proposal.

  2. Kick-off

    Write down the rules

    We list the rules your protocol must never break, in plain language, and agree them with your team. Everything after is tested against them.

  3. During the audit

    Findings as we find them

    Our AI attacks a fork of mainnet. An Argus auditor confirms each finding and sends it with a test that reproduces it, so you can start fixing without waiting for a final report.

  4. As you patch

    Every test re-run

    We review each patch and re-run every test against it, until all of them pass.

  5. Before launch

    A report, and tests you keep

    A public report for your users, and the full test suite for your CI. Every future change is checked against the same rules.

The cost

Every one of thesecould have failed on a fork first.

Smart-contract incidents from 2025 and 2026. Each broke a rule its protocol should never break: the kind of rule a test on a mainnet fork checks after every move, before launch.

$3.4B

stolen from crypto in 2025.

$2.5B+

more from January to September 2026, across 591 incidents.

$1.46B

taken in a single attack, February 2025.

DateProtocolLossWhat happenedThe rule a fork test checks
Aug 2026 Tectonic $120M borrowed A thinly traded collateral token was pumped and the price feed followed it. A chain rollback recovered most of it. borrowing stays under fair-priced collateral
Jan 2026 Truebit $26M A contract written in 2021 had unchecked price maths, so new tokens could be minted for almost nothing. price > 0 for any amount
Nov 2025 Balancer V2 $100M+ Rounding inside batched swaps let stable pools' value per share fall, on seven chains at once. value per share never drops
Nov 2025 Yearn yETH $9M Under an extreme imbalance the pool's maths broke down and minted a near-unlimited supply. supply never exceeds deposits
Jul 2025 GMX V1 $42M A re-entrant call skipped a price update, so pool shares were overvalued when redeemed. share price matches assets
Jun 2025 Resupply $9.6M Hours after launch, an almost empty vault reported an exchange rate of zero, so the solvency check always passed. borrowing never exceeds collateral
May 2025 Cetus $223M An overflow check tested the wrong limit, so a tiny deposit was counted as enormous liquidity. liquidity matches deposit

Not every loss is a code bug. The largest of the period, Bybit ($1.46B, Feb 2025), Bitget ($387.5M, Sep 2026) and Kelp DAO ($292M, Apr 2026), came through compromised signing, keys and infrastructure. Those need a different kind of watch, and we'll tell you which kind you need.

Sources: Chainalysis (2025 totals), CertiK Hack3d H1 2026 and Q3 2026, protocol post-mortems, OpenZeppelin, BlockSec, Rekt. Figures vary by tracker; rounded.

Next

Let us attack youfirst.

Tell us what you're building and when you plan to ship, and we'll come back with a scope and a proposal.

Email hello@arguslab.io
Under attack right now? Email us with URGENT in the subject, plus the contract address and a transaction hash. We'll start with what's still exposed.