NullReturn
NullReturn is an independent security company that audits smart contracts and critical digital asset infrastructure, including DeFi protocols and the systems that sign, move, and protect value. The firm offers manual code review, fuzzing, formal verification, and infrastructure security assessments covering signing flows, key management, and access controls. Its engagements follow a defined scope with published audit reports and client confirmations.
- Blockchain & Cryptocurrency
- Cybersecurity
- Web3 & NFTs
Funding
Founders
Founder details are not available yet.
Product
Problem
Smart contracts in the Web3 ecosystem are vulnerable to logical errors, coding flaws, and security vulnerabilities that can lead to substantial financial losses. These issues are often difficult to detect with basic testing alone, especially in complex DeFi protocols where even subtle bugs can be exploited. Critical digital asset infrastructure—such as signing systems, key management, and backend integrations—also carries security risks that can compromise the entire value chain.
Solution
NullReturn provides comprehensive blockchain security services centered on smart contract audits and infrastructure security reviews designed to identify and mitigate risks. The company offers manual code reviews to detect logical errors and ensure coding standards, plus pre-audits that prepare contracts for full-scale review. Full audits involve deep analysis to uncover vulnerabilities, while fuzz testing generates random inputs to surface issues missed by manual review. Formal verification applies mathematical methods to guarantee contract correctness and reliability. A distinct continuous audit support service keeps the same team reviewing updates and new functionality, reducing costs and streamlining timelines for ongoing projects. The company also extends its expertise to infrastructure security, covering signing flows, key management, access controls, and critical backend logic for digital asset businesses.
Target Audience
Primary customers are Web3 projects building DeFi applications, including teams developing decentralized exchanges, lending protocols, liquid staking mechanisms, stablecoins, and yield optimization tools, as well as infrastructure teams and digital asset businesses bringing critical systems into production.
Features
- Manual code review services that detect logical errors, vulnerabilities, and ensure compliance with coding standards
- Pre-audit analysis that identifies basic issues, improves code readability, and prepares contracts for full-scale audits
- Comprehensive smart contract audit combining broad and in-depth code review to uncover vulnerabilities
- Fuzz testing using automated random input generation to identify issues not found through manual inspection
- Formal verification employing mathematical methods to confirm the correctness and reliability of smart contract functionality
- Continuous audit support for ongoing reviews of updates and new functionality by the same team, minimizing onboarding efforts
- Infrastructure security reviews covering signing flows, key management, protocol and cloud KMS integrations, access controls, and architecture threat modeling
- Focus on business logic and economic invariants specific to DeFi protocols, including targeted testing and remediation review for release changes
- Defined engagement process with four phases: define, review, resolve, and document, ensuring clear scope and defensible findings
- Published audit reports and client confirmations available publicly, demonstrating real engagements and review boundaries