Circular museum ceiling rendered as abstract architecture

Security research for critical software

Use Havu to combine trusted AI security tools into one scan, deduplicate findings, and reduce false positives. For complex software, SCAS's senior researchers provide audits and R&D.

Based logo
Tree logo
EUROe logo
Plether logo
Aave logo
1inch logo
Covalent logo
Symbiotic logo
Predict logo
Somnia logo
Parallel logo

Havu

Combines trusted AI security tools into one scan, deduplicates findings and reduces false positives, saving hours of developer time.

Use Havu
Havu
Scan
Findings

What makes SCAS different?

Deep Domain Knowledge on perpetual and option systems.

Book an Audit

Audits for DeFi

Smart contract audits for decentralized finance systems, focused on derivatives and vaults.

  • derivatives
  • derivative integrations
  • morpho vaults

Security R&D

Research and development of formal systems, internal security tooling or IP protection against AI.

  • threat modeling
  • invariant design
  • formal methods
Paris rooftops and skyline viewed from above

Security is civic work.

In a fully digital world, the protection of user data, operations, and assets is essential for a working society. SCAS protects the systems people and institutions rely on.

Selected security work.

Glass tower rising beside an older stone facade

Plether pre-audit

Reviewed a perpetuals launch for critical paths, simplified implementation risk, and reported launch-blocking vulnerabilities.

View Report
Tall city buildings under an overcast sky

Predict.Fun audit

Researchers of SC Audit Studio worked as subcontractors for sherlock on the collaborative audit of Predict.Fun, a decentralized prediction market protocol.

Learn More
Historic building facade with a rooftop statue

1inch protocol security review

Linus (oot2k) of SC Audit Studio worked as subcontractors for sherlock on the collaborative audit of 1inch, a decentralized exchange aggregator protocol.

View Report
Textured brick building rising into an overcast sky

Omen Perpetual

Linus (oot2k) of SC Audit Studio worked as subcontractors for sherlock on the collaborative audit of Omen Perpetual, an innovative perpetual protocol.

View Report
View All Previous Work
Dim office lounge with a large window

Small team. Senior attention.

SCAS is a boutique research studio for teams that need real security without overhead. The team brings security research, protocol review, partnership context, and product judgment into the same room.

Since founding in Helsinki in 2024, the studio has completed 45+ full security audits and helped protect more than $13M in live funds.

Portrait of Linus L.

Linus L. (oot2k)

Managing Director, Researcher

Linus has helped protect $13M+ in live funds, disclosed 100+ vulnerabilities, and earned $150K+ in public bug bounties across CTFs, bug bounties, and production security reviews.

Portrait of Ihtisham U.

Ihtisham U.

Core Contributor, Researcher

Ihtisham has earned top-5 competitive audit finishes, published research on 150+ protocols, and found critical bugs across cross-chain, RWA, staking, and lending systems.

Portrait of Kinako M.

Kinako M.

Business Development

Kinako brings experience from 3 organizations: Uniswap, the Ethereum Foundation, and the XRP Foundation, connecting protocol-security work with technical teams and partners.

Research

Read Research
Concrete interior balcony with a large number three

We secure software that matters

Stop spending time searching for the right tool, use Havu to use all of them. Bring in SCAS researchers when working on software that matters.

Book a Security Review