Cowrie Research

coinspect-primary-sources-2026-04-30

3 min read

Coinspect primary sources — 2026-04-30

Project status in this pass

  • No canonical standalone Coinspect whitepaper or litepaper surfaced.
  • The clearest current source of truth is the official site plus Coinspect’s public ranking, framework, and exploit-reproduction repositories.

Primary-source snapshots

1) Official homepage

  • URL: https://www.coinspect.com/
  • Key excerpt:
    • Positions Coinspect as “Web3 Security Services Beyond Smart Contract Audits.”
    • Highlights services including penetration testing, SDLC reinforcement, core L1/L2 security, smart-contract audits, and source-code audits.
    • Customer testimonials and the current blog index reinforce that the company works across more than contracts alone.

2) GitHub organization

  • URL: https://github.com/coinspect
  • Key excerpt:
    • The org overview says Coinspect has protected critical decentralized systems since 2014, including L1 nodes, smart contracts, wallets, dApps, exchanges, and bridges.
    • Important because it provides the clearest short statement of Coinspect’s scope across protocol, application, and wallet surfaces.

3) Wallet Security Ranking page

  • URL: https://www.coinspect.com/wallets/
  • Key excerpt:
    • Presents public report previews and explains the four ranking pillars: dApp permissions, intent verification, physical access, and threat prevention.
    • Says the reports are fully open, check-by-check, and meant to help users decide while pushing wallet vendors toward stronger security standards.
    • The FAQ says rankings are updated over time and initially focus on wallets listed by the Ethereum Foundation, showing a structured benchmarking effort rather than one-off blog commentary.

4) Wallet Security Ranking third-edition post

  • URL: https://www.coinspect.com/blog/wallet-security-ranking-results-third-edition/
  • Key excerpt:
    • Says the third edition evaluated 77 crypto wallets across iOS, Android, and browser extensions using 2,233 individual security checks.
    • Highlights concrete ecosystem trends like the growth of phishing detection, uneven mobile security maturity, and rising transaction-simulation adoption.
    • Useful evidence that Coinspect is publishing recurring comparative security intelligence, not only client deliverables.

5) Wallet security framework repository

  • URL: https://github.com/coinspect/wallet-security-framework
  • Key excerpt:
    • Says the repository contains two complementary resources: a developer/auditor control catalog and the Wallet Security Benchmark (WSB).
    • The README explains the WSB is interaction-based and can be performed without source access, while the broader framework also covers white-box controls such as key management, authentication, and provider injection.
    • Important because it shows Coinspect’s ranking is backed by a reusable methodology artifact.

6) Wallet security ranking data repository README

  • URL: https://raw.githubusercontent.com/coinspect/wallet-security-ranking/main/README.md
  • Key excerpt:
    • Says the repository stores current configuration, individual wallet reports, historical ranking rounds, and change logs.
    • Documents versioned checks, dated ranking snapshots, and report-generation inputs.
    • Strong evidence that the ranking is treated as a maintained data product, not just a static marketing page.

7) Learn EVM Attacks repository README

  • URL: https://raw.githubusercontent.com/coinspect/learn-evm-attacks/master/README.md
  • Key excerpt:
    • Describes an open collection of Foundry tests reproducing exploits, bug-bounty reports, and theoretical vulnerabilities on EVM chains.
    • Notes the corpus currently spans 40+ reproduced exploits across access control, bad-data validation, business logic, reentrancy, and bridge failures.
    • Documents an offline RPC-caching workflow so tests can be replayed without live RPC dependency.

8) Learn EVM Security / offline caching blog post

  • URL: https://www.coinspect.com/blog/learn-evm-security/
  • Key excerpt:
    • Explains that the full Learn EVM Attacks corpus can now run fully offline through a committed RPC cache plus a mock proxy.
    • Frames this as a way to reduce the barrier to security education by eliminating archive-node and API-key dependencies.
    • Helpful evidence that Coinspect invests in operator- and learner-facing security tooling, not only consulting.

Working conclusion

Coinspect is best cataloged as blockchain security infrastructure with a particularly strong public benchmarking and exploit-education surface. The combination of services, wallet-security methodology, open ranking data, and offline-replay exploit corpus makes it materially broader than a conventional audit consultancy.

Graph View