Cowrie Research

guardian-audits-primary-sources-2026-05-07

4 min read

Guardian Audits primary-source snapshot

Fetched: 2026-05-07 UTC

1) Official homepage

Source: https://guardianaudits.com/

Selected excerpts from the official site:

Two teams of elite Guardian Security Researchers scour your Smart Contracts, performing independent reviews.

In every engagement, Guardian fuzzing engineers construct a comprehensive stateful fuzzing suite for your Smart Contract system.

All remediations are reviewed by both teams independently and fuzzed thoroughly to ensure issues are fully patched and no new issues arise.

Security reviews performed by Guardian are publicly posted on the Guardian GitHub, though may be kept confidential.

Additional signals from the source:

  • The homepage is unusually explicit about process design: dual-team review, mandatory fuzzing, and re-audit during remediation are all first-class parts of the pitch
  • Guardian is positioning itself as a battle-testing system, not just a report-writing vendor

2) Official case-studies page

Source: https://guardianaudits.com/case-studies

Selected excerpts from the official site:

Synthetix LP Vault Case Study

USDT0 Case Study

Yuga Labs Case Study

Synthetix Case Study

Poolshark Case Study

GMX Case Study

Orderly Case Study

Dolomite Case Study

Additional signals from the source:

  • The public case-study list spans NFTs, stablecoin-linked infrastructure, perp DEXs, AMMs, and lending integrations
  • This helps establish that Guardian’s public work reaches well beyond one niche of Solidity auditing

3) Public GitHub organization

Source: https://github.com/GuardianAudits

Selected excerpts from the official profile surface:

Institutional Grade Smart Contract Security

Audits

Institutional-grade web3 security.

Additional signals from the source:

  • The public GitHub org itself is prominently linked from the company surface and acts as the publication venue for reports and adjacent resources
  • The org also exposes additional repositories beyond the audit archive, suggesting a broader public security footprint

4) Public audit repository structure

Source: https://github.com/GuardianAudits/Audits

Selected excerpts from the official repository as observed in this pass:

GMX/2022-10-24_GMX_Synthetics.pdf

BaselineMarkets/2024-06-17_BaselineV2.pdf

Ethena/2025-05-26_Ethena_TimelockController.pdf

Foil/2025-01-13_Foil_Vault.pdf

GammaStrategies/2025-04-14_Gamma_UniswapV4_LimitOrders.pdf

Dolomite/2024-01-11_Dolomite.pdf

Animecoin/2025-01-18_Anime_Claimer_1.pdf

Cyfrin/Guardian - Cyfrin’s Attester & Resolver.pdf

Additional signals from the source:

  • A shallow clone during this pass surfaced roughly 150 public PDF reports across many project directories
  • The archive shows repeat engagements for some clients and a mix of DeFi, tooling, NFT, and infrastructure-related systems
  • The repo behaves like a reusable public corpus, not merely a single marketing sample

5) Invariant-testing blog post

Source: https://guardianaudits.com/blog/why-audited-teams-are-getting-hacked

Selected excerpts from the official post:

At Guardian we use a two team cross-checking audit model to limit human error in manual analysis.

But more importantly, we implement invariant testing (smart contract fuzzing) as a key security layer to give dependable vulnerability coverage which is not prone to the same human error as manual analysis.

Since working with Guardian and implementing strong invariant led Smart Contract battle-testing, GMX saw a 99% reduction in bug bounty payouts

You can implement the same invariant testing yourself, in your own development pipeline

Additional signals from the source:

  • The blog gives a much clearer read on Guardian’s worldview than the homepage alone: human-error reduction and invariant-led development are central themes
  • Guardian is not just selling fuzzing as a service; it is actively teaching teams to operationalize the method internally

6) Solidity Lab community / knowledge base

Source: https://raw.githubusercontent.com/GuardianAudits/SolidityLab/main/README.md

Selected excerpts from the official source:

Welcome to the Solidity Lab!

This is a community aimed at building and sharing a wealth of blockchain and solidity knowledge

An Encyclopedia containing information on all known Solidity attack vectors

An Encyclopedia containing information on all known common Solidity bugs

The Auditor’s Handbook, a collection of guides for all things auditing

Team up with others and participate in practice audits

Additional signals from the source:

  • Solidity Lab is a strong signal that Guardian is investing in a public education and talent-pipeline layer around auditing
  • That community footprint is one reason the firm looks bigger than a standard closed audit practice

Notes

  • Guardian Audits appears best cataloged as smart-contract security firm / dual-team audit-and-fuzzing infrastructure / public audit-report archive / security education community.
  • No canonical standalone whitepaper or litepaper surfaced in this pass.
  • The most useful primary sources were the homepage, case-studies page, public GitHub surfaces, the invariant-testing blog post, and the Solidity Lab README.

Graph View