Oak Security primary sources — 2026-05-03

Project status in this pass

• No canonical standalone Oak Security whitepaper or litepaper surfaced.
• The clearest current source of truth is the official site, the Oak GitHub organization, the public audit-reports repository, and the public resources repository.

Primary-source snapshots

1) Official site

• URL: https://oaksecurity.io/
• Key excerpt:
  • The site says Oak Security offers audits, penetration testing, training, and advisory.
  • It highlights “600+” completed engagements and pushes visitors toward published reports.
  • This matters because Oak presents public reporting as a core part of its operating model rather than a side effect of client work.

2) GitHub organization

• URL: https://github.com/oak-security
• Key excerpt:
  • The org description says Oak offers security auditing and cyber-security advisory services with a special focus on third-generation blockchains.
  • Helpful because it confirms the company treats GitHub as part of its public operating surface, not just a marketing redirect.

3) Public audit-reports repository

• URLs:
  • https://github.com/oak-security/audit-reports
  • https://raw.githubusercontent.com/oak-security/audit-reports/main/README.md
• Key excerpt:
  • The README says the repository hosts public audit reports produced by Oak Security, an independent blockchain and smart contract security firm.
  • It says Oak has completed 600+ security audits across DeFi, Layer 2 infrastructure, cross-chain bridges, privacy systems, and more.
  • It also says reports are published after both Oak and the project team agree the audit is complete and all findings have been addressed.
  • The stack taxonomy spans EVM, CosmWasm, Cosmos SDK, bridges, Polkadot/Substrate, Soroban/Stellar, Gno, Rust, ZK systems, rollups, Flow, Solana, Move, and offchain TypeScript.

4) Public resources repository

• URLs:
  • https://github.com/oak-security/resources
  • https://raw.githubusercontent.com/oak-security/resources/main/README.md
• Key excerpt:
  • The README says the repo collects resources related to security advisory and auditing, including interviews, talks, podcasts, and written articles.
  • It links a multi-layered audit methodology explainer, “what is an audit?” material, Ethereum and CosmWasm audit checklists, ecosystem-specific conference talks, and incident-focused writeups.
  • This is strong evidence that Oak packages reusable security education and methodology, not just one-off client deliverables.

Working conclusion

Oak Security is best cataloged as multichain security infrastructure with a strong public knowledge layer. The decisive signal in this pass was the combination of a large first-party audit corpus, stack-by-stack classification, publicly linked methodology and checklists, and incident-oriented educational material.