๐ฅ๐ฒ๐บ๐ผ๐๐ฒ | ๐๐๐น๐น-๐๐ถ๐บ๐ฒ
๐ช๐ต๐ผ ๐๐ฒ ๐ฎ๐ฟ๐ฒ:
Parapet Labs is a smart contract security firm. We protect DeFi and Web3 protocols that hold real money, by finding the flaws before an attacker does. Our work covers EVM and SVM code review, AI-assisted scanning, protocol design review and fix verification.
We are small on purpose and senior-only. Every engagement is led by experienced auditors, and nobody works on a client's code who is not ready to put their name on the findings.
๐๐ผ๐ ๐๐ฒ ๐๐ผ๐ฟ๐ธ:
Quality is the whole product, so quality is how we operate.
โข ๐ฆ๐ฒ๐ป๐ถ๐ผ๐ฟ ๐ฒ๐๐ฒ๐ ๐ผ๐ป ๐ฒ๐๐ฒ๐ฟ๐ ๐น๐ถ๐ป๐ฒ. No juniors on client code, no handing the real review to a checklist.
โข ๐๐ถ๐ป๐ฑ๐ถ๐ป๐ด๐ ๐ฏ๐ฒ๐ณ๐ผ๐ฟ๐ฒ ๐๐ต๐ฒ ๐ณ๐ถ๐ป๐ฎ๐น ๐ฟ๐ฒ๐ฝ๐ผ๐ฟ๐. When a critical bug is confirmed, the client hears the same day. It is never saved up for the final report.
โข ๐ฅ๐ฎ๐ป๐ธ๐ฒ๐ฑ ๐ฎ๐ป๐ฑ ๐ฎ๐ฐ๐๐ถ๐ผ๐ป๐ฎ๐ฏ๐น๐ฒ. Every finding is severity-ranked and comes with a fix the team can ship.
โข ๐ช๐ฒ ๐ฟ๐ฒ-๐ฐ๐ต๐ฒ๐ฐ๐ธ ๐๐ต๐ฒ ๐ณ๐ถ๐
๐ฒ๐. We review each patch before the client ships.
โข ๐ฃ๐ฟ๐ผ๐ผ๐ณ ๐ผ๐๐ฒ๐ฟ ๐ฐ๐ฟ๐ฒ๐ฑ๐ฒ๐ป๐๐ถ๐ฎ๐น๐. We care what you have found and shipped, not where you studied or who you worked for.
It is a high-standards environment. The bar is high, the feedback is direct, and the people around you are strong. If you like being pushed by good peers, you will like it here.
๐ง๐ต๐ฒ ๐ฟ๐ผ๐น๐ฒ:
You own the line-by-line review of client codebases and write the findings that teams act on. You will go deep on unfamiliar protocols, build a model of how the system can be attacked, and turn what you find into a report a founder can act on under launch pressure.
๐ช๐ต๐ฎ๐ ๐๐ผ๐ ๐๐ถ๐น๐น ๐ฑ๐ผ:
โข Lead manual reviews of production smart contract code, mostly Solidity on EVM.
โข Map attack paths across a protocol: access control, accounting, oracle and price logic, upgradeability, integrations, and economic edge cases.
โข Write clear, severity-ranked findings with proof of concept and a recommended fix.
โข Raise critical issues with the client the same day you confirm them.
โข Re-review client fixes and confirm they close the issue without opening a new one.
โข Hold the line on review quality for the work you touch.
๐ช๐ต๐ฎ๐ ๐๐ฒ ๐ฒ๐
๐ฝ๐ฒ๐ฐ๐ ๐ณ๐ฟ๐ผ๐บ ๐๐ผ๐:
โข 3+ years reviewing production EVM code in Solidity.
โข ๐ฃ๐ฟ๐ผ๐ผ๐ณ ๐๐ต๐ฎ๐ ๐๐ผ๐ ๐ณ๐ถ๐ป๐ฑ ๐ฏ๐๐ด๐: audit contest placements, bug bounty payouts, or published reports we can read.
โข You read unfamiliar codebases fast and think in attack paths, not checklists.
โข You write findings a founder can act on under launch pressure: precise, honest about severity, no filler.
โข You are comfortable owning your conclusions and defending them to a client or a peer.
โข You can work independently and remotely, and communicate clearly in writing.
๐ ๐ฝ๐น๐๐ ๐ถ๐ณ ๐๐ผ๐ ๐ต๐ฎ๐๐ฒ:
โข SVM / Solana (Rust, Anchor) review experience.
โข Experience with fuzzing, invariant testing or formal verification (Foundry, Echidna, Medusa, Certora, Halmos).
โข Experience reviewing DeFi primitives: AMMs, vaults, bridges, restaking.
โข Previous work as a protocol developer or on a protocol security team.
โข Public write-ups, post-mortems or research under your own name.
๐ช๐ต๐ฎ๐ ๐๐ผ๐ ๐ด๐ฒ๐ ๐ณ๐ฟ๐ผ๐บ ๐๐:
โข Fully remote work with a small team of senior security people.
โข Real protocols and real stakes: complex DeFi and Web3 systems that manage serious value.
โข A quality-first culture where you are given the time to do the review properly.
โข Direct feedback from peers who can actually read your work.
โข Competitive compensation.
