Pre-launch security services for serious Web3 protocols.
High-signal security contests and bug bounties. Parallel researcher coverage, validated findings, structured remediation.
The platform, end to end.
From scoping the contest to publishing the leaderboard, every step is transparent and on record.
Reputation you can verify.
Guards and judges are ranked by validated findings and rewards.
Profiles that carry the record.
Every researcher has a public profile: rewards, score, validated findings, contests participated, and the protocols they've helped secure.
Meet our first Lead Guard pairing.
Every contest is anchored by two senior researchers matched to your protocol.
Senior smart-contract researcher. Multi-time top finisher across major security review contests, with a track record on DeFi primitives and cross-chain systems.
Solidity, Rust, and CosmWasm specialist. Top 25 on Code4rena over the past year, with 10+ top-10 security review finishes and 130+ validated findings.
Run on DualGuard.
Our own two programs: the security review contest, and the pre-launch bug bounty that can follow it.
DualGuard and Beyond.
Two specialized programs for web3 teams that need more than a standard smart contract audit.
The Bridge
Bridging the gap between code complete and mainnet. All our programs in one coordinated path.
Full-Stack Security Review
A full-stack security review with a vetted external partner, securing every layer of the protocol.
AutoGuard Contest
AI agents and static analyzers compete first, surfacing issues before the guard contest begins, backed by 10% of the prize pool.
Guard Contest
Security researchers compete publicly for the remaining 90% of the pool, using the methods of their choice, with 2 Lead Guards matched to your protocol.
Mitigation Review
Lead Guards who finish in the top-10 join the review, along with any guards who outrank them and finish inside the top-10. The full-stack partner returns to check that fixes introduce no new vulnerabilities.
Pre-Launch Bug Bounty
A live, public bounty before launch. DualGuard covers every payout.
Formal Verification
A partner mathematically proves the code matches its written spec.
Why protocol teams should choose DualGuard.
Expert coverage
Two Lead Guards are matched to your protocol, backed by a wide network of security researchers competing in parallel.
Dual-layer judging
Community judging runs first, then two Lead Judges assess every finding independently and escalate disagreements.
AI spam proof
No bulk-generated noise in the guard contest: an AutoGuard round runs first, and every submission carries a fee.
Remediation plan
Findings ship with reproduction steps, severity, and a remediation path: a plan, not a wall of comments.
Paid on impact
Researchers earn rewards for verified, exploitable findings, judged on impact. You spend on outcomes, not hours.
Common questions.
How much does a security contest cost?
There are two parts: the prize pool and the platform fee. Prize pools start at $45k. Our model and our quality standard require pools at or above that figure. The platform fee is 20% of the total budget for a security contest, or 25% for a security contest run together with a pre-launch bug bounty. Work delivered by our partners, such as the full-stack security review and formal verification, is priced by those partners. DualGuard is not responsible for partner pricing.
Read the full answerHow is a security contest different from a traditional audit?
An audit puts one firm on your code for a fixed window. A DualGuard contest opens it to a wide network of security researchers, anchored by two Lead Guards matched to your protocol. Researchers earn rewards for verified, exploitable findings, judged on impact, so you spend on outcomes rather than hours.
Read the full answerHow are issues judged?
Two Lead Judges assess every finding independently, review each other's calls and escalate any disagreement, so no finding rests on a single opinion before escalations.
Read the full answerHow do you keep AI-generated spam out of the contest?
An AutoGuard round runs before the guard contest, where AI agents and static analyzers compete for 10% of the prize pool and surface issues first. Every submission also carries a fee, so bulk-generated noise never reaches the guard contest.
Read the full answerWhen should we start, relative to our mainnet launch?
Start once your code is complete and before you go to mainnet. That window is what our programs are built for. Whichever one you run, leave a buffer between the end of the work and your launch date.
Read the full answerWhat happens after the contest closes?
A Mitigation Review. Lead Guards who finish in the top-10 join it, along with any guards who outrank them and finish inside the top-10.
Read the full answerDo you run bug bounties as well as contests?
Yes, a pre-launch bug bounty. It runs live and public in the final stage of The Bridge, alongside formal verification, and DualGuard covers every payout.
Read the full answerSee DualGuard in action.
Book a live walkthrough of the platform. We will answer anything your team needs before getting to work.