Secure and Prove
A co-hosted program run with Dowsers. A DualGuard contest and mitigation review come first, then Dowsers specify and prove the critical properties of the contracts that matter most. Adversarial review and machine-checked proofs answer different questions, and this runs both.
Why both methods
A security review is strong at finding the unexpected: attack paths nobody specified, edge cases, implementation mistakes. Formal verification is strong at proving that a stated property holds across every valid execution of the system.
Neither substitutes for the other. A proof says nothing about a property you did not think to state; a review cannot tell you a property always holds. Run together they cover both sides of that gap.
How the program runs
AutoGuard contest. Agents and static analysers review the agreed contract scope first.
Guard contest. Researchers review the same scope and submit findings, which DualGuard validates and assesses for severity.
Mitigation review. Your team addresses the validated findings, and DualGuard reviews the fixes.
Formal verification with Dowsers. Dowsers specify and prove the critical properties of the selected contracts, focusing on the invariants and safety assumptions that matter most to how the protocol is designed.
What can be proved
The properties depend on your design and the agreed scope. Common ones are access-control constraints, accounting and solvency invariants, and limits on minting, withdrawals or state transitions.
Every proof holds under stated assumptions. Those assumptions are written down and handed over with the result, because a proof whose assumptions you cannot see is not worth much.
When it fits
This is the right program when core contracts protect meaningful user funds, when the maths and the flows are complex enough that reasoning about them informally is unreliable, or when the protocol has strict safety properties that must always hold.
What you receive
A security review report with validated findings, a formal verification report covering the proved properties, and clear guidance for remediation and follow-up review.
The DualGuard contest and bug bounty are priced as usual. Work delivered by Dowsers is priced by Dowsers.
Scope it with us.
Tell us what you are shipping and when you launch. We come back with scope, timeline and a price, usually within two working days.