Dedaub

Dedaub is a smart contract audit and security-tooling firm founded by program-analysis researchers Neville Grech and Yannis Smaragdakis. It combines manual audits with its own EVM bytecode decompiler and analysis platform. It fits EVM teams, especially in lending, stablecoins, restaking and Liquity-style CDP forks, that want a research-heavy two-auditor review and optionally monitoring afterwards. The strongest evidence-backed signal is its public audit index, which reports 179 public reports across 91 clients, and a decompiler built on the peer-reviewed, open-source Gigahorse framework.

At a glance

Founded	not verified on the firm's own pages (founders named on About)
Headquarters / jurisdiction	not published; the careers page says the team works "from home around the globe" (Careers)
Engagement model	Private firm audit, plus SaaS security tooling and monitoring
Core specialties	EVM DeFi audits, bytecode decompilation and static analysis, protocol monitoring
Ecosystems / languages	EVM (Solidity) evidenced in reports; Move/Aptos research published; audit index claims 37 chains (audits index)
Public report index	dedaub.com/audits; also GitHub Dedaub/audits
Open-source tooling	Gigahorse (underpins the decompiler); smaller CLIs in github.com/dedaub
Published pricing	Audits: not published. Decompiler API: published tiers from $4,800/year (Decompiler)

What they do

The homepage lists smart contract audits, "focused expertise" (architecture review, protocol design advisory, gas optimization), operational security and Web3 monitoring. It also lists products: the Security Suite, the decompiler, token-risk detection, custom monitoring and a transaction firewall.

The audit page describes a two-phase review. Auditors first model the system through legitimate use, then try to subvert it, with "each researcher examin[ing] 100% of the code" and supported by the Security Suite's "over 100 static analysis algorithms, AI, and automated fuzzing." The July 2026 methodology post adds that engagements are run by two senior auditors who challenge each other, and that an engagement "ends with a remediation round in which fixes are re-verified." Report publication is at the client's discretion: the audit page cites public reports alongside private engagements.

Specialties and ecosystem coverage

The audits index header on 2026-09-24 read: 179 public reports, 360+ total audits, 91 clients, 37 chains. Other pages give lower figures: the homepage says "300+" audits and "160+ public reports", and the About page says "over 200". These are the firm's own figures and were not independently counted. The index tags recent work as Liquity V2 forks (Hann Finance, Flare Finance, Ebisu), EIP-4626 vaults, Chainlink CCIP integrations, EigenLayer AVS middleware (Infura) and BLS-signature oracle work (eOracle).

The directory lists Ethereum, Polygon, Arbitrum, Optimism and Base. EVM coverage is well evidenced; per-L2 coverage was not mapped. Dedaub has published Move research, including an Aptos reentrancy deep dive (blog, Sept 2025). The June 2026 "0x Sol Settler" title suggests Solana work (0x page), but this pass did not open a non-EVM report to confirm the language. The directory's "static-analysis" and "decompilation" tags are well supported.

Recent public work

From the audits index list view (sorted by last update), accessed 2026-09-24:

1. 0x Sol Settler — 22 Jun 2026; 0x has five public Dedaub reports, including Settler (Jan 2026) (0x page).
2. IO NET — 11 May 2026; tokenomics/payments/registry contracts (IO NET page).
3. Yuzu Money — 9 Feb 2026; stablecoin / EIP-4626 (index).
4. Enso — 2 Feb 2026; Enso Shortcuts, CCIP integration (index).
5. Hann Finance — 30 Dec 2025; Liquity V2 fork (index).
6. Flare Finance — 2 Dec 2025; lending and liquid staking (index).
7. aPriori — 21 Nov 2025 (index).
8. Ebisu — 23 Oct 2025 (index).
9. Infura — 4 Sep 2025; EigenLayer AVS middleware (index).
10. eOracle — 28 Aug 2025; six reports (index).

The index also marks as featured Liquity (May 2025), EigenLayer (Apr 2025), Ethereum Foundation (Apr 2025), Lido (2023) and Chainlink (2022).

Research, tooling and methodology

• Decompiler. Dedaub says its decompiler is "built on and extending the Gigahorse research decompiler" (Decompiler). Gigahorse is a public repository led by Neville Grech that states it underpins the decompiler at app.dedaub.com and lists peer-reviewed papers from 2018 to 2025 (Gigahorse). The hosted decompiler has a free individual tier and a paid API. Dedaub reports receiving about $10,000 in matching from TheDAO Security Fund's first quadratic-funding round in 2026, which it used to improve AI-assisted bytecode reconstruction (blog, Sept 2026).
• GitHub. The Dedaub org has 19 public repositories as of 2026-09-24 (count shown on the org page), including the audits archive and CI actions for its Security Suite. The audits repo holds older reports for clients such as GMX, Lido, Liquity, Yearn, Chainlink and the Ethereum Foundation.
• Research. Recent blog topics include Ethereum gas-model research (EIP-7864), EIP-1153 transient storage impact, and a discussion of transaction firewalls.
• Team. The About page says most team members hold relevant PhDs and describes Grech as "lead author of MadMax."
• Severity scheme. Report pages use Critical, High, Medium, Low and Centralization categories (IO NET page). No written definitions were found.

Track record and incidents

No reputable post-audit incident naming Dedaub as auditor of the exploited code was found in this pass. rekt.news names Dedaub in other roles. It credits Dedaub, Venn Security and SEAL 911 with a 36-hour war room against the "CPIMP" proxy-hijack attack in 2025 (rekt.news: USPD). It also cites a Dedaub transaction trace in its Zunami analysis (rekt.news: Zunami II).

Who should consider them — and who might look elsewhere

The strongest public evidence is EVM DeFi, particularly Liquity V2 forks, lending, stablecoins/vaults, restaking middleware and oracle systems. Teams that also want bytecode-level analysis or post-deployment monitoring from the same vendor get both from one firm. Teams on Solana, Move or other non-EVM stacks should ask for comparable public reports first, because this pass found research but not confirmed non-EVM audit reports. Teams that need published audit pricing or fixed turnaround will need to request a quote.

How to engage

Use the Request an Audit form linked from the site header, or book a demo for tooling. Be ready to share the codebase at a fixed commit, documentation of intended behaviour (the methodology's first phase depends on it), and deployment chains. Plan for a remediation round.

Gaps and unverified claims

• The firm's own pages do not state a founding year. The directory's 2018 comes from third-party profiles only.
• Headquarters is not published.
• The directory's notable audits (Uniswap, Euler, Olympus DAO, Stargate, Angle Protocol) were not found. Client pages at the obvious URLs returned 404, they are absent from the GitHub audits repo, and they do not appear on the index's first page. They may be private engagements.
• The firm's audit counts are inconsistent across pages (160+, 179 public; 200+, 300+, 360+ total).
• The directory's team size (20+) and turnaround (4–8 weeks) are not published by the firm.
• The directory calls the decompiler "open-source tooling". The underlying Gigahorse framework is public, but the hosted Dedaub decompiler is a free/paid service.

Sources

1. Dedaub homepage — accessed 2026-09-24
2. Dedaub audits index — accessed 2026-09-24
3. About Dedaub — accessed 2026-09-24
4. Careers — accessed 2026-09-24
5. Smart contract audit service page — accessed 2026-09-24
6. Blog: How smart contracts are audited (Jul 2026) — accessed 2026-09-24
7. Decompiler product page — accessed 2026-09-24
8. Gigahorse toolchain (GitHub) — accessed 2026-09-24
9. Dedaub GitHub org — accessed 2026-09-24
10. Dedaub audits repo (GitHub) — accessed 2026-09-24
11. Dedaub blog index — accessed 2026-09-24
12. Blog: Reentrancy in Aptos Move — accessed 2026-09-24
13. Blog: TheDAO Security Grant and the decompiler — accessed 2026-09-24
14. 0x reports page — accessed 2026-09-24
15. IO NET report page — accessed 2026-09-24
16. rekt.news: USPD — accessed 2026-09-24
17. rekt.news: Zunami Protocol Rekt II — accessed 2026-09-24