An attacker trained
on your protocol.
For large protocols, foundations and exchanges: a dedicated attacker and auditor trained on your own programs, run continuously, with the reports it produces. Scoped and built with you.
Trained on your programs
The attacker every team gets knows Solana. Yours learns your protocol: its programs, its invariants and the way funds move through it.
Runs continuously
It attacks every change and every dependency update, and reports what it proves to your team and, when you want, to your auditors.
Built with you
We scope the engagement with your team, build the attacker against your programs and stay on it with you as the protocol evolves.
Scoped and trained with you,
then run for as long as you ship.
Scope
We map your programs together: which ones hold funds, how they interact and which invariants matter most. That is what the attacker has to learn.
Train
The attacker is trained on your protocol, so it reasons about your account model and your fund flows rather than generic patterns.
Run
It attacks every change across all of your programs and proves what it finds. Your team gets the findings and the reports; the founders stay involved.
Scope
4 programsvault
holds user funds
amm
calls vault
staking
calls vault, amm
governance
upgrades all four
Learning your protocol
TrainingAccount modeldone
Fund flowsdone
Invariantsin progress
Cross-program callsqueued
This week
across 4 programsamm → vault: price used before update
cross-program · exploit proven
staking: reward math rounds in favour of caller
invariant · exploit proven
governance: upgrade without timelock
patch merged
Who Move37 is for
Protocols where the value at risk justifies an attacker of their own.- Several programs that interact, where the exploit crosses program boundaries.
- Invariants specific to your design that a general attacker can't know.
The name is AlphaGo's move 37: the move no human would have played, and the one that won the game. That is the kind of exploit this attacker is for.
We take on a small number of Move37 engagements at a time. Book a call with a founder to talk about yours.