Announcing our strategic partnership between Oak Security and Range
We are proud to announce a strategic partnership to further increase the security in the IBC ecosystem between Oak Security and Range.
Oak Security offers security auditing and cyber security advisory services with a special focus on third-generation blockchains such as the Cosmos SDK and CosmWasm, Polkadot and Substrate, Solana, NEAR, and Flow (Cadence) ecosystems. We also serve Ethereum and EVM-compatible ecosystems through our brand Solidified. Across both brands, Oak Security has performed more than 350 audits. Of these, more than 40 audits have been performed of Cosmos SDK chains and more than 120 audits have been performed of CosmWasm smart contracts. We have been trusted by some of the most active builders in the Cosmos ecosystem.
Our comprehensive audits with our signature blinded approach are an important step to improve the security of projects. Nevertheless, we advise clients to undertake a more comprehensive approach to security by taking security into account at all stages of the software development lifecycle. This includes extensive testing (unit, integration, end-to-end and fuzz testing, where appropriate), formal verification, internal code reviews, strict deployment processes, regular audits through multiple teams, monitoring and alerting, and defensive architecture design that allows for rate limiting and circuit breakers.
Range builds security tools and infrastructure for the IBC ecosystem. Its real-time monitoring and alerting platform allows the detection of unusual activity and exploits. Range is further building transaction simulation and mempool monitoring tools in order not just to detect but also to prevent security incidents.
Under our partnership, our auditors will use their domain knowledge from the audit to define valuable invariants and monitoring rules for the client. These client-specific invariants and rules can then be created within the Range product, which allows clients to monitor their deployed code effectively. This allows for a more comprehensive security coverage along the product lifecycle, further reducing security risks and preventing exploits.
We are excited about this partnership as it serves our customers to further improve security practices!
