Composable Security

BACKGROUND

Please describe your company and position.

I am the Security Audit Facilitator of Lido

Describe what your company does in a single sentence.

The Lido Labs helps develop the Lido liquid staking protocol by facilitating contributors and other legal counterparts relations.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Composable Security to accomplish?

• Confirm that partial or delayed updates do not break the system, and that cross-vault consistency is maintained.
• Validate that the updated oracle logic accurately calculates each vault fees, ensure no vault can bypass fees, and prevents double counting.
• Ensure that fees within each vault are accounted for correctly and routed to the Lido DAO treasury.
• Identify security issues and potential threats both for Lido and their users.

SOLUTION

How did you find Composable Security?

• Referral
• Web3 Conference

Why did you select Composable Security over others?

• Good value for cost
• Referred to me

How many teammates from Composable Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Composable Security conducted a comprehensive security assessment of the off-chain components of the Lido V3 protocol upgrade. This included checking the entire codebase for bugs and vulnerabilities, modeling threats, assessing checks and balances, and examining the proposed upgrade process itself. The deliverables included the audit report (to be published shortly).

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The Composable Security team was very responsive, providing regular updates on the process, asking pertinent questions about the codebase, and holding weekly virtual meetings with the development team to keep Lido contributors informed.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

As a small team, Composable Security did an excellent job managing the project. They delivered everything they've promised on time and went above and beyond to arrange the timeline, so Lido was always aware of the current status of the engagement.

What was your primary form of communication with Composable Security?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The Lido Audits Committee struggled for a long time to find a strong audit service provider for our off-chain needs (unlike many great on-chain code researchers), and Cmposable Security was the first team to show consistently good results assessing the protocol's vital off-chain components.

Are there any areas for improvement or something Composable Security could have done differently?

The only concern from our side is that Composable Security is an extremely tiny team, which will make scaling for them difficult, resulting in limited capacity/availability at times.

BACKGROUND

Introduce your business and what you do there.

I’m the executive director of an IT company. We develop tools and incentive programs to support and empower positive contributors within the Filecoin ecosystem.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Composable Security to accomplish for Filecoin Incentive Design Labs?

We needed help with a security audit.

SOLUTION

What was the scope of their involvement?

Composable Security audited our smart contracts and provided a report.

What is the team composition?

We do not know how many teammates we worked with. 

How did you come to work with Composable Security?

Someone referred Composable Security to me. I chose them over other options because they had high ratings, their pricing fit our budget, and they offered good value for the cost.

What is the status of this engagement?

We worked together from July 2026–August 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Composable Security’s report identified issues in our smart contracts, which we fixed. We noticed improvements in our system’s security after implementing their recommendations. They found 2 high, 9 medium and 8 low severity issues, which all were either accepted design choices or resolved post audit. They also provided 12 recommendations. 

How did Composable Security perform from a project management standpoint?

They communicated well, finished on time, and were very patient with us. We primarily communicated via email and messaging apps.

What did you find most impressive about them?

Composable Security’s communication and efficiency were impressive.

Are there any areas they could improve?

No, there weren’t any.

BACKGROUND

Please describe your company and position.

I am the Chief Blockchain Officer of Prime Delta Corp.

Describe what your company does in a single sentence.

• Securities tokenization
• Stablecoin issuance
• Stock and crypto trading platform
• Decentralized exchange
• Blockchain

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Composable Security to accomplish?

• Ensure that smart contract code is written according to security best practices.
• Ensure that smart contract code is written according to security best practices.
• Identify security issues and potential threats both for PrimeDelta and their users.
• The secondary goal is to improve code clarity and optimize code where possible.

SOLUTION

How did you find Composable Security?

Online blog

Why did you select Composable Security over others?

Good value for cost

How many teammates from Composable Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Security review of a decentralized exchange.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We helped strengthen the protocol’s security by identifying and removing 21 issues from the codebase.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The team consistently meets deadlines, communicated effectively, and quickly addressed any issues or feedback.

What was your primary form of communication with Composable Security?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The cost was very low considering their high level of expertise.

Are there any areas for improvement or something Composable Security could have done differently?

Good job. We are really satisfied with their work.