Sample audit report — see how a Hackerbane report is structured. Open the report →

Arbitrum security review

Arbitrum is an Ethereum layer-2 built on the Nitro stack, running Solidity contracts alongside Stylus programs written in Rust or C. Hackerbane audits your Arbitrum contracts, retryable tickets, and Stylus programs across One, Nova, and Orbit chains.

What we review

Solidity on Nitro is most of the work. Stylus widens the surface: a Rust program next to an EVM contract, two interfaces, one pool of funds. Retryable tickets fail in ways a plain layer-2 call does not, and we trace each path.

  • Layer-2 contracts and their upgrade keys.
  • Retryable ticket creation, redemption, and the tickets nobody redeems.
  • Stylus programs in Rust or C.
  • Services that redeem tickets or sign Stylus calls.

Stylus coverage

Stylus programs get the same depth as the Solidity next to them, with our Rust review methods applied at the WASM boundary. Both sides of the interface, and the funds they share, land in one report.

Next step

Request an audit

Share your repo, which Arbitrum chain you deploy on, and your timeline – we'll propose an audit plan and estimate. Mention Stylus if you ship it.