# Protocols & Networks

> L1 and L2 systems, ecosystems, bridges, DeFi protocols, and on-chain products.

Canonical page: https://www.guvenkaya.co/solutions/protocols-networks

**Review your protocol before launch or upgrade.** We review contracts, runtimes, consensus, and bridges across EVM and non-EVM systems, and publish reports with client permission.

## When protocol teams bring us in.

- **Before a mainnet launch or upgrade**: Review once behavior is stable enough to test, while changes are still cheap.
- **When a bridge or integration changes what you trust**: A new dependency moves your trust boundary whether or not anyone redrew it.
- **After an incident or a near miss**: Reconstruct the failure path and check for related weaknesses.
- **Before an ecosystem or exchange review**: Review the system and address findings before an ecosystem or exchange assessment.

## Risks across the protocol stack

We review contract logic, runtime behavior, consensus, and cross-chain verification.

- **Contract logic & accounting**: Permissions, state transitions, accounting, upgrade paths, and economic assumptions.
- **Runtime & execution**: Virtual machines, gas and resource metering, host functions, and node client behavior.
- **Consensus & finality**: Validator incentives, safety and liveness, reorg handling, and upgrade coordination.
- **Bridges & cross-chain trust**: Message verification, relayer assumptions, replay, and what a compromised chain can claim.

## Engagement team

Specialists matched to your protocol stack and the layers in scope.

- **Michal Bajor**, Specialist Advisor: Exchange, funding, custody, API, web application, red-team, and L1 security.
- **Łukasz Mikuła**, Specialist Advisor: Offensive security, exploit development, mobile, infrastructure, and multi-ecosystem reviews.
- **José C. Ramírez**, Specialist Advisor: Smart contract, protocol, application, Rust, EVM, and AI-assisted security analysis.
- **Piotr Cielas**, Principal Advisor: Financial-services assessments, offensive security, risk leadership, CVEs, and patents.

## Relevant services

- [Smart Contract Security Reviews](https://www.guvenkaya.co/services/smart-contract-security-review.md): Start here for contract logic, permissions, accounting, and upgrades. Most of our published reports are this work.
- [Blockchain Protocol & Infrastructure Reviews](https://www.guvenkaya.co/services/blockchain-protocol-security-review.md): Use this when the risk is beneath the application layer, in runtimes, consensus, nodes, or bridges.
- [Cryptography Reviews](https://www.guvenkaya.co/services/cryptography-security-review.md): Use this when the risk is in a proof system, circuit, signature scheme, privacy protocol, or post-quantum design.
- [Secure Code Reviews](https://www.guvenkaya.co/services/secure-code-review.md): Use this for the off-chain code around the protocol: indexers, relayers, backends, and clients.

## Discuss your protocol review.

Describe the protocol, planned changes, and launch date. We will help define the scope and timing.

Discuss your scope: https://www.guvenkaya.co/contact