Full-stack review
Smart contracts plus everything that talks to them: backends, bridges, relayers, signing services. One reviewer, one report.
Smart contracts · Off-chain systems · Penetration tests
Everything in scope.
Smart contract audits, and penetration tests of everything around them: backends, bridges, relayers, signing services, wallet infrastructure. Done by me personally. Every finding comes with a severity, a reproduction and a fix.
- In security since
- 2018
- Independent since
- 2024
- Engagements
- 80+
- Based in
- Germany, working worldwide
About
Kauz is Dominik Muhs. From 2020 to 2023 I audited at Consensys Diligence; since 2024 I work independently. I also work white-label for other audit firms, brought in as a specialist when an engagement needs one. Before security I built backends, security tooling and SaaS products, and worked on applied cryptography and large-scale data analysis.
Selected clients
Independently: Puffer, Everclear, Hyperlane, Across, Web3Auth, Request Finance, zkLighter
At Consensys Diligence: Arbitrum, EigenLayer, Rocket Pool, 1inch
Reports are public where the client allowed it. All of them are linked on the work page.
Services
Code reviews
Python, TypeScript, Go, and Rust. Smart contracts in Solidity and Rust. Cryptographic implementations.
Penetration tests
Gray box and black box. External attack surface, malicious insiders, incident response testing.
Threat modeling
For a whole company or a single component. Guidance for system hardening and effective incident response. Also available as a workshop.
Operational security
For companies, DAOs and HNWIs. Advisory work, not paperwork.
How an engagement works
- Scope. Send a repo, a deployment or a description. I reply within two business days with questions or a fixed quote. Scoping is free.
- Review. Most engagements take one to three weeks. You get interim findings for anything Critical or High as soon as I confirm it, not at the end.
- Report. Every finding comes with an in-depth explanation, severity, steps to reproduce and a fix recommendation. Depending on the size, one round of mitigation review is included.
- Publish. If you want the report to be public, I will link it from the work log.
Fixed price per scope, quoted before we start. Most reviews land between $5k and $12k. Day rate on request for retainers. Earliest start is usually two to four weeks out.
Research
Some of my time goes into security research on software everyone depends on. Findings are disclosed responsibly and written up where the vendor allows.
Recent:
- MetaMask Portfolio: Injection vulnerability enabling phishing attacks via the official domain
- bracex: CVE-2026-63185 (High, 7.5)
- bracex: CVE-2026-62981 (High, 7.5)
- bracex: CVE-2026-62980 (High, 7.5)
- Matomo: Stored XSS admin takeover (Medium, 6.4)
Full list on the work page.