The Burma Lab breaks smart contracts before attackers do.

The Burma Lab is my own security lab. I read protocol code, pull old hacks apart to see what really went wrong, and write up what I learn so other people can use it too.

There are two kinds of things here. The audit reports are public security reviews, and I back every finding with a proof of concept and check it again once the fix is in. The security research is everything else: how real attacks worked, the way I go about an audit, and the tools I use day to day. The whole thing is built and run by Khant Wai Yan Aung.