Understand the protocol
A vault's yield is only part of the decision. Trace where the funds go, who can change the contracts and what could prevent a withdrawal.
Before your team puts money onchain
A protocol may have an audit, a custody platform and alerts in Slack. Your team still needs to know what can happen to the position, who can act and what has actually been checked.
I put these guides together for trading firms, funds, treasury teams and protocol builders working through those decisions. Start with the question closest to the work in front of you.
Explore the guidesFollow the money and the permissions
Each guide walks through a specific situation, with a resource to help your team take the next step.
Check what is deployed
Follow the audit scope to the reviewed commit, the active implementation and the configured strategy. A changed strategy can leave important behavior outside the review.
Test wallet permissions
An approved router can still send proceeds to the wrong receiver. Test the full transaction, the order of policy rules and the remaining token allowance.
Make monitoring actionable
Decide what to watch, who gets the alert and what they can do when it arrives. Then test that the message reaches someone who can respond.
Limit signer access
A protected key can still approve dangerous requests from a compromised bot. Follow the request through the signer and contract, then plan how to remove access.
Have a position or integration to review?
Tell me what your team is planning, where you're in the process and when you need to make a decision. We'll discuss the review and scope that fits.