Securing Yourcode.

Autonomous agents break your code, prove it, and ship the fix on day one. Built by the winners of DARPA AIxCC.

Latest research.

Original vulnerability research from QED. Every bug first found by AI.

Deep Dive • Jun 2026

A $47.43M Loophole in THORChain

QED found two related bugs in THORChain: an authz.MsgExec ante bypass that lets any EOA inject phantom pool balances ($47.43M net profit), and a reference-read deposit that credits Asgard while Bond/Reserve/THORName handlers run unbacked.

Case Study • May 2026

QED x Commonware

A joint look at how QED helps Commonware fix subtle vulnerabilities before it reaches production.

Deep Dive • May 2026

Hijacking dYdX v4 oracle feeds

A string-comparison bug in dYdX v4 could let an attacker rewire perp oracles and steal against $1.2M of open interest.

Case Study • May 2026

Two bugs in Jolt

QED found a soundness bug and a completeness bug in a16z's zkVM, Jolt.