https://xevry.xyz https://xevry.xyz/services https://xevry.xyz/methodology https://xevry.xyz/work https://xevry.xyz/research https://xevry.xyz/about https://xevry.xyz/contact https://xevry.xyz/credits https://xevry.xyz/work/erc4626-vault-inflation https://xevry.xyz/work/cross-function-reentrancy-staking https://xevry.xyz/work/spot-price-oracle-lending https://xevry.xyz/work/saas-api-bola https://xevry.xyz/work/jwt-algorithm-confusion https://xevry.xyz/work/ssrf-to-cloud-credentials https://xevry.xyz/work/ci-pipeline-secret-exposure https://xevry.xyz/work/eip712-signature-replay https://xevry.xyz/research/read-only-reentrancy 2026-10-14 https://xevry.xyz/research/rounding-is-a-security-decision 2026-09-29 https://xevry.xyz/research/bola-the-api-bug-scanners-miss 2026-09-08 https://xevry.xyz/research/ssrf-and-cloud-metadata 2026-08-19 https://xevry.xyz/research/hardening-oauth-redirect-flows 2026-07-28 https://xevry.xyz/research/anatomy-of-a-finding 2026-07-07 https://xevry.xyz/research/invariant-testing-with-foundry 2026-06-16