# Arcadia

> Arcadia is a software security and product development company securing financial technology and the future of money. We audit code, model economic attacks, run pentests, and respond to incidents for businesses, protocols, and foundations, and we build the systems we secure.

## Pages
- [Home](https://arcadia.agency/): Overview of Arcadia's security and product development work.
- [Security Consulting](https://arcadia.agency/security.html): Offerings, the AI-assisted auditing platform, and the full list of published audit reports.
- [Product Development](https://arcadia.agency/product.html): Matching engines, trading platforms, payment processing, and privacy technology built by Arcadia.
- [Outreach](https://arcadia.agency/outreach.html): Grants, public goods, and open-source projects.
- [Contact](https://arcadia.agency/contact.html): Get in touch about a security engagement or an active incident.

## Security offerings
- Security Audits: Blockchain, smart contract, and other production codebase audits, with remediation support.
- Economic Attack Modeling: Simulation of protocol attacks including flash loans and oracle manipulation.
- Systems Design: Mechanism design that keeps protocols and systems off weak foundations.
- Pentesting: From OWASP baselines to custom payloads, techniques, and in-house tooling.
- Incident Response: Response for exchange and protocol hacks, live exploits, ransomware, and full system downtime.
- Due Diligence: OSINT investigations, investment claims vs. reality analysis, and review of protocol dependency red flags.

## AI tooling
- Arcadia built a platform for AI-assisted auditing that represents a codebase across hundreds of dimensions at once (how money flows, dependencies, economic permutations, oracle manipulation, reachability), so an entire system can be interrogated rather than just its code.

## Published audits
- Machine-readable list of all published audits: https://raw.githubusercontent.com/TheArcadiaGroup/publications/main/audits.json
- Repository of published reports: https://github.com/TheArcadiaGroup/publications
- Selected clients: Stroom Network, Autopilot, Hourglass Foundation, PoolZ, NXD Protocol, Gemach DAO, Cover Protocol, Value DeFi, cVault Finance, LuaSwap, Six Network, OpenQ, FXDX, Immunefi.

## Open source
- ERC-5564 stealth address reference implementation: https://github.com/TheArcadiaGroup/ERC5564-contracts-reference
- AMM on SUI (Move): https://github.com/TheArcadiaGroup/AMM-for-SUI-contracts
- AMM on Casper: https://github.com/TheArcadiaGroup/casper-amm-core-clone
- Staking on Casper (Rust): https://github.com/TheArcadiaGroup/casper-staking-rewards-core
- Staking on SUI (Move): https://github.com/TheArcadiaGroup/Stake-farm-SUI-contracts
- Groth16 verifier for Casper (Rust): https://github.com/TheArcadiaGroup/groth16-casper-verifier
- Early implementation of Receiver Address Privacy (RAP) for Firo: https://firo.org/2021/06/09/introducing-receiver-address-privacy-for-firo.html

## Links
- LinkedIn: https://www.linkedin.com/company/the-arcadia-group/
- Twitter/X: https://twitter.com/TheArcadiaGroup
- GitHub: https://github.com/TheArcadiaGroup