About Panoptes

What Panoptes is

Panoptes is an autonomous, invariant-directed security review service for critical code: smart contracts, bridges, light clients, zero-knowledge circuits, and the web2 identity, authentication and access-control systems around them. It reviews the way a specialist team would, invariant by invariant, rather than pattern-matching for known bug shapes, and one engine spans EVM, Solana, Move, Cosmos, Substrate, Bitcoin, ZK circuits and web2 access control.

What Panoptes deliberately is not

• Not an exploitation tool. Detection only. No exploit code, no proof-of-concept transactions, no autonomous on-chain action. Findings are analysed and reported, never executed.
• Not a formal-verification or certification body. A review is evidence about a codebase at a point in time, not a guarantee, and no finding count proves the absence of others.
• Not model output shipped raw. Every finding is human-triaged, and severity is calibrated by a human, not by the model alone.
• Not a public shaming channel. Findings go through coordinated, private disclosure to the affected party.

Track record

The same numbers shown on the homepage, from the same source.

128

Targets reviewed

250

Directed audit passes

209

Vulnerability classes

31

Ecosystems covered

24

Confirmed findings

Billions

Aggregate TVL reviewed

Who runs it

Panoptes is built and operated by Chris Zemmel, a German software developer and entrepreneur, as sole founder and engineer. The canonical description of him, his other work and the primary sources for it is zyric.de/about, which is also the entity this site's structured data references.

Panoptes is an independent product. It has a founder, not a parent company, and it is not part of a group with his other projects. Where the same person appears elsewhere, that is a shared author and nothing more.

Engagements and disclosure

Scoped reviews of contracts, bridges, ZK circuits or web2 access control are taken on a limited basis. For an engagement, or to report something you believe Panoptes should look at, write to [email protected]. Findings in third-party code are disclosed privately to the affected party first, always.

Official resources

• panoptes.me, the official site. There is no other Panoptes domain operated by this project.
• Legal notice, provider identification pursuant to § 5 DDG.
• Privacy and accessibility.
• LinkedIn and X, the operator's profiles, not separate Panoptes accounts.