FEATURED PODCAST

November 19, 2025

Coinbase's audit standard: Internal security so strong externals find no criticals| Shashank Agrawal

Coinbase's audit standard: internal security so thorough that external firms find zero highs or criticals. This protects over $7 billion in Base TVL across multiple validation rounds.

We spoke with Shashank Agrawal, Senior Engineering Manager, Protocol Security at Coinbase. Internal teams audit first, then external firms. Rounds continue until only lows and informationals surface. The Base bridge got independent OP Stack validation despite Optimism's audits. "There is basically no room for error there. Absolutely zero room for error," Shashank explained.

Off-chain infrastructure gets equal priority: key management receives the same rigor as smart contracts since recent Web3 exploits increasingly target keys over on-chain code. Tabletop exercises simulate attacks across security, legal, and compliance teams to identify incident response gaps.

Listen to the full episode for their complete audit methodology and hiring framework.

Next Podcasts

More Web3 Security Insights