Layer Labs, the team behind WAVS (Web Assembly Verifiable Services) runtime, has achieved a ‘Secure’ rating following a comprehensive smart contract audit by Hashlock. WAVS is the base layer for building smarter verifiable applications: dynamic and lightweight, modular and composable, and scalable across EVM and multichain deployments.
WAVS lets developers compose off-chain compute with on-chain verification to build AI agents, custom oracles, indexing, serverless functions, bridges, and more across ecosystems.
Hashlock approached architecture first: model the registry’s trust boundaries and failure modes. Code second: a manual, competition-level, line-by-line review of the core WAVS registry contracts with targeted automated checks to pressure test assumptions.
As Hashlock tried to break what matters in the real world: upgrade paths, admin surfaces, and state transitions. Findings were delivered with severity, proof of impact, and fix paths.
After remediation, Hashlock verified the changes and assigned a “Secure” rating. The public audit page documents the scope and outcomes.
As the first public review of the WAVS registry in September 2025, this audit establishes a clear security baseline for Layer’s WAVS architecture, with additional scopes planned to reinforce the platform as it scales.
You can find the reports here: https://hashlock.com/audits/layer-labs
About Hashlock:
Hashlock is a leading Web3 security firm specializing in smart contract auditing and blockchain cybersecurity. Our mission is to ensure the safe adoption of blockchain technology through rigorous audits and comprehensive security services.
Website: https://hashlock.com/
X: https://x.com/Hashlock_
LinkedIn: https://www.linkedin.com/company/hashlock/
About Layer:
Layer is a software development company building the future of decentralized computation. Layer’s Web Assembly Verifiable Services (WAVS) is the base layer for building verifiable applications making it easy to build across onchain and offchain environments across any chain. With WAVS, developers can build deterministic AI agents, oracles, incentive mechanics, and DeFi apps.
Layer Website: https://www.layer.xyz/
WAVS Website: https://www.wavs.xyz/
WAVS Github: https://github.com/Lay3rLabs
Layer X: x.com/LayerOnEth
WAVS Developer X: https://x.com/WAVS_WAVS_WAVS
Telegram: https://t.me/layer_xyz
