THE ENGAGEMENT
What we reviewed
Fystack is a platform that simplifies full-stack Web3 development, enabling teams to build, deploy, and scale decentralized applications with integrated backend services, wallet infrastructure, and payment flows. The Apex Backend Audit was a post-launch hardening review of Fystack's backend service layer, covering API endpoints, authentication and session handling, checkout and payment flows, wallet signing and MPC message handling, webhook functionality, NATS messaging, MongoDB and PostgreSQL configuration, Docker deployment files, and CI/CD configuration. The audit identified 1 Critical, 9 High, 29 Medium, and 23 Low severity issues, alongside 12 enhancement opportunities. Fystack engaged actively throughout: the Critical finding and the majority of High-severity issues were remediated during the audit window.
SCOPE
Areas covered
HIGHLIGHTS
What the review found
Post-launch hardening review of the Apex backend service layer
The critical finding and most high-severity issues were remediated during the audit window
Structured remediation guidance delivered alongside the report
Findings by severity
Ship Safely.
Whether you're pre-launch or scaling post-TGE, we'll cover every layer; Code, infrastructure and/or operations.