Olympix vs. AI

We run Olympix against frontier AI and publish every result

Each benchmark runs Olympix and a frontier AI model on protocols that professional reviewers have already audited, and counts how many of the published findings each one reaches. Every run ships with its corpus and results, so you can check the numbers and see how the gap moves from one run to the next.

Latest runrun 2026-10-15
ComparedBugPoCer vs. Opus 5.5
Audited codebases15
Published H/M findings160
Found by Olympix94
Found by Opus 5.553
Olympix recall59%

Why it matters

More real findings, each one proven

More of the real issues. A model on its own reasons about where code could break, and Olympix executes the paths to find where it does.

Proof with every finding. Each one arrives with an exploit trace and a proof of concept you can run.

Less time triaging. Engineering hours go to fixing confirmed issues instead of dismissing plausible-sounding ones.

A number you can check. Every run publishes its results and ground truth sources.

Latest benchmark15 Oct 2026

Olympix vs. AI

Olympix BugPoCer and Claude Opus 5.5 ran on the same fifteen audited EVM protocols. BugPoCer found 94 of the 160 published high and medium severity findings, and Opus 5.5 found 53.

Read the full report →
94/ 160

Olympix found 94 of the 160 issues professional reviewers published.

High and medium severity findings from published audit and contest reports across fifteen EVM protocols.

59%

recall for BugPoCer across all fifteen protocols

33%

recall for Opus 5.5 on the same corpus

+25.6 pts

recall gap across all fifteen protocols

+30.5 pts

recall gap on the Best 10 subset

SetView!TP, True Positive. BugPoCer considers the finding valid and proved it with a proof of concept and evidence.NFR, Needs Further Review. The finding contradicts a user-defined invariant, is valid but causes no monetary loss, or doesn't have a compiling proof of concept yet.FP, False Positive. BugPoCer concluded the finding isn't real or isn't exploitable. Counted in neither view.BugPoCerOpus 5.5Gap
Best 10TP73 / 118 (61.9%)37 / 118 (31.4%)+30.5 pts
Best 10TP+NFR78 / 118 (66.1%)38 / 118 (32.2%)+33.9 pts
All 15TP94 / 160 (58.8%)53 / 160 (33.1%)+25.6 pts
All 15TP+NFR101 / 160 (63.1%)54 / 160 (33.8%)+29.4 pts

Method

How every benchmark runs

The method stays the same from run to run, which keeps one result comparable to the next. As new frontier models ship, the AI side of the comparison moves to newer models, and every run states which model it used.

01

Start from a published review

Every protocol has already been through a public audit or audit competition with a published report. Ground truth is the high and medium severity findings in those reports, and none of them come from us.

02

Run both tools on the same code

Olympix and the AI model run on the same audited codebases, and every finding they report is checked against the published reviews.

03

Count independent matches only

A finding counts when a tool surfaces an issue the reviewers reported. Ground truth sources are published with every run so anyone can check the arithmetic.

Olympix and a frontier model

A model on its own vs. a model inside a system

Olympix uses frontier AI too. Inside Olympix, AI orchestrates a deterministic engine that executes the code until an invariant breaks, which is why each finding can arrive with a proof attached.

OlympixA frontier model on its own
How it looks for bugsInfers the invariants the code depends on, then executes paths until one breaksReads the code and reasons about where it could break
What a finding isAn exploit trace with the exact state transitions, validated with a proof of conceptA written description for someone to verify
What shapes the resultThe invariants and signals the engine derives from the codebase and its docsThe harness, the prompt and the context it's given
Where it stopsIt doesn't judge which risks your business can acceptIt needs a person or a separate step to confirm what it finds

Beyond the benchmark

Tested against real exploits too

Benchmarks against published findings measure how much a tool reaches. In a separate study we took every 2025 EVM hack with a smart contract issue at its root cause, fifty incidents in total, and assessed each one against Olympix with no additional intervention.

Read the 2025 exploit analysis →
49/ 50

2025 EVM hacks Olympix would have prevented at the time of the study, and updates since then cover the fiftieth

$240M

of losses in that scope preventable at the code level, based on the backtest

The three largest, all logic and access-control failures present before deployment

Balancer$121.1M
GMX~$42M
Cork Protocol~$12M

Archive

Every benchmark, on record

Each run is published with its corpus, ground truth sources and method, so the history shows how Olympix moves against frontier AI over time. Models and corpora can change between runs, so compare results with both in view.

Olympix recall by runPublished high and medium severity findings Olympix found, as a share of the total
100%50%0%
RunBenchmarkCodebasesFoundRate
15 Oct 2026LatestOlympix vs. AIBugPoCer vs. Opus 5.5 (53 / 160)1594 / 16068%Report →
Next runResults publish here when the run completes

Your codebase

See what Olympix finds on your own code

Send us a repo that's already been audited, and we'll run Olympix at the same commit and show you what comes back.