French non-profit · founded 26 April 2026
AFBS is an independent French association founded on 26 April 2026. We study blockchains, weak random number generators and hardware wallets — from the chip to radio emissions — to produce verifiable knowledge, without ever holding your keys.
Wallet analysis chain
From threat to disclosure
Mission
One common thread: understand before promising, prove before publishing, protect before fixing.
Consensus, rollups, bridges, privacy, cryptography: we study what these systems really change, and where they break.
02 / VULNERABILITIESContracts, software clients (nodes), random number generators, firmware, supply chains: we look for the paths through which trust turns into loss.
03 / INNOVATIONAccount abstraction, zero-knowledge proofs (ZK), MPC, post-quantum: a feature is only finished once its security is understood.
04 / AUDITOur method tests signing flows, key management and interfaces, where a single mistake becomes final.
The observation
Amounts, uses and complexity have all changed scale. Users’ mental models have stayed the same. That gap is where losses live.
“A compromised key cannot be repaired. It can be prevented.”
AFBS working principle
Bridges, rollups, signers, extensions: every building block adds an attack path. Losses no longer come from code alone, but from interfaces, updates and keys.
It is where the user signs, approves and delegates. A misleading interface or a fragile backup is enough — with no cryptographic flaw at all.
Between marketing promises and highly publicised disasters, independent, reproducible and published research remains rare. That is precisely our ground.
Our approach
Four commitments that frame every project, every report and every public statement.
01 / INDEPENDENCE
We do not issue a digital asset and accept no funding whose payment would depend on a conclusion. A vendor whose product we audit does not fund the mission.
02 / EVIDENCE
Every finding is documented, tied to a version and, where possible, reproduced. No alert without evidence, no ranking without method.
03 / OPENNESS
Editorial content is published under the CC BY-SA 4.0 licence; the licence for tools will be specified at publication. Client reports remain confidential unless explicitly agreed.
04 / RESPONSIBILITY
We practise coordinated disclosure: a reasonable time to fix, and never a public exploit before users can be protected.
Wallet audits
A wallet audit is not about looking for a password. It is about mapping everything that can turn a legitimate signature into a definitive loss — and making those paths visible before they are taken.
Every engagement begins with a written scope and ends with coordinated disclosure. Audit engagements will open after the association has been constituted and declared with the préfecture.
2027 programmes
What software reviews do not see: the quality of the seed, and what the device lets out of its enclosure.
Boot entropy, firmware RNG, seed generation, signing nonces and BIP-32/39 derivation: a weak generator can make perfectly encrypted keys predictable.
Target deliverable · Statistical tests + reproduction
Electromagnetic emissions, Bluetooth, LTE/eSIM, supply-chain implants: we look for the channels through which a seed can leave a hardware wallet — or prove that it does not.
Target deliverable · RF map + scenarios
No accusation without a device, version and reproducible evidence. The programmes are detailed on the Research page; the CryptoBilis case and other reports are in Reports & audits.
Founder’s message
“Blockchain is entering everyday life faster than the tools to secure it. Our role is neither to promote a token nor to sell fear: it is to produce verifiable analyses — from the seed to the radio emission — publish them and help everyone keep control of their keys.”
Reception and analysis of beacon and time-signal stations from several countries — most recently NTSC at the Chinese Academy of Sciences — with complete reports (independent work).
