ZK AND BEYOND

We love niche languages

We’ve audited code in Solidity, Vyper, Solana Rust, CosmWasm, Go, Aptos Move, Sui Move, JavaScript, Circom, Halo 2 and more.

$36.82B+On-chain TVL secured
120+Projects audited

Trusted by teams building the next generation of crypto

Public audit reportsFormally verified the Aptos stdlibSolana · EVM · Sui · Aptos · Cosmos · NEAR

FAQ

Language and ZK questions

Which languages do you cover?

Solidity, Vyper, Solana Rust, CosmWasm, Go, Aptos Move, Sui Move, JavaScript, Circom, Halo 2 and more, plus Web2 frontends and backends in JavaScript, Rust and Python.

Do you work beyond the major chains?

Yes. We love niche languages and have worked with teams on Optimism, Arbitrum, Polygon, Algorand, Stellar, Sei, StarkNet and more.

Is it only manual review?

No. Different systems call for different techniques. Pentesting, formal verification and fuzzing are core disciplines, and we pick the mix that fits yours.

What happens after the report?

We’re not done when your report ships. We stay close with our clients, support their communities and build long-term relationships around stronger security.

Do we wait for the final report to see findings?

No. After kickoff we share findings as they emerge and ask questions as needed. The final report collects our findings and suggestions for fixes.

HOW WE AUDIT

How it works

  • 01

    Talk it through

    A first conversation about what you’re building, when you need it secured and what worries you most.

  • 02

    Look at the code

    We sign an MNDA and read the in-scope repositories before committing to anything.

  • 03

    Agree the scope

    You get a quote sized to duration, likely vulnerabilities and overall complexity. No guesswork.

  • 04

    Findings as they land

    Once we kick off, issues reach your team as we find them, not weeks later.

  • 05

    Report and fixes

    A final report with every finding and our suggestions for fixing it.

GET IN TOUCH

Bring us your hardest code

Tell us what you’ve built. We’ll look at the repositories in scope and come back with a quote.

Start the conversation