0xnazgul/blockchain-security-audit-list

A list of Blockchain Security audit companies, solo auditors and location of public audits.

Blockchain Security Audit List

A list of Blockchain Security audit companies, solo auditors and where to find all their public audits. This list also contains security news sources and findings search utilities/DBs.

Table of contents

• Blockchain Security Audit List
  • Audit Companies
  • Solo Auditors
  • Blockchain Security News
  • Comprehensive List of Hacks & Exploits
  • Findings Search Utilities/DBs
  • Contributing

Audit Companies

Audit Company	Audits
0xGuard	Link
ABDK Consulting	Link
Ackee Blockchain	Link
Arbitrary Execution	Link
Beosin	Link
Blaize	Link
BlockApex	Link
BlockchainLabs	Link
BlockSec	Link
Byterocket	Link
Callisto Smart Contract Audits	Link
CD Security	Link
Certik	Link
Certora	Link
ChainLight	Link
Chain Safe	Link
Chain Security	Link
Chainsulting	Link
Code4rena	Link
CoinFabrik	Link
Coinspect	Link
Composable Security	Link
ConsenSys Diligence	Link
CredShields	Link
Cyfrin	Link
Cystack	Link
Decurity	Link
Dedaub	Link
Distributed Lab	Link
FuzzingLabs	Link
G0 Group	Link
Gauntlet (Economic Audits)	Link
GuardianAudits	Link
Guardian Solidity Lab	Link
Hacken	Link
HALBORN	Link
Hacxyk	Link
HashEx	Link
Hexens	Link
Immunebytes	Link
Inference AG	Link
InformalSystems	Link
Inspex	Link
InterFi	Link
Iosiro	Link
Jakub Wojciechowski	Link
Kalos	Link
Kebabsec	Link
Least Authority	Link
Macro	Link
MixBytes	Link
MoveBit	Link
Nethermind	Link
New Alchemy	Link
Numen	Link
Oak Security	Link
Omniscia	Link
OpenZeppelin	Link
OtterSec	Link
Oxorio	Link
PaladinSec	Link
Pashov Audit Group	Link
PeckShield	Link
PepperSec	Link
Pessemistic	Link
Quantstamp	Link
Quantum Brief	Link
QuillAudits	Link
Rapid Labs	Link
RD Auditors	Link
REDTEAM.PL	Link
RugDog	Link
Runtime Verification	Link
Sec3	Link
Secbit Labs	Link
Secure3	Link
SharkTeam	Link
ShellBoxes	Link
Sherlock	Link
Shieldify	Link
Sigma Prime	Link
SlowMist	Link
SmartState	Link
SmolQuants (Economic Audits)	Link
Soken	Link
Solidified	Link
Solidity Finance	Link
SolidProof	Link
Somish	Link
Spearbit	Link
Statemind	Link
TechRate	Link
Tech Audit	Link
Trail Of Bits	Link
Truscova	Link
Trust Security	Link
Verichains	Link
Veridise	Link
Verilog Solutions	Link
yAcademy	Link
yAudit	Link
Zellic	Link
Zokyo	Link

Back to top

Solo Auditors

Auditor
Adrian Romero
Akshay Srivastav
bytes032
Dirk Brink
George Hunter
GiuseppeDeLaZara
HollaDieWaldfee
Jakub Heba
MiloTruck
Sparkware
xiaoming9090
Zobront

Back to top

Blockchain Security News

• Blockchain Threat Intelligence
• HashingBits
• Immunefi
• Security Pills (Mix of both web2 & web3)
• Web3 Security Watch
• Web3Sec News
• Week in Ethereum News

Back to top

Comprehensive List of Hacks & Exploits

• Cryptosec DeFi Hacks
• DeFi Fork Bugs
• Defi Hack Analysis
• DeFiHackLabs
• DeFi POC
• DefiLlama
• Hack Analysis POCs
• OpenZeppelin Post Mortems
• Phalcon Security Incidents
• QuillAudit's Hackerboard
• Rekt Leaderboard
• SlowMist Hacked
• Smart Contract Hack POC

Back to top

Findings Search Utilities/DBs

Great tools for looking for more specific findings

• Audit Hero
• ConsenSys Blockchain SecurityDB
• Masamune
• Public Audit Reports Data
• Solodit
• tintinweb smart-contract-vulndb
• Tomo's Findings Database
  1. Medium Severity
  2. High Severity

Back to top

Contributing

Want to add some? Don't be afraid to contribute anything I might have missed. The only requirement I ask is that the company has public audit reports.

Back to top

blockchain-security-audit-list's Issues

Change the gogo name to George Hunter, he wants the world to forget about gogo

Recently GoGo changed his profile name to George Hunter so I urge you to change his name in this repo too.

Reference about his wish

https://x.com/GeorgeHNTR/status/1753470737120182729?s=20

How to handle solo auditor reports?

Could a separate table listing solo auditors and their reports be created below the main table of audit companies?

I would expect someone will make a list of solo auditor reports at some point, so it might be easier to include that list here instead of a new repository. What approach do you prefer?

add sharkteam

Name: SharkTeam
Reports: Link
Description: The World’s Leading Web3 Security Service Provider.

Omniscia Company Correction

Omniscia is a security company that actually performs audits, they do not reference any other firm's audits.

Reference : Methodology for determining "notable"

Great list, but what criteria have you used to determine they are "notable" ? I am unable to find a quantitative resource and the README.MD has no indications about it ?

From OpenZeppelin: Well done on C4's leaderboard!

Hey, I'm with OpenZeppelin helping build our tech teams. I would imagine you're comfortable doing what you do now considering your standing on Code4rena's leadearboard - in the spirit of being thorough with my job, though, I wanted to gauge your interest in potentially joining our audit/research team and audit with some of the biggest web3 protocols in the ecosystem. If not, no worries and thank you for all that you contribute to the space 🙂

add QuillAudits as a Smart Contract Auditing company

You can take a look at the site here - QuillAudit

It is a Smart Contract auditing company comprising of a large global community.

Can I work on this issue?