checkered background image

Blockchain Security and Smart Contract Audits

Home to some of the world's best smart contract security researchers, Cyfrin delivers industry-leading smart contract security audits. The world's biggest decentralized protocols and infrastructure providers chose Cyfrin’s professional audit team to assess their code.
Trusted by the biggest protocols and chains
Trusted by the biggest Web3 protocols
Supported Chains

Bringing security to every chain

Smart contract audit services

We protect protocols from the biggest threats

Cyfrin provides end-to-end smart contract security services to help organizations, and institutions protect users and assets from the billions of dollars lost annually to DeFi thefts.
$10B+
Protected TVL
25
Average Vulnerabilities Found
2 weeks
Average turnaround time
The audit process

What is a smart contract audit?

A smart contract security audit is a comprehensive process where one or more security researchers review a smart contract or protocol codebase to find, report, and mitigate critical security vulnerabilities that will disrupt your services.

1

Setup timelines and onboarding
Our engineers will estimate the timeline based on codebase complexity and size and open a line of communication.

2

Lock commit hash & start date
We agree on a start date and a commit hash to base our audit. To get the most out of a security audit, we recommend that this commit hash not change during the audit.

3

Audit begins
Our engineers will spend the allotted time on your contracts. We strongly recommend keeping an open communication channel between us and your engineers during this process.

4

Initial audit report
The initial report will explain each issue categorized as High, Medium, Low or Informational. We will set up a call with your engineers to ask questions about the findings.

5

Mitigation
Your engineers will have a chance to mitigate the findings using the recommendations in the report.

6

Final audit report
Once the mitigations have been applied, our engineers will check them and amend the issues on the report as "Acknowledged" or "Resolved" with any necessary extra information.
Cyfrin security

The most reliable way to enhance protocol security

We combine end-to-end blockchain security solutions with leading smart contract audits and researchers to reduce redundancies and maximize results.
Reduce exposure to threats
Mitigate risks before they escalate. Leverage the expertise of security researchers focused on identifying vulnerabilities in your protocols.
Assigned security team
Seamlessly integrate with a team of lead security researchers, dedicated to following best practices and assisting you throughout the audit.
Minimize redundancies
Access a full suite of audit services and lead smart contract auditors, combined to retain context at each step of the security process.
Level up your engineering team
Every smart contract audit comes with a detailed report and mitigation support to ensure your team is fully informed and up to speed.
Earn trust in the community
Show your commitment to the highest security standards and build trust with the global community.
Dedicated 24/7 support
Our team is available around the clock to assist with any questions or issues that arise, ensuring everything runs smoothly.
End-to-end coverage

Security solutions built on your needs

Whether you choose to have a private or open smart contract audit, you'll get:
Quickest turnarounds.
Industry-leading security auditors.
Dedicated 24/7 support and account manager.
Private Audits
Dedicated team
Get the attention and expertise you need.
Highest level of expertise
Mitigation support
Confidential reports
Fully dedicated, leading security team.
Open Audits
More eyes
Get access to a global pool of researchers.
Highest level of scrutiny and range of expertise
Lower cost per vulnerability
Generate attention within the community
Increase trust and educate the community about your protocol
Testimonials

We’re making protocols safer— but don’t just take our word for it

Here's a sneak peek into our previous smart contract audits and how we've helped secure tens of billions of dollars across blockchains and protocols.
Oku Trade
Enhancing the security of Oku Trade on-chain limit orders.
It was a pleasure to work with the Cyfrin team. Their approach to security and meticulous testing is exceptionally thorough. Additionally, their intimate knowledge of the Chainlink protocol made them particularly useful for our audit.
Getty Hill, Oku Trade Founder
Arrow pointing to the top right.
Our team

An all-star, world-class team

Home to some of the best smart contract security researchers in the market— professionals at Cyfrin come from backgrounds like Chainlink, Alchemy, Aragon, Worldcoin, Microsoft, and Google.
GFX
It was a pleasure to work with the Cyfrin team. Their approach to security and meticulous testing is exceptionally thorough.
Getty Hill
GFX CEO and Co-founder

Secure your protocol today

Join some of the biggest protocols and companies in creating a better internet. Our security researchers will help you throughout the whole process.
Support
FAQs
Can’t find an answer? Join our Discord or follow us Twitter.
This is some text inside of a div block.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

What is Cyfrin?
This is some text inside of a div block.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

What is a smart contract audit?
This is some text inside of a div block.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

How can I partner with Cyfrin to audit my protocol or codebase?
This is some text inside of a div block.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

How long do audits take?
This is some text inside of a div block.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

How much does a security review cost?
This is some text inside of a div block.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

What is a competitive audit?
Stay on the bleeding edge of security
Carefully crafted, short smart contract security tips and news freshly delivered every week.