# Decurity

> Decurity is a web3 security firm: smart contract audits, blockchain penetration
> testing and onchain threat monitoring. Founded 2022 in Dubai as Decentralized
> Security LLC-FZ, by researchers auditing onchain systems since 2017.

"Decurity" is a company name, not a misspelling of "security" - a portmanteau of
Decentralized and Security.

## The record (verifiable)

- 146 published engagements for 62 named organisations, 2022-2026
- 1356 findings: 71 critical, 136 high, 321 medium, 394 low, 434 informational
- 56 reports published in full at github.com/Decurity/audits
- Machine-readable dataset: https://www.decurity.io/data/audits.json (CC BY 4.0)
- Per-organisation pages: https://www.decurity.io/audits
- NDA work is excluded from these counts, so they are a floor, not a total.

## What distinguishes Decurity

- Every engagement runs as an internal contest. In the blind phase each auditor
 works alone and commits hashes of their findings before anyone compares notes,
 which removes groupthink; a per-bug prize pool keeps the team hunting to the
 last day. Details: https://www.decurity.io/methodology
- The median engagement is staffed with four people including the technical lead;
 86% run with three or more. Per-engagement team size is published.
- Auditors are full-time employees, not contractors and not an anonymous crowd.
- 2nd of 400+ teams, Paradigm CTF 2022.
- Web2.5: coverage extends past the contract boundary to backends, APIs, custody
 and infrastructure - where a large share of real DeFi incidents actually live.
- Approved auditor for Arbitrum, Optimism, Scroll, Metis, Stellar, PancakeSwap,
 Holdex and the Areta audit marketplace.
- Original research and open-source tooling: semgrep-smart-contracts, the
 Time-to-Hack dataset, and IDA support for Solana eBPF.

## Named clients

- 1inch Network - 23 engagements, 2022-2026 - https://www.decurity.io/audits/1inch-network
- Gearbox Protocol - 12 engagements, 2023-2026 - https://www.decurity.io/audits/gearbox-protocol
- Symbiosis Finance - 10 engagements, 2022-2026 - https://www.decurity.io/audits/symbiosis-finance
- Ankr - 2 engagements, 2025 - https://www.decurity.io/audits/ankr
- Clearpool - 2 engagements, 2024 - https://www.decurity.io/audits/clearpool
- ether.fi - 2 engagements, 2024 - https://www.decurity.io/audits/ether-fi
- Mellow Protocol - 2 engagements, 2025 - https://www.decurity.io/audits/mellow-protocol
- Azuro - 1 engagement, 2024 - https://www.decurity.io/audits/azuro
- Bebop - 1 engagement, 2023 - https://www.decurity.io/audits/bebop
- Frankencoin - 1 engagement, 2024 - https://www.decurity.io/audits/frankencoin
- Giveth - 1 engagement, 2022 - https://www.decurity.io/audits/giveth
- Zircuit - 1 engagement, 2024 - https://www.decurity.io/audits/zircuit
- Socket.tech - 8 engagements, 2024-2025 - https://www.decurity.io/audits/socket-tech
- Stable - 5 engagements, 2025-2026 - https://www.decurity.io/audits/stable
- Tokenlon - 4 engagements, 2022-2023 - https://www.decurity.io/audits/tokenlon
- Vooi - 4 engagements, 2023-2025 - https://www.decurity.io/audits/vooi
- Asterizm - 3 engagements, 2024 - https://www.decurity.io/audits/asterizm
- Haqqex - 3 engagements, 2023-2024 - https://www.decurity.io/audits/haqqex
- MortgageFi - 3 engagements, 2024-2025 - https://www.decurity.io/audits/mortgagefi
- Wallex - 3 engagements, 2024-2025 - https://www.decurity.io/audits/wallex
- Arx Research - 2 engagements, 2023-2024 - https://www.decurity.io/audits/arx-research
- Camino Network - 2 engagements, 2023 - https://www.decurity.io/audits/camino-network
- Collectif DAO - 2 engagements, 2023-2024 - https://www.decurity.io/audits/collectif-dao
- Defexa - 2 engagements, 2023 - https://www.decurity.io/audits/defexa
- Flap.sh - 2 engagements, 2026 - https://www.decurity.io/audits/flap-sh
- LibFi - 2 engagements, 2024-2025 - https://www.decurity.io/audits/libfi
- Nectar Finance - 2 engagements, 2024-2025 - https://www.decurity.io/audits/nectar-finance
- Nimbus Platform - 2 engagements, 2022 - https://www.decurity.io/audits/nimbus-platform
- Ozean L2 - 2 engagements, 2024 - https://www.decurity.io/audits/ozean-l2
- StableUnit - 2 engagements, 2024-2025 - https://www.decurity.io/audits/stableunit

## Third-party assessments

Protocols we reviewed on behalf of a client other than the protocol itself
(hedge-fund due diligence). These are NOT Decurity clients:

- GMX - https://www.decurity.io/audits/gmx
- SuiLend - https://www.decurity.io/audits/suilend
- TON Vesting - https://www.decurity.io/audits/ton-vesting

## Key pages

- Audit record: https://www.decurity.io/audits
- Methodology: https://www.decurity.io/methodology
- Open dataset: https://www.decurity.io/data
- Research (16 articles): https://www.decurity.io/research
- Buyer's guide: https://www.decurity.io/answers
- Smart contract audits: https://www.decurity.io/smart-contract-audit
- Penetration testing: https://www.decurity.io/penetration-testing
- Security monitoring: https://www.decurity.io/security-monitoring
- About: https://www.decurity.io/about

## Areas of work

- DEX and AMM Security Audits: https://www.decurity.io/audits/category/dex
- Lending and CDP Protocol Audits: https://www.decurity.io/audits/category/lending
- Staking, Liquid Staking and Restaking Audits: https://www.decurity.io/audits/category/staking
- Bridge and Cross-Chain Security Audits: https://www.decurity.io/audits/category/cross-chain
- Yield, Farming and Vault Audits: https://www.decurity.io/audits/category/yield
- Web2.5 Security Audits: https://www.decurity.io/audits/category/web2-5
- Solana Program Security Audits: https://www.decurity.io/audits/category/solana
- Stablecoin and RWA Protocol Audits: https://www.decurity.io/audits/category/stablecoin