SERVICE / SMART CONTRACT AUDIT

Smart Contract Audits by Decurity

Decurity is a Tier-1 smart contract audit firm that has been breaking and defending onchain systems since 2017. Deep manual security review across EVM, Solana, TON, Stellar and Sui — delivered by a team, not a single reviewer.

REQUEST AN AUDITPUBLIC REPORTS150+ audits · $40B+ protected
WHAT WE AUDIT

Solidity / EVM

Ethereum, L2s and every EVM chain — DEXs, lending, stablecoins, bridges, restaking.

Solana / Rust

Anchor and native programs, SVM rollups, on-chain and off-chain components.

Vyper

Vyper contracts and mixed Vyper/Solidity systems.

FunC / TON

TON smart contracts and cross-chain messaging.

Move / Sui

Sui Move modules and novel Move implementations.

Consensus & off-chain

L1/L2 forks, relayers, bridges, staking, custody backends, dApps and wallets.

AUDIT METHODOLOGY
01

Pre-audit

Complexity and quality analysis of the codebase (files, SLoC, composability, test coverage, docs), review of past audits, and an intro call with your developers.

02

Blind contest

Phase 1: each auditor works individually and commits hashes of their findings — no groupthink, maximum coverage. We then sync, triage, and issue an intermediate report.

03

Collaborative audit

Phase 2: auditors share findings openly and go deep on the hardest issues, with per-bug incentives that keep the whole team hunting to the last day.

04

Re-test & final report

We review your fixes, re-test the remediation (typically 1–2 days), and deliver the final amended report.

TOOLING
  • +Manual review first — every auditor fully understands the protocol
  • +Slither + our open-source Semgrep rulepack (semgrep-smart-contracts)
  • +Foundry, Echidna and ityFuzz for fuzzing & invariant testing
  • +A custom agentic LLM workflow run at kickoff to clear trivial bugs

Typical audit: 1–2 weeks with a team of four auditors; re-test in 1–2 days.

RECENT AUDITS

A live view of Decurity's recent engagements. Public reports link straight to the PDF; confidential engagements are listed with scope and date only.

ENGAGEMENTSCOPEDATE
ConfidentialStablecoin · SolidityJune 2026
Symbiosis Finance (Depository Update)Bridge · SolidityJune 2026
Confidential (payment provider)Web2.5 · Solana · TONJune 2026
Confidential (CEX)Web2.5June 2026
Confidential (payment provider)Web2.5 · EVMMay 2026
Flap CurveStoreLaunchpad · SolidityJune 2026
ConfidentialLaunchpad · Rust · SolanaMay 2026
ConfidentialDEX · Bridge · SolidityMay 2026
Gearbox (Securitize Integration) Farming · Leverage · SolidityMay 2026
ConfidentialCEX · Web2.5May 2026
ConfidentialDEX · Cross-chain · Rust · StellarApril 2026
Flap DividendToken · SolidityApril 2026
ConfidentialRisk Assessment · Rust · SolanaMarch 2026
1inch (Aqua & SwapVM Update) DEX · SolidityFebruary 2026
ConfidentialStablecoin · HTLC · Cross-chain · Web2.5January 2026
Gearbox (KelpLRT Integrations) Farming · Leverage · SolidityDecember 2025
ConfidentialCEX · Web2.5December 2025
ConfidentialForex · Web2.5December 2025
ConfidentialAccount Abstraction · SolidityDecember 2025
Vooi (Staking)Staking · SolidityNovember 2025
Vooi (Token)Token · SolidityNovember 2025
Vooi (Frontend)Web2.5 · TypescriptNovember 2025
ConfidentialCEX · Web2.5November 2025
ConfidentialStablecoin · HTLC · Cross-chain · Web2.5November 2025
1inch (Aqua & SwapVM) DEX · SolidityNovember 2025
ConfidentialWallet · SolidityNovember 2025
Symbiosis Finance (Depository)Bridge · BTC · SolidityOctober 2025
Gearbox (Oracles Update)Farming · Leverage · SolidityOctober 2025
ALL PUBLIC REPORTS ON GITHUB

Ready for a smart contract audit?

Tell us what you're building and Decurity will reply with a quote and timeline.

REQUEST FORM