Request an auditDeFi Security Alliance library
Browse 33 resources: 6 original research reports, 4 archived documents, and 23 legacy company analyses.
No resources match these filters. Clear one or more filters and try again.
6 original reports · September 2026
Five provider dossiers and a comparative study. Each includes original observations, sources, limitations, a PDF, and a data download. Independent expert review is pending.
Original source-evidence research
A directory-wide access check and five purposive dossiers show why marketing claims, traceability and technical judgment need separate fields.
· v1.0
Original source-evidence research
Two PDFs linked from the audit service page offer scope and outcome evidence, but their age limits what they say about the team available today.
· v1.0
Original source-evidence research
The public API enables a reproducible completeness check, while its records and report narratives serve different purposes.
· v1.0
Original source-evidence research
The Kiln Lagoon vault report separates project coverage and fix review, but its resolution narratives require more care than a status total.
· v1.0
Original source-evidence research
A published Rust review provides scoped revisions and issue updates; its exclusions matter when assessing relevance to a new engagement.
· v1.0
Original source-evidence research
The service page describes a priced audit process. Public customer-report evidence was not established in this bounded check.
· v1.0
4 documents
These historical documents retain their original publication dates. Each has a local PDF and source details.
Audit report
Audit report
Audit report
Research paper
23 companies
Archived DSA company pages. Their page-check date is not a fresh technical assessment. See how sources, labels and corrections are handled in the directory methodology.
An OpenSwap finding marked fixed gives a reviewer a useful follow-up question: which exact revision implements the change? A project name and report date locate a document, but they do not uniquely identify the deployed bytecode. The MiniVerse example covers a different project and network; it should not be folded into a single undated claim about every deployment.
Research of the audit company Block Safu. The DSA expert team has performed an in-depth analysis of the Block Safu audit company. Read the full report
Explore our comprehensive review of Certora on DeFi Security Alliance, offering key insights to guide your smart contract auditor selection.
With a solid track record since 2017, ChainSecurity has been auditing smart contracts for blue-chip DeFi protocols, central banks, and Web3 projects.
Discover Insights: Analytical Report on Coinsult Audit Firm for Comprehensive Evaluation
ContractChecker will help you with everything from developing and auditing smart contracts to creating Launchpad, NFT Marketplaces and unique DApps. The ContractChecker Dapp also has utilities such as Multi Sender, Locker and Private Sale available to eve
ContractWolf provides smart contract audits, security and development services to ensure the safety and integrity of blockchain projects.
The UnclaimedSOL example is an initial Solana/Rust report with a named revision and file scope. It records one medium and six minor findings as unresolved in that version. A later project may have changed the code; the initial artifact alone cannot establish a fix. Request the final report and compare its scope with the proposed deployment.
Cyfrin bring smart contract audits, tools, and education to hundreds of thousands of users, partners, and blockchain protocols.
Discover DeFiMoon, a trusted auditing company with a growing portfolio. Their tools, media coverage, and expertise ensure your DeFi projects are secure.
DSA analysis of CertiK, including the company overview, listed services and evaluation criteria.
The ApeSwap IAZO artifact connects an initial revision to a recheck revision. Its outcome categories include resolved, partially resolved and acknowledged items. An acknowledged finding can remain relevant to a release decision even when a project accepts it. Read the affected behavior and compensating assumptions before treating the report as a closed checklist.
Explore our comprehensive review of Helborn on DeFi Security Alliance. Halborn is a blockchain security firm with full-stack security solutions.
Hashlock: Pioneering in blockchain security research to foster safe web3 innovation, reflecting core values.
The existing DSA API study found 1,042 smart-contract records with both repository and commit fields nonempty in a dated subset of 1,123. Field presence is not the same as a valid commit, reachable source or deployment match. The study separately recorded placeholder values and syntactic commit checks. Keep those tests distinct from a technical review of the code.
ImmuneBytes - a blockchain security audit firm with the goal of making the Web3 space more secure to build through innovative and effective solutions.
That observation cannot price a different codebase. A protocol with upgrade controls, external dependencies or a remediation round presents a different scope. Ask for the included contracts, excluded dependencies, reviewer roles and retest terms before comparing proposals. The bounded public-source pass did not accept a client report for this profile; that records the limit of this review, not an absence of PeckShield reports.
Discover the QuillAudits, a leading audit company, through our in-depth analysis.
A review of the audit company Rug Free Coins. The DSA expert team has performed an in-depth analysis of the RugFreeCoins audit company. Read the full report.
Sigma Prime is a blockchain security and research firm, born with the vision of conducting the comprehensive security research and applying it to the Blockchain industry to boost safe innovation.
SolidProof offers Smart Contract Audits, KYC support, and marketing solutions for diverse crypto markets, guiding and supporting cryptocurrency projects
The Hyperbolic Protocol page records dated updates around a named private-repository revision. The private scope is a material limit: a reader can inspect the published findings but cannot independently reproduce the full source comparison from the public page alone. Ask for authorized access to the reviewed revision before making a deployment-match claim.
Zokyo secures, builds, and funds legendary Web3 companies