sherlock.xyz
The leading web3 audit platform — private audits, contests, AI analysis, and bug bounties. 1000+ audits, $250B+ TVL protected and 11,000+ security researchers.
Category and goals: Security & Risk · Protocol Security · Audit Tools
Protocol Security
Evaluate DeFi/protocol security
Protocol Security tools
18 tools, most popular first
forta.org
Powered by the most advanced AI detection model, Forta Firewall integrates with protocols and rollups to prevent over 99% of hacks.
Category and goals: Security & Risk · Transaction Simulation · Protocol Security · Security Alerts — Chains: Multichain
octane.security
Find exploitable vulnerabilities missed by manual code review and security scanners. Octane’s AI-native application security traces real attack paths across your codebase.
Category and goals: Security & Risk · Smart Contract Scanner · Protocol Security
peckshield.com
PeckShield is a blockchain security company that provides auditing and security services for crypto protocols.
Category and goals: Security & Risk · Protocol Security
cantina.xyz
The community-driven agentic security platform that closes every security loop, from first discovery to verified fix.
Category and goals: Security & Risk · Smart Contract Scanner · Protocol Security
slowmist.com
SlowMist is a threat intelligence firm specializing in blockchain ecosystem security, established in January 2018. The firm was founded by a team with over ten years of network security experience. Our goal is to make the blockchain ecosystem as secure as possible for everyone. We are now a renowned international blockchain security firm that has worked on various well-known projects such as HashKey Exchange, OSL, MEEX, BGE, BTCBOX, Bitget, BHEX.SG, OKX, Binance, HTX, Amber Group, Crypto.com, etc. SlowMist was awarded the “Cyber Security Excellence Contribution Award” at the Cyber Security Professionals Awards 2025, presented by the Hong Kong Police Force (CSTCB). In addition, our AML tracking and analytics platform MistTrack received the Gold Award in FinTech (RegTech: Regulatory and Risk Management) at the HKICT Awards 2025. Our extensive work in cryptocurrency crime investigations has been cited by international organizations and government bodies, including the United Nations Secur
Category and goals: Security & Risk · Smart Contract Scanner · Wallet Security · Address Risk Check +1 more
hacken.io
Hacken provides independent, continuous security and compliance assurance for financial institutions and the critical systems they rely on.
Category and goals: Security & Risk · Smart Contract Scanner · Contract Risk Analysis · Protocol Security +1 more — Chains: Ethereum · Solana · Multichain — Pricing: Contact Sales
code4rena.com
After 5 years of securing DeFi, Code4rena is closing its doors. Active competitions and bounties are being seen through to completion.
Category and goals: Security & Risk · Protocol Security · Audit Tools — Chains: Ethereum · Solana · Cosmos
openzeppelin.com
OpenZeppelin is the security standard for onchain finance: the smart contracts, standards, and security services behind the industry's most critical systems.
Category and goals: Security & Risk · Protocol Security · Audit Tools — Chains: Ethereum · Solana
certik.com
CertiK, the largest Web3 security service provider, uses AI and formal verification to protect and monitor smart contracts and protocols, securing the Web3 ecosystem.
Category and goals: Security & Risk · Protocol Security · Audit Tools — Pricing: Contact Sales
quillaudits.com
QuillAudits, a leading blockchain security auditor with 1500+ audits, protects your project with smart contract audits, pentesting & dual code reviews
Category and goals: Security & Risk · Smart Contract Scanner · Wallet Security · Protocol Security +2 more — Chains: Multichain
blockaid.io
Trusted by chains, protocols, wallets, exchanges, banks, and digital asset managers to understand and secure what matters most.
Category and goals: Security & Risk · Scam Detection · Transaction Simulation · Protocol Security +1 more — Chains: Ethereum · Base · Polygon · Avalanche +1 more
quantstamp.com
A global leader in blockchain security, Quantstamp has secured billions in digital assets and is trusted by web3's most notable projects.
Category and goals: Security & Risk · Contract Risk Analysis · Protocol Security · Audit Tools
immunefi.com
Crypto and DeFi teams use Immunefi to find critical vulnerabilities before attackers do. An Audit Competition puts the code in front of Immunefi's researchers before launch, and a Bug Bounty Program keeps it there once the code is live. Managed Triage saves engineering hours by removing duplicates and spam and taking on the analysis and escalation, so the team only looks at what is really important. 93% of post-launch critical crypto vulnerabilities disclosed through bug bounty platforms come through Immunefi. Researchers on Immunefi surface more than 40 confirmed critical vulnerabilities every month.
Category and goals: Security & Risk · Protocol Security · Audit Tools
certora.com
Industry-leading formal verification tools and smart contract audits.
Category and goals: Security & Risk · Smart Contract Scanner · Protocol Security · Audit Tools — Chains: Solana · Sui
diligence.consensys.io
Smart Contract Audits for Ethereum protocols and institutions. Supercharged by AI agents, guided by veteran experts.
Category and goals: Security & Risk · Smart Contract Scanner · Protocol Security · Audit Tools — Chains: Ethereum
hypernative.io
Real-time threat detection, automated response, and fraud prevention for digital assets. Protect $100B+ in assets across 75+ chains with <0.001% false positives
Category and goals: Security & Risk · Wallet Security · Address Risk Check · Transaction Simulation +2 more — Chains: Multichain
sec3.dev
Secure your Solana protocol with Sec3. Trusted across 200+ protocol engagements, with deep expertise in formal verification, Rust security, and an 8x DEF CON CTF finalist team.
Category and goals: Security & Risk · Smart Contract Scanner · Protocol Security · Audit Tools +1 more — Chains: Solana
Know a tool we missed? Suggest a tool for Protocol Security