Security-First Web3 Consulting

Securing the protocols that move billions.

We're a security firm for the teams reshaping finance, governance, and digital infrastructure. Audits, monitoring, and formal verification, all built by auditors who became architects.

AUDITS SHIPPED
0
FORMAL PROOFS
0+
CLIENTS
0+
AaveLidoUniswapChainlinkOptimismArbitrumLayerZeroSafePendleMakerDAOFraxEigenLayerCelestiaAnchorageBase AaveLidoUniswapChainlinkOptimismArbitrumLayerZeroSafePendleMakerDAOFraxEigenLayerCelestiaAnchorageBase
01 · Position

From auditors to architects.

We don't just read your code. We help shape it. Six years of incident response, three dozen retainer clients, and a research team that publishes more than it tweets. The audit ends when you ship; our work keeps going.

Two independent teams on every engagement. Findings land in your repo as tracked issues with reproductions and regression tests. Watchtower starts monitoring the same contracts on the same day, and runs until you turn it off.

Our impact
Critical Findings
0+
↗ across 184 engagements
Products Built
0+
↗ audits · proofs · monitors
Blockchain Native Talent
0+
↗ security · tokenomics · dev
Clients & Partners
0+
↗ 40+ on active retainer
What we do

Two pillars. One operating system for Web3 security.

Pick what you need, or let us scope an end-to-end engagement that touches all three.

001
// SECURITY

Audits & Formal Verification

Two independent teams. SMT-backed proofs of critical invariants. Solidity, Vyper, Rust, Move, Cairo. Findings ship into your CI, not a PDF.

002
// ENGINEERING

Web3 Development

Protocols, cross-chain bridges, dApps, and infra, built by the same engineers who'd audit them. Ship faster without shipping vulnerabilities.

Our technology stack

The tools that power every engagement.

Static Analyzers

Slither Aderyn 4naly3er Semgrep CodeQL

Formal Verification & Symbolic Execution

Certora Prover Halmos Manticore K Framework hevm

Fuzzers & Property Testing

Echidna Foundry Fuzz Medusa LibAFL Gambit

Threat Detection & Monitoring

OpenZeppelin Defender Blocknative Forta Tenderly Watchtower (internal)

Smart Contract Languages

Solidity Vyper Rust Move Cairo CosmWasm

Frameworks & Runtime

Foundry Hardhat Anchor Substrate Node.js Go

Frontend & Web3

TypeScript Next.js Viem / Wagmi Ethers.js The Graph
Selected work

Real-world success stories.

All case studies →
2025 · Q3L2 ROLLUP

Opera Protocol

11-week audit of a fraud-proof rollup system using Certora-backed formal verification. Shipped with zero findings rated critical after remediation.

LOC
42k
FINDINGS
7 crit
DURATION
11 wk
2025 · Q1STABLECOIN

Meridian Stable

End-to-end engagement. 62 findings, full Watchtower integration, post-launch monitoring on a delta-neutral stablecoin protocol.

LOC
28k
FINDINGS
62
DURATION
14 wk
2025 · Q2POST-INCIDENT

Helix Perps

Emergency re-audit after a governance-adjacent exploit. Deployed Watchtower, wrote 38 invariants, co-ran the recovery multisig for 6 weeks.

INVARIANTS
38
RECOVERY
$12M
DOWNTIME
0 hr
Loved by partners & founders

What people say.

Thoughtfulness, attention to detail, and response times you can set your watch by.

"
BlockVigil didn't just churn out a report. They helped shape our protocol architecture from a security-first perspective. Rock-solid work.
TH
Taha Haq
Founder · Unipilot
"
Highly professional and thorough on our bridging solution audit. Innovative consulting on our TGE approach. Would recommend to any serious team.
DE
Daniel Enright
Head of Ecosystem · LightLink
"
Surpassed expectations, delivered punctually, and their input advanced our project materially. BlockVigil for comprehensive blockchain solutions.
DD
Daniel Dohne
CEO · Aramid
"
They engage with the code, not just look at it. Test the functions you actually care about. That's why they're our close audit partner.
ZR
Zain Rana
Founder · Dafi
"
The team met every deadline and was quick to respond. Thoughtful, detail-oriented, and invested in the outcome, not just the invoice.
RC
Ross Campbell
CEO · Kali DAO
FAQ

Questions we hear often.

How long does an audit take?+
Typical engagements run 4 to 14 weeks depending on codebase size, complexity, and whether formal verification is in scope. We provide a detailed timeline during scoping. Rush engagements are possible but not recommended.
Do you cover non-EVM chains?+
Yes. We audit Solana (Anchor + native), Move (Sui & Aptos), CosmWasm, Cairo (Starknet), and Substrate pallets. Each non-EVM engagement includes a platform specialist on the team.
What happens after the audit ends?+
Findings land in your repo as tracked issues with reproductions and regression tests. Watchtower can start monitoring the same contracts on the same day you ship. Retainer clients get a 30-minute incident-response SLA.
How much does it cost?+
We price per engagement based on scope, not by line of code. Ballpark: $15k for a focused single-contract audit, $60k+ for a full protocol with formal verification. Retainers start at $4k/month.
Can you help with tokenomics and launch strategy?+
Yes. Token engineering is one of our three pillars. We design incentive models, simulate under adversarial conditions, and co-author launch mechanics. Often paired with a security audit of the underlying contracts.
Do you publish reports?+
For public protocols, yes, with the client's consent and after remediation. Browse 184 published reports in our portfolio.
Locations
NYC · HQ
United States
201 Spear St.
New York, NY 10001
Singapore
Southeast Asia
79 Anson Road
Singapore 079906
Berlin
Europe
Torstraße 164
10115 Berlin, DE
Lisbon
Research
Avenida da Liberdade 110
1250-146 Lisboa

Not sure where to start?