Quantstamp
Quantstamp is a blockchain security firm founded in 2017 that audits smart contracts, infrastructure, and economic exploits for Web3 protocols, serving 250+ enterprise clients including Ethereum Foundation, Aave, Polygon, and Visa, with revenue from audit fees and a regulated smart contract insurance subsidiary.
- Company typePrivate
- Founded2017
- HeadquartersSan Francisco, United States
- Headcount51–100
- GTM typeB2B
- OfferingServices
What Quantstamp does
Quantstamp is a blockchain security company founded in 2017 by Richard Ma and headquartered in San Francisco, operating as a remote-first organization with team members distributed across 15+ countries. The company provides security services for the Web3 ecosystem — primarily smart contract audits, infrastructure penetration testing, and economic exploit analysis — serving enterprise clients including the Ethereum Foundation, Polygon, Arbitrum, Aave, Compound, Maker, OpenSea, Visa, Chainlink, Lido, Curve, and Kiln. As of the available data, Quantstamp has conducted 1,300+ audits for 250+ clients and claims to have secured $200B–$500B in digital assets depending on the source and metric definition.
Quantstamp's core offering is structured around a multi-auditor methodology that allocates a minimum of three audit engineers per project — a model the company describes as unique among audit firms. The audit stack combines proprietary automated tooling with manual code review spanning formal verification, static analysis, and an Economic Exploit Analysis tool developed with researchers to detect flash loan attack vulnerabilities across EVM chains. Coverage extends across 60+ blockchain ecosystems and supports smart contracts, Layer 1 and Layer 2 blockchains, DeFi protocols, NFT marketplaces, exchanges, and off-chain web infrastructure (API security, cloud configuration, mobile and web applications). The company runs active content and community channels including a monthly Security Beat threat report and a public verification portal at certificate.quantstamp.com.
Quantstamp's revenue model is primarily professional services: top-tier audit engagements are priced at approximately $25,000 per engineer-week, with final pricing varying by codebase complexity, documentation quality, and communication requirements. The model extends into managed services and insurance through the Chainproof subsidiary — the world's first regulated smart contract insurer, licensed by the Bermuda Monetary Authority — which offers smart contract hack coverage, slashing insurance for proof-of-stake validators, and staking yield guarantees. Ancillary revenue streams include DeFi Protection (user loss compensation), post-deployment monitoring resold via partners such as Hypernative, and engagement through the Ethereum Foundation's Trillion Dollar Security audit subsidy program.
Quantstamp firmographics
Firmographics- Name
- Quantstamp
- Legal name
- Quantstamp
- Website
- https://quantstamp.com
- Company type
- Private
- Founded year
- 2017
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Quantstamp is a blockchain security firm founded in 2017 that audits smart contracts, infrastructure, and economic exploits for Web3 protocols, serving 250+ enterprise clients including Ethereum Foundation, Aave, Polygon, and Visa, with revenue from audit fees and a regulated smart contract insurance subsidiary.
- Ownership category
- akta.pro rank
Quantstamp industry classification
Industry- Product category
- Blockchain Security Services
- SIC
- Services-Testing Laboratories (8734)
- akta.pro primary industry
- Smart Contract Auditing & Formal Verification (FSAPAJAA)
- akta.pro secondary industries
- Security Testing Tooling (SAST/DAST for smart contracts, fuzzing) (FSAPAJAK), Digital Asset Risk, Security & Audit Tooling (Smart Contract Audit, Threat Monitoring) (FSAGAMAJ), Monitoring, Observability & Incident Response (alerts, traces, runtime monitoring) (FSAPABAJ)
Keywords
Where Quantstamp is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
Quantstamp business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations
Revenue model
- Smart Contract Security Audits: Professional auditing services for smart contracts, L1s, L2s, DeFi protocols, NFT marketplaces, exchanges, and infrastructure. Pricing based on engineer-weeks with top-tier engagements at approximately $25,000 per engineer-week. Revenue recognized as one-time project fees with follow-up audit opportunities when protocols upgrade.
- Infrastructure Penetration Testing: Security reviews for Web2/Web3 infrastructure including API security, cloud configuration, mobile applications, and web applications. Complements ISO 27001 and SOC 2 compliance efforts.
- Economic Exploit Analysis: Specialized analysis service for detecting flash loan attack vulnerabilities, accessible to both deployed and un-deployed protocols across EVM chains.
- Chainproof Insurance: World's first regulated smart contract insurer offering smart contract insurance, slashing insurance for proof-of-stake validators, and staking yield guarantees for institutional clients.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Professional Audit Engagement |
Go-to-market motion2 records
Distribution channels4 records
Marketing channels6 records
Quantstamp product offering
Product offeringCore offering
Quantstamp is a blockchain security company that provides smart contract security audits, web3 infrastructure penetration testing, and economic exploit analysis for blockchain protocols, DeFi platforms, and Layer 1/Layer 2 networks. Each audit engagement allocates a minimum of three audit engineers who use proprietary automated tooling combined with manual code review to identify vulnerabilities. The company also offers Chainproof, the world's first regulated smart contract insurance product licensed by the Bermuda Monetary Authority.
Product overview
Quantstamp offers a comprehensive security-as-a-service platform for the Web3 ecosystem. The core offering centers on Smart Contract Audits, where a minimum of three dedicated audit engineers review client codebases using a combination of proprietary automated tooling and manual auditing. This core audit service is complemented by Infrastructure Audits for penetration testing of off-chain components, and Economic Exploit Analysis to detect flash loan attack vulnerabilities. The platform extends through ancillary modules: Chainproof Insurance (Bermuda-regulated smart contract insurance), DeFi Protection (user compensation for DeFi losses), and the Audit Readiness Guide (preparation resources). The company also publishes the Security Beat, a monthly threat intelligence report covering crypto exploits and supply chain attacks. All services are accessible through a request-for-audit intake process, with public audit reports verifiable via the certificate portal.
Differentiator
Problem solved
Functional benefit
Products and services
- Smart Contract Audits Expert Web3 security assessments covering smart contract code review, vulnerability identification, and security recommendations. The flagship service involving manual and automated code analysis by at least three dedicated audit engineers per project. Targets smart contracts, L1s, L2s, DeFi protocols, NFT marketplaces, exchanges, and infrastructure.
- Infrastructure Audits
Companies that use Quantstamp
Customer profileNamed customers20 records
Segments5 records
Ideal customer profiles4 records
Quantstamp technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability2 records
Feature5 records
Quantstamp partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered core and supporting.
- Ethereum FoundationcoreParticipating provider in Ethereum Foundation's $1 million Trillion Dollar Security audit subsidy program, offering up to 30% coverage of audit costs for Ethereum mainnet projects. Program falls under Ethereum Foundation's broader security initiative and includes 20+ audit firms as providers.
- BlockpasssupportingPartnership for Chainproof (Quantstamp's insurance subsidiary) providing KYB (Know Your Business) compliance services. Blockpass integration accelerates KYB and sanctions screening for Chainproof's smart contract insurance, slashing insurance, and yield guarantee products.
- TokucoreStrategic partnership with Toku to enhance Web3 security and payroll practices. Toku offers workforce and global token payments/earnings management solutions, with the partnership aimed at improving compliance and security in Web3 payroll operations.
- AretasupportingPartnership with Areta for Ethereum Foundation audit subsidy program marketplace, with Nethermind and Chainlink as additional partners.
- NethermindsupportingPartnership with Areta for Ethereum Foundation audit subsidy program marketplace alongside Quantstamp and Chainlink.
- ChainlinksupportingPartnership with Areta for Ethereum Foundation audit subsidy program marketplace alongside Quantstamp and Nethermind.
- Crypto Council for InnovationsupportingCollaborating on development of standardized audit frameworks for the crypto industry.
- Code4renasupportingContest platform partner for community-driven security efforts alongside Sherlock.
- SherlocksupportingContest platform partner for community-driven security efforts alongside Code4rena.
Scale indicators10 records
Recent moves6 records
Expansion highlights6 records
Quantstamp competitors and assessment
Company assessmentDirect peers
- OpenZeppelin: OpenZeppelin is a leading smart contract security firm offering audits, formal verification, and security tooling for EVM-based protocols. It competes head-to-head with Quantstamp on DeFi, L2, and token audits for a similar enterprise customer base.
- Trail of Bits: Trail of Bits is a well-capitalized security research and smart contract audit firm known for static analysis tools (Slither) and formal verification work. It directly competes with Quantstamp on enterprise crypto audits and infrastructure security reviews.
- Certora: Certora specializes in formal verification of smart contracts using its Certora Prover, a methodology that overlaps directly with Quantstamp's formal verification capability. It targets the same DeFi and L1 protocol customers seeking mathematical correctness guarantees.
- Halborn: Halborn is a blockchain security firm providing smart contract audits, penetration testing, and incident response for Web3 protocols. It competes with Quantstamp across DeFi, L1/L2, and infrastructure security engagements.
- Zellic: Zellic is a security research firm specializing in smart contract audits and cryptography work, with a strong academic talent base. It is a direct competitor to Quantstamp on Web3 audit engagements, particularly for newer L1 and L2 protocols.
- Spearbit: Spearbit is a security audit collective connecting top independent smart contract auditors with protocols. It overlaps with Quantstamp's audit services and competes for the same DeFi and infrastructure customer RFPs.
- ChainSecurity: ChainSecurity is a smart contract audit firm (acquired by PwC) known for formal verification work on major DeFi protocols. It is a direct competitor to Quantstamp on high-end formal verification and audit engagements.
- Runtime Verification: Runtime Verification is a formal verification and smart contract audit firm with strong academic roots. It competes with Quantstamp on L1 client verification, formal verification audits, and high-assurance protocol reviews.
Broad incumbents
- Consensys Diligence: Consensys Diligence is the audit arm of Consensys, a major Web3 infrastructure conglomerate. It offers smart contract audits and MythX tooling as part of a broader Ethereum-focused portfolio, competing with Quantstamp on enterprise-grade audit engagements.
Others
- Nexus Mutual: Nexus Mutual is a decentralized insurance protocol offering cover against smart contract exploits. While not a direct audit competitor, it overlaps with Quantstamp's Chainproof insurance product as an alternative risk-transfer mechanism for DeFi users.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
Quantstamp social profiles
Digital presenceQuantstamp financial estimates
Financial estimateRevenue estimate
Valuation estimate
Quantstamp leadership team
Management profileNumber of profiles
Profiles13 records
Quantstamp subsidiaries and ownership
Company hierarchySubsidiaries1 record
Quantstamp funding detail
Funding detailFunding overview
Funding rounds7 records
Investors23 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Quantstamp M&A and investment
M&A and investmentM&A
Investments41 records
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Quantstamp
What does Quantstamp do?
Quantstamp is a blockchain security company that provides smart contract security audits, web3 infrastructure penetration testing, and economic exploit analysis for blockchain protocols, DeFi platforms, and Layer 1/Layer 2 networks. Each audit engagement allocates a minimum of three audit engineers who use proprietary automated tooling combined with manual code review to identify vulnerabilities. The company also offers Chainproof, the world's first regulated smart contract insurance product licensed by the Bermuda Monetary Authority.
Is Quantstamp a public or private company?
Quantstamp is a private company. It is classified as venture growth investor backed and is currently operating.
When was Quantstamp founded?
Quantstamp was founded in 2017. It employs 51 to 100 people.
Where is Quantstamp based?
Quantstamp is headquartered in San Francisco, United States, in the North America region.
How does Quantstamp make money?
Four revenue lines are on record. Smart Contract Security Audits are the primary driver. The others are infrastructure Penetration Testing, economic Exploit Analysis and chainproof Insurance.
Who are Quantstamp's main competitors?
Direct peers on record are OpenZeppelin, Trail of Bits, Certora, Halborn, Zellic, Spearbit, ChainSecurity and Runtime Verification. Consensys Diligence is listed as a broad incumbent. Nexus Mutual is listed as an others.
Does Quantstamp have an API?
No public API is recorded for Quantstamp.
What industry is Quantstamp in?
Quantstamp's product category is Blockchain Security Services. Its primary akta.pro industry code is FSAPAJAA, Smart Contract Auditing & Formal Verification, with a secondary code of FSAPAJAK, Security Testing Tooling (SAST/DAST for smart contracts, fuzzing). Its SIC code is 8734.