SlowMist
SlowMist is a China-based blockchain security firm founded in 2018 that provides smart contract and exchange security audits, AML compliance SaaS, and threat intelligence to cryptocurrency exchanges, Web3 protocols, and financial institutions globally.
- Company typePrivate
- Founded2018
- HeadquartersXiamen, China
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What SlowMist does
SlowMist is a blockchain security firm founded in January 2018 in Xiamen, China, by a team with over a decade of network security experience. The company operates through its Hong Kong regional headquarters to serve a global client base of cryptocurrency exchanges, Web3 protocols, DeFi projects, financial institutions, and regulatory bodies. Its core offerings span professional security audits (smart contract, exchange, wallet, and blockchain), subscription-based AML and threat intelligence SaaS (SlowMist KYT, MistTrack, MistEye), and incident response and consulting services.
The company's technology platform is anchored by MistTrack, a crypto tracking and compliance platform with over 400 million labeled wallet addresses, 10K+ known entities, 500K+ threat intelligence addresses, and 90M+ risky addresses, covering 3,000+ cryptocurrencies. SlowMist KYT provides a configurable AML engine with API access for compliance teams, while MistEye delivers continuous Web3 threat intelligence monitoring. Complementary tools include the SlowMist Hacked incident database, Malicious Address Library with API access, FireWall.X for EOS smart contracts, and the open-source Blockchain Threat Intelligence Sharing Platform on GitHub. In March 2026, the firm expanded into AI-agent security with a five-layer framework (ADSS governance plus OpenClaw, MistEye Skill, MistTrack Skill, and MistAgent execution tools).
SlowMist generates revenue through three primary streams: one-time security audit engagements for smart contracts, exchanges, and protocols; recurring SaaS subscriptions for KYT, MistTrack, and MistEye (e.g., 40,960 yuan/year for KYT Basic, 100,000 yuan/year for KYT Advanced); and professional services for security consulting, penetration testing, and incident response. Distribution combines direct enterprise sales targeting exchanges, financial institutions, and Web3 projects with self-serve SaaS onboarding. The company holds ISO/IEC 27001:2022 certification, has been cited by the United Nations Security Council, UNODC, and the U.S. Department of the Treasury, and was awarded the HKICT Gold Award in FinTech and the Cyber Security Excellence Contribution Award at CSPA 2025.
SlowMist firmographics
Firmographics- Name
- SlowMist
- Legal name
- SlowMist Limited
- Website
- https://slowmist.com
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- SlowMist is a China-based blockchain security firm founded in 2018 that provides smart contract and exchange security audits, AML compliance SaaS, and threat intelligence to cryptocurrency exchanges, Web3 protocols, and financial institutions globally.
- Ownership category
- akta.pro rank
SlowMist industry classification
Industry- Product category
- Blockchain Security
- NAICS
- Financial Transactions Processing, Reserve, and Clearinghouse Activities (522320), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Prepackaged Software (7372), Finance Services (6199)
- akta.pro primary industry
- Digital Asset Risk, Security & Audit Tooling (Smart Contract Audit, Threat Monitoring) (FSAGAMAJ)
- akta.pro secondary industries
- Security Testing Tooling (SAST/DAST for smart contracts, fuzzing) (FSAPAJAK), Blockchain Analytics & Transaction Monitoring (FSADALAB), Smart Contract Security Tooling (static/dynamic analysis, formal verification) (FSAPABAI), Regulatory Reporting, Tax & Audit Trails (reconciliation, provenance) (FSAPAJAI)
Keywords
Where SlowMist is headquartered
LocationHeadquarters
- HQ city
- Xiamen
- HQ country
- China
- HQ region
- Asia
Offices1 record
Markets served
SlowMist business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales
Revenue model
- Security Audits: One-time security audit services for smart contracts, exchanges, and blockchain protocols. Professional consulting engagements providing security assessments and vulnerability identification.
- AML/Security SaaS Subscriptions: Subscription-based access to MistTrack, MistEye, and SlowMist KYT platforms. Annual licensing model with tiered pricing for different levels of service.
- Security Consulting Services: Professional security consulting engagements including penetration testing, incident response, and security architecture review.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Pay-as-you-go | Free trial available |
| Subscription | Annual | Basic tier at 40,960 yuan/year |
| Subscription | Annual | Advanced tier at 100,000 yuan/year |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels5 records
SlowMist product offering
Product offeringCore offering
SlowMist is a blockchain security firm that sells cybersecurity audit services (exchange, wallet, smart contract, blockchain) and subscription-based SaaS platforms (SlowMist KYT AML engine, MistTrack crypto tracking, MistEye Web3 threat intelligence monitoring) to cryptocurrency exchanges, Web3 projects, and financial institutions. It also delivers professional services including red teaming, incident response, security consulting, defense deployment, and blockchain threat intelligence to support regulatory compliance and on-chain forensics.
Product overview
SlowMist offers a comprehensive blockchain security product portfolio centered on threat intelligence and AML compliance. The core platform consists of SlowMist KYT (AML compliance engine for institutions), MistTrack Investigation (crypto tracking and compliance platform), and MistEye (Web3 threat intelligence monitoring). These are complemented by specialized tools including SlowMist Hacked (incident database), Malicious Address Library (blockchain intelligence database with API access), FireWall.X (EOS smart contract firewall), EOS MonKit (EOS analytics), False Top-up Vulnerability Scanner (exchange security tool), and Wallet Security Gateway (wallet protection). The product architecture enables end-to-end coverage from threat detection and prevention (via security audits and monitoring) through incident response and investigation (via MistTrack) to compliance and reporting (via SlowMist KYT).
Differentiator
Problem solved
Functional benefit
Products and services
- SlowMist KYT A professional, real-time, and configurable Anti-Money Laundering (AML) engine designed for compliance teams at large institutions, providing KYT/KYA risk screening, risk rule configuration, risk monitoring, stablecoin risk monitoring, and an alert engine with case management for VASPs and stablecoin issuers.
- MistTrack Investigation A crypto tracking and compliance platform providing wallet address analysis, fund monitoring, and fund traceability, featuring fund risk scoring, transaction behavior analysis, and real-time monitoring across over 400 million labeled addresses.
- MistEye Provides comprehensive Web3 threat intelligence and dynamic security monitoring services with real-time monitoring of security events and threat intelligence for users.
- SlowMist Hacked A comprehensive database documenting blockchain attack events and security incidents, serving as a reference resource for security research and incident analysis.
- Malicious Address Library A database covering malicious wallet addresses across multiple cryptocurrencies (BTC, ETH, EOS, XRP, TRX, USDT) and platforms from dark web to global exchanges, providing intelligence support for tracking hacker attacks and money laundering behavior with Web Console and API access.
- FireWall.X A firewall solution for EOS smart contracts providing security protection and vulnerability filtering for blockchain applications.
- EOS MonKit A monitoring and analytics tool providing insights into EOS contract behavior, transactions, and security metrics.
- Exchange Security Audit A comprehensive gray-box security audit for all types of exchanges, covering network attack and defense, private key architecture security, business logic security, and other security dimensions.
- Wallet Security Audit A comprehensive gray-box security audit for all types of wallets, covering network attack and defense, private key architecture security, and business logic security.
- Blockchain Security Audit A security audit service covering blockchain node configuration, node communication, consensus algorithm, and contract virtual machine, resolving core security issues of the blockchain.
- Smart Contract Security Audit A comprehensive white-box security audit of source code for tokens, DApp contracts, and other smart contracts.
- Red Teaming An attack assessment service that goes beyond traditional penetration testing, focusing on real vulnerabilities across enterprise personnel, business systems, supply chains, office systems, and physical security.
- Security Monitoring A dynamic security monitoring system covering all possible vulnerabilities, providing continuous comprehensive security service.
- Blockchain Threat Intelligence A service integrating threat intelligence and the power of community partners to build a joint defense system with integrated on-chain and off-chain management.
- Defense Deployment Deployment of tailored defense solutions and implementation of hot wallet security strengthening measures.
- MistTrack Service A digital asset recovery and tracking service for stolen cryptocurrency assets, providing investigation support when digital assets are unfortunately stolen.
- Incident Response Service A service helping Web3 projects quickly and effectively respond to security incidents and threats.
- Security Consulting A consulting service providing technical, risk management, and emergency response support along with recommendations for improvement.
- SlowMist AI A platform providing security solutions for AI and crypto, and AI capabilities for security under the motto 'Security for AI & Crypto \u00b7 AI for Security.'
- Web3 Security Stack for Autonomous AI Agents A five-layer security framework for autonomous AI agents in Web3 combining governance controls with execution-layer security tools, providing pre-execution checks, real-time monitoring, and post-execution reviews for autonomous trading and wallet interaction tools.
Quantifiable outcome
- Over $200 million in frozen funds through MistTrack platform
- +1 more outcomes
Companies that use SlowMist
Customer profileNamed customers8 records
Segments5 records
Ideal customer profiles4 records
SlowMist technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability5 records
Feature5 records
SlowMist partnerships and signals
Strategic signalPartnerships
Eight partnerships are on record, tiered core and key.
- HashKey ExchangecoreHashKey Exchange, a regulated virtual asset exchange in Hong Kong, partners with SlowMist for security audit services and compliance infrastructure to meet regulatory requirements in the Hong Kong market.
- OSLcoreOSL, a regulated digital asset platform, collaborates with SlowMist for security assessments and compliance solutions as part of their regulatory infrastructure.
- OKXcoreOKX, a major global cryptocurrency exchange, partners with SlowMist for security audit services, AML tracking, and compliance infrastructure support.
- BinancecoreBinance, the world's largest cryptocurrency exchange, partners with SlowMist for security audit services and blockchain security infrastructure.
- HTXkeyHTX (formerly Huobi), a major cryptocurrency exchange, partners with SlowMist for security audit services and compliance monitoring solutions.
- Amber GroupkeyAmber Group, a leading digital asset firm, partners with SlowMist for security risk assessments and compliance infrastructure services.
- Crypto.comcoreCrypto.com, a major global cryptocurrency platform, partners with SlowMist for AML tracking, KYT services, and security infrastructure.
- BitgetkeyBitget, a cryptocurrency exchange and Web3 company, partners with SlowMist for security audit services and compliance solutions.
Scale indicators3 records
Recent moves6 records
Expansion highlights6 records
SlowMist competitors and assessment
Company assessmentDirect peers
- Chainalysis: Chainalysis is the leading blockchain analytics and AML compliance platform serving exchanges, regulators, and financial institutions. It directly overlaps with SlowMist's MistTrack and KYT products in transaction monitoring, address attribution, and investigation workflows, serving a substantially similar customer base.
- TRM Labs: TRM Labs provides blockchain intelligence and AML compliance software for financial institutions, crypto businesses, and government agencies. It competes head-to-head with MistTrack and SlowMist KYT on transaction monitoring, risk scoring, and case management.
- Elliptic: Elliptic offers blockchain analytics and crypto compliance solutions including wallet screening, transaction monitoring, and investigation tools for exchanges and financial institutions. Direct functional overlap with MistTrack and SlowMist KYT across AML and sanctions screening.
- CertiK: CertiK is a leading smart contract and blockchain security auditor offering formal verification, auditing, and security analytics for Web3 protocols. Direct competitor to SlowMist's smart contract audit service line and overlapping customer base of DeFi protocols and Web3 projects.
- PeckShield: PeckShield is a blockchain security company offering smart contract auditing, exchange security, and threat intelligence. As a Chinese-origin competitor with similar service offerings and overlapping APAC customer base, it is among SlowMist's closest direct rivals.
- Quantstamp: Quantstamp provides smart contract security auditing and blockchain security services to DeFi and enterprise clients. Directly competes with SlowMist's smart contract audit and security monitoring offerings for Web3 protocols.
- Beosin: Beosin is an Asia-based blockchain security firm offering smart contract audits, AML compliance, and threat intelligence. Geographic and service overlap with SlowMist in the Chinese and broader APAC market makes it a near-twin peer.
- Hacken: Hacken provides blockchain security auditing, bug bounties, and Web3 cybersecurity services. Competes with SlowMist on smart contract audits and exchange security assessments for crypto-native clients.
Emerging players
- Elementus: Elementus is a blockchain analytics and forensics company focused on tracing stolen funds and investigating crypto incidents. Partial overlap with MistTrack in AML and investigation capabilities, though smaller scale and more forensics-oriented.
- OpenZeppelin: OpenZeppelin provides smart contract security tools, audit services, and developer libraries. Overlaps with SlowMist on smart contract security but emphasizes pre-built secure libraries and developer tooling rather than pure audit services.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
SlowMist social profiles
Digital presenceSlowMist compliance and trust
Trust signalCompliance3 records
SlowMist financial estimates
Financial estimateRevenue estimate
Valuation estimate
SlowMist leadership team
Management profileNumber of profiles
Profiles1 record
SlowMist funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
SlowMist M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about SlowMist
What does SlowMist do?
SlowMist is a blockchain security firm that sells cybersecurity audit services (exchange, wallet, smart contract, blockchain) and subscription-based SaaS platforms (SlowMist KYT AML engine, MistTrack crypto tracking, MistEye Web3 threat intelligence monitoring) to cryptocurrency exchanges, Web3 projects, and financial institutions. It also delivers professional services including red teaming, incident response, security consulting, defense deployment, and blockchain threat intelligence to support regulatory compliance and on-chain forensics.
Is SlowMist a public or private company?
SlowMist is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was SlowMist founded?
SlowMist was founded in 2018. It employs 11 to 50 people.
Where is SlowMist based?
SlowMist is headquartered in Xiamen, China, in the Asia region.
How does SlowMist make money?
Three revenue lines are on record. Security Audits are the primary driver. The others are AML/Security SaaS Subscriptions and security Consulting Services.
Who are SlowMist's main competitors?
Direct peers on record are Chainalysis, TRM Labs, Elliptic, CertiK, PeckShield, Quantstamp, Beosin and Hacken. Emerging players are Elementus and OpenZeppelin.
Does SlowMist have an API?
Yes. SlowMist provides API access for its Malicious Address Library product, enabling users to query blockchain wallet addresses and associated malicious behaviors programmatically. The API supports integration with user systems for automated risk screening and blacklist checking. Additionally, SlowMist KYT offers API-based risk monitoring capabilities for compliance workflows.
What industry is SlowMist in?
SlowMist's product category is Blockchain Security. Its primary akta.pro industry code is FSAGAMAJ, Digital Asset Risk, Security & Audit Tooling (Smart Contract Audit, Threat Monitoring), with a secondary code of FSAPAJAK, Security Testing Tooling (SAST/DAST for smart contracts, fuzzing). Its NAICS code is 522320 and its SIC code is 7372.