What CoinFabrik does

CoinFabrik is a research, development, and security auditing firm specialized in Web3 technologies, founded in 2014 and headquartered in Buenos Aires, Argentina. The company's flagship offering since founding is smart contract security auditing, with 350+ audits completed and over $10 billion in client assets secured. CoinFabrik has expanded its service portfolio to encompass the full lifecycle of Web3 project delivery: smart contract audits, security reviews, quality assurance, risk assessment, blockchain forensics, custody solutions (including MPC wallets), blockchain and dApp development, DeFi, bridges, Layer 2 rollups, stablecoins, oracles, DAOs, NFTs, Web3 gaming, metaverse, MEV solutions, and advisory/CTO services. Its primary customers are Web3 protocol teams, DeFi platforms, blockchain foundations, and enterprise clients seeking blockchain security expertise.

The company's technical stack covers Solidity, Rust, Clarity, Soroban, Go, TypeScript, Move, and Python across 15+ blockchain ecosystems including Ethereum, Solana, Polkadot, Stacks, Stellar, Algorand, NEAR, Polygon, Avalanche, Rootstock, and Cosmos. CoinFabrik has built and open-sourced five proprietary developer tools — Scout (Substrate/ink!/Soroban static analyzer), STACY (Stacks Clarity analyzer), CyScout (Solidity CodeQL analyzer), SOLbricks (visual Solana testing framework), and an MPC development library — several developed with ecosystem grants from the Web3 Foundation and Aleph Zero. The company holds official auditor designations for Polkadot Assurance Legion, Stellar Audit Bank, and Stacks Nakamoto.

CoinFabrik operates a professional services business model with project-based pricing: audit engagements require 50% upfront payment to secure queue position and 50% upon delivery, while development, advisory, QA, and other services are quoted per engagement. Distribution is purely direct sales through website CTAs, conference presence, and inbound from ecosystem relationships, with no self-serve or product-led motion. The firm has 60+ employees across offices in Argentina, the United States (Palo Alto), Brazil (Rio de Janeiro), Spain (Barcelona), and Italy (Rome). The company is privately held and bootstrapped, with co-founders Sebastián Wain (CEO) and Sergio Lerner (Advisor) — Lerner being a recognized security researcher credited with discovering critical Bitcoin and Ethereum vulnerabilities.

Name

CoinFabrik

Legal name

CoinFabrik

Website

https://coinfabrik.com

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

51–100 employees

Short description

CoinFabrik is a bootstrapped Web3 security auditing and development firm founded in 2014, offering smart contract audits, blockchain development, and advisory services across 15+ chains, supplemented by five open-source developer tools and 60+ employees across five countries.

Ownership category

akta.pro rank

Product category

Blockchain Security Services

NAICS

Other Scientific and Technical Consulting Services (54169), Security Systems Services (except Locksmiths) (561621)

SIC

Security & Commodity Brokers, Dealers, Exchanges & Services (6200)

akta.pro primary industry

Smart Contract Auditing & Formal Verification (FSAPAJAA)

akta.pro secondary industries

Digital Asset Risk, Security & Audit Tooling (Smart Contract Audit, Threat Monitoring) (FSAGAMAJ), Smart Contract Security Tooling (static/dynamic analysis, formal verification) (FSAPABAI)

Keywords

• Smart contract audits
• Blockchain security
• Web3 development
• Static analysis tools
• Blockchain advisory

Headquarters

HQ city

Buenos Aires

HQ country

Argentina

HQ region

Latin America

Offices5 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Smart Contract Audits: Comprehensive security audits of smart contract codebases conducted by expert auditors. CoinFabrik's flagship service since 2014, covering multiple programming languages and blockchain platforms. Clients submit audit-ready code, CoinFabrik provides a quote and timeline, conducts the audit with preliminary reporting, and issues a final report optionally published publicly. 50% upfront payment required to secure queue position, 50% upon delivery.
2. Blockchain Development Services: Custom blockchain and Web3 application development including dApps, smart contracts, DeFi products, Web3 gaming, Layer 2 rollups, bridges, oracles, NFTs, DAOs, and metaverses. Billed as professional services engagements.
3. Blockchain Advisory Services: Advisory engagements including strategy and planning, technical consulting, security advisory, funding and growth guidance, Web3 CTO services, and technical due diligence for investors and enterprises.
4. QA and Security Review Services: Quality assurance testing and continuous security reviews conducted in parallel with development cycles. Services include end-to-end testing, documentation, issue tracking, and security status reporting.
5. Custody Solutions: Design and implementation of cold storage, hot wallet, multisig, and MPC wallet custody infrastructure for crypto-native teams, institutional players, and exchanges.
6. DeFi Solutions: Development and auditing of DeFi products including lending/borrowing protocols, liquidity pools, AMMs, staking mechanisms, yield farming, derivatives, synthetic assets, and DAO tokenomics consulting.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels6 records

Core offering

CoinFabrik is a research, development, and security auditing firm specialized in Web3 technologies, providing professional services including smart contract security audits, security reviews, quality assurance, blockchain and Web3 application development, DeFi and Layer 2 solutions, custody, forensics, and advisory engagements. The company also develops and maintains proprietary open-source security tooling (Scout, STACY, CyScout, SOLbricks, MPC Library) used by blockchain developers across 15+ ecosystems.

Product overview

CoinFabrik offers a portfolio of open-source developer tools and comprehensive blockchain services. The product suite includes five developer tools: Scout (static analyzer for Substrate/ink!/Soroban), STACY (static analyzer for Stacks' Clarity), CyScout (Solidity CodeQL analyzer), MPC Development Library (multi-party computation for JavaScript/Rust/TypeScript/Python/Go), and SOLbricks (visual testing for Solana). Complementing these tools is a full suite of security and development services including Smart Contract Audits, Security Reviews, QA, Custody Solutions, Risk Assessment, Blockchain Forensics, Blockchain Development, DeFi Solutions, Bridging Solutions, DAO Services, Layer 2 Rollup Solutions, Stablecoin Development, Oracle Development, TGE Services, MEV Solutions, Web3 DevOps, Gaming, Metaverse, NFT Development, Data Privacy, Prediction Markets, DePIN, Advisory, CTO Services, Due Diligence, and SysAdmin. The company operates from headquarters in Buenos Aires with offices in Brazil, USA, Spain, and Italy.

Differentiator

Problem solved

Functional benefit

Brands

• Scout: Open-source bug-detection tool for Substrate, ink!, and Soroban smart contracts. Built and maintained by expert devs and auditors at CoinFabrik.
• STACY
• CyScout
• MPC Library
• SOLbricks

Products and services

• Smart Contract Audits Security audit service for smart contracts that identifies vulnerabilities and ensures code security across multiple programming languages and blockchain platforms. CoinFabrik has been conducting audits since 2014, with 50% upfront payment required to secure queue position and 50% upon delivery of the finalized report, which may be published publicly.
• Security Review Continuous security review service that runs in parallel with development cycles, providing ongoing feedback without slowing release schedules. Includes manual reviews, tool-assisted detection, and issue tracking.
• QA (Quality Assurance) Quality assurance service for Web3 projects including end-to-end testing, clear documentation, expert oversight, and preparation for security audits.
• Custody Solutions Crypto custody infrastructure services including cold storage, hot wallets, multisig setups, and MPC wallet implementation for secure digital asset management for crypto-native teams, institutional players, and exchanges.
• Risk Assessment Comprehensive risk assessment service including threat modeling, threat actor analysis, mapping of threat paths, and pre-audit preparation with recommendations.
• Blockchain Forensics Investigation and analysis service for blockchain incidents including hacks, thefts, and rugpulls. Uses chain analysis tools, smart contract auditing, and onchain analytics to trace assets and identify vulnerabilities.
• Blockchain Development Decentralized application development service including smart contracts, dApps, wallets, exchange platforms, and implementation of blockchain trends like sidechains and micropayment systems.
• DeFi Solutions Decentralized finance development services including lending/borrowing, liquidity pools, AMMs, staking, yield farming, derivatives, synthetic assets, and DAO/tokenomics consulting.
• Bridging Solutions Cross-chain bridge development and auditing services enabling seamless and secure blockchain interoperability, including custom bridge development and liquidity provision.
• DAO Services Decentralized autonomous organization services including DAO setup, governance design, treasury management, and legal compliance.
• Layer 2 Rollup Solutions L2 scaling solutions including rollup development and migration services, supporting EVM-compatible technologies (zkSync, Polygon, Arbitrum, Optimism) and OP Stack for custom rollup creation.
• Stablecoin Development Custom stablecoin development services supporting fiat-pegged, crypto-backed, and yield-bearing models with architecture, operational setup, and security auditing.
• Solana Development Blockchain development services specialized for the Solana ecosystem, including dApp development, gaming, and smart contract programs in Rust.
• Oracle Development Oracle solutions including data feeds, random number generation, API connections, and custom oracle development for connecting smart contracts with external data sources.
• TGE (Token Generation Event) Token generation event services including token design, strategy, security engineering, regulatory compliance, and investor relations support.
• MEV Solutions Maximal Extractable Value services including strategy development, security audits, ethical MEV solutions, and real-time monitoring for blockchain profitability optimization.
• Web3 DevOps Web3 infrastructure management including CI/CD automation, infrastructure as code (Terraform, AWS CloudFormation, Ansible), monitoring (Datadog, Grafana), and security measures.
• Web3 Gaming Onchain gaming development services including game design, dApp implementation, security auditing, and blockchain integration for platforms like Solana, Ethereum, and Polygon.
• Metaverse Solutions Virtual world development including 3D environment design, avatar creation, virtual economy setup, real-time communication, AI/ML integration, and testing/debugging.
• NFT Development NFT creation, auditing, and launch services across various blockchains including Ethereum, Polygon, Solana, and Algorand, with marketplace and exchange services.
• Web3 SysAdmin System administration services for Web3 infrastructure including monitoring, troubleshooting, security maintenance, and on-call support with various SLA options.
• Blockchain Advisory Strategic consulting services including strategy planning, technical consulting, security advisory, and funding/growth support for Web3 projects.
• Web3 CTO Services Fractional CTO services providing complete project management, technical roadmapping, team enhancement, and holistic risk assessment for Web3 initiatives.
• Web3 Technical Due Diligence Technical evaluation services for Web3 projects including codebase evaluation, competitive benchmarking, security audits, IP building, compliance estimation, and roadmap validation.
• Data Privacy Solutions Privacy-enhancing technology solutions enabling secure data collaboration across organizations using encryption and secure data processing techniques.
• Prediction Markets Prediction market development and auditing services for smart contracts and dApps enabling event-based betting and forecasting platforms.
• DePIN Solutions Decentralized Physical Infrastructure Network development services for managing real-world infrastructure using blockchain technology across energy, agriculture, logistics, healthcare, and government sectors.
• Scout Open-source static analysis bug-detection tool for blockchain developers, supporting Substrate, ink!, and Soroban smart contracts. Available via CLI, VSCode Extension, and GitHub Action for integration into development workflows. Developed in collaboration with LAFHIS at Universidad de Buenos Aires.
• STACY (Static Analyzer for Stacks' Clarity) Open-source static analyzer for Stacks' Clarity smart contracts, developed by CoinFabrik R&D. Automatically identifies common vulnerabilities and deviations from best practices to help developers write more secure and reliable smart contracts, with CLI tooling, detector filtering, and a vulnerability showcase.
• CyScout (Solidity QL Static Analyzer) Solidity QL static analyzer using GitHub's CodeQL engine to uncover real security threats in EVM smart contracts, featuring predefined and custom security queries, control flow analysis, data flow and taint tracking, semantic code analysis, and detailed vulnerability reports with GitHub Advanced Security integration.
• MPC Development Library Multi-Party Computation development library for rapid implementation of secure MPC capabilities. Supports JavaScript, Rust, TypeScript, Python, and Go. Enables onchain privacy for DeFi, passwordless authentication, decentralized custody, and privacy-preserving machine learning.
• SOLbricks (Solana Smart Contract Testing) Visual testing framework for Solana smart contracts featuring a drag-and-drop interface inspired by Scratch, designed to democratize blockchain testing and make it accessible to developers of all skill levels.

Quantifiable outcome

• 500+ successful projects delivered since 2014
• +4 more outcomes

Named customers28 records

Segments1 record

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

Feature5 records

Partnerships

Six partnerships are on record, tiered core and minor.

• Polkadot EcosystemcoreStrategic or Co-development PartnerCoinFabrik is the official auditor of the Polkadot Assurance Legion and has developed Scout specifically for the Polkadot ecosystem (Substrate and ink!). Scout is developed with the support of the Polkadot Assurance Legion.
• Stellar Development FoundationcoreStrategic or Co-development PartnerCoinFabrik is a member of the Stellar Audit Bank and has developed Scout for Soroban smart contracts on Stellar. Scout is supported for the Stellar ecosystem and CoinFabrik runs an active Stellar validator.
• Aleph ZerominorStrategic or Co-development PartnerAleph Zero supported the development of Scout, CoinFabrik's open-source static analyzer, as part of their ecosystem grant program.
• Stacks EcosystemcoreStrategic or Co-development PartnerCoinFabrik is the official auditor of Stacks Nakamoto and developed STACY, a dedicated static analyzer for Stacks' Clarity smart contract language. The company has conducted multiple audits for Stacks-based protocols.
• Algorand FoundationminorStrategic or Co-development PartnerCoinFabrik was included in the inaugural Algorand ecosystem builders program, participating in the early development of the Algorand transaction ecosystem.
• LAFHIS (Universidad de Buenos Aires)minorStrategic or Co-development PartnerScout is based on research conducted in collaboration with LAFHIS (Laboratorio de Alta Seguridad Informática) at Universidad de Buenos Aires, bringing academic rigor to the tool's development.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• OpenZeppelin: OpenZeppelin is a leading smart contract audit and security firm serving the same Web3 protocol and DeFi client base as CoinFabrik, with overlapping EVM-focused services and an open-source tooling ecosystem.
• SlowMist: SlowMist is a blockchain security firm specializing in smart contract audits, threat monitoring, and incident response, serving a similar protocol and exchange customer base as CoinFabrik.
• Quantstamp: Quantstamp provides smart contract audits and security services across multiple blockchain ecosystems, competing with CoinFabrik for protocol-level audit mandates and developer-facing tools.
• Halborn: Halborn is a blockchain security firm offering smart contract audits, penetration testing, and advisory services, directly comparable to CoinFabrik's core audit and security review practice.
• Trail of Bits: Trail of Bits is a well-established blockchain and software security firm that competes head-to-head with CoinFabrik on smart contract audits, security reviews, and formal verification across multiple chains.
• Runtime Verification: Runtime Verification combines formal methods and smart contract auditing for EVM and other chains, making it a direct competitor in the security-auditing and formal-verification space where CoinFabrik operates.
• Certora: Certora specializes in formal verification and smart contract security tooling, overlapping directly with CoinFabrik's auditing and static-analysis offerings for EVM-based protocols.
• Sigma Prime: Sigma Prime is a blockchain security and infrastructure firm offering smart contract audits and validator services, directly comparable to CoinFabrik's audit and Stellar/Stacks ecosystem work.

Broad incumbents

• Consensys Diligence: Consensys Diligence is the audit arm of the broader Consensys ecosystem, offering smart contract audits and security services that overlap with CoinFabrik's practice, particularly for EVM-based protocols.

Emerging players

• Zellic: Zellic is an emerging auditor founded by former Trail of Bits researchers that offers smart contract audits and security research, competing for the same high-end audit clients as CoinFabrik.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/CoinFabrik
• Xx.com/coinfabrik
• Facebookfacebook.com/CoinFabrik

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CoinFabrik