What BitFinding does

BitFinding is a London-based private offensive security firm that builds protective infrastructure for decentralized systems, with a primary focus on DeFi ecosystems. Founded in 2018 and operating with a team of 1-10 people, the company has no disclosed funding rounds or institutional investors in the available materials and remains founder-led in its research and product development.

The company's portfolio spans three product lines. The Exploit Interception Agent is an autonomous monitoring system that detects attacks on DeFi protocols, reconstructs attacker paths, and deploys whitehat countermeasures within seconds; documented performance includes a 3.2-second response during the January 2025 Paribus interception (~$86K prevented) and a 12-second response during the November 2025 Balancer interception (over $975K secured), with disclosed prevented-loss totals exceeding $1.3M. The Unblind family addresses blind-signing risk through transaction simulation and natural-language translation, available as an API for integration into third-party wallets, a MetaMask Snap that delivers summaries via out-of-band Telegram messages, and a Safe Dashboard for multisig verification; the company also open-sourced Multiplexer, an MEV launchpad smart contract for atomic Ethereum operations with flash loan support from Morpho, Aave, and Uniswap. AI/ML techniques embedded include autonomous agents, NLP for human-readable explanations, anomaly detection across chains, and adversarial scenario testing for transaction emulation.

Revenue mechanics are a mix of professional services for exploit interception and whitehat rescue (event-based), API licensing for the Unblind engine (recurring potential), and ecosystem value generated by the open-sourced Multiplexer. Pricing is quote-based and not publicly disclosed. Customer segments span DeFi protocols (primary), wallet developers and dApps, DAO treasuries, and high-net-worth crypto users requiring signing verification. Go-to-market combines enterprise field sales, API-first distribution, and community-led engagement anchored by GitHub contributions and ongoing collaboration with SEAL (Security Alliance) for coordinated vulnerability disclosure.

Name

BitFinding

Legal name

BitFinding

Website

https://bitfinding.com

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

1–10 employees

Short description

BitFinding is a London-based private offensive security firm developing autonomous DeFi exploit-interception agents and blind-signing prevention tools for DeFi protocols, wallet developers, DAO treasuries, and high-value crypto users across major EVM chains.

Ownership category

akta.pro rank

Product category

Blockchain Security Software

NAICS

Computer Systems Design and Related Services (5415), Computer Systems Design Services (541512)

SIC

Services-Computer Programming Services (7371), Services-Prepackaged Software (7372)

akta.pro primary industry

Smart Contract Security Tooling (static/dynamic analysis, formal verification) (FSAPABAI)

akta.pro secondary industries

Security Testing Tooling (SAST/DAST for smart contracts, fuzzing) (FSAPAJAK), API Security, Auth & Rate Limiting (BPAMAOAF)

Keywords

• Blockchain security research
• DeFi exploit prevention
• Smart contract security
• Transaction simulation
• MEV launchpad

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Markets served

GTM type

B2B and B2C

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales

Revenue model

1. Exploit Interception Services: Real-time security monitoring and intervention services for DeFi protocols, proactively detecting and stopping attacks before significant damage occurs.
2. Unblind API Integration: API licensing for wallet developers, dApps, and exchanges to embed transaction simulation and human-readable security features into their products.
3. Whitehat Rescue Operations: Incident response services where Bitfinding deploys countermeasures to secure vulnerable assets during exploits, with funds typically returned to protocols after collaboration with SEAL.

Go-to-market motion3 records

Distribution channels3 records

Marketing channels5 records

Core offering

BitFinding provides offensive security for decentralized systems, combining a real-time Exploit Interception Agent that autonomously monitors DeFi protocols and deploys whitehat countermeasures within seconds, and the Unblind engine that translates signing requests and transactions into plain English via API, MetaMask Snap, and a Safe Dashboard. Supporting offerings include a Web3 Semantic Second Factor for independent device verification, a State Constraint System (using EIP-7702 and ERC-4337) for simulation-to-execution integrity, and the open-source Multiplexer MEV launchpad for atomic Ethereum operations.

Product overview

BitFinding is an offensive security company for decentralized systems offering a dual-core product portfolio: the Exploit Interception Agent provides real-time blockchain monitoring and autonomous whitehat countermeasures to prevent DeFi exploits, while the Unblind suite addresses blind signing risks through human-readable transaction translation. Unblind products include the core Unblind engine (offering API integration for wallets and dApps), the MetaMask Snap for out-of-band Telegram verification, and the Safe Dashboard for multisig transaction verification. The company also open-sourced Multiplexer, an MEV launchpad enabling atomic multi-step DeFi operations with flash loan support, originally developed internally for executing complex rescue operations.

Differentiator

Problem solved

Functional benefit

Brands

• Unblind: An engine that explains any signing requests in plain English, protecting users from phishing attacks and wallet drainers. Includes a MetaMask Snap and Safe Dashboard integration.
• Multiplexer
• Exploit Interception Agent

Products and services

• Exploit Interception Agent Real-time DeFi exploit prevention service that monitors blockchain networks, detects exploits, and deploys autonomous whitehat countermeasures within seconds to intercept attacks and secure user assets. Designed for DeFi protocols including lending platforms, DEXs, and liquid staking protocols.
• Unblind Transaction explanation engine that translates cryptic signing requests into plain English by simulating transactions, analyzing on-chain history, and providing context-aware summaries. Exposed via API for wallet developers, dApps, and exchanges to integrate human-readable security into their products.
• Unblind Second Factor Snap MetaMask Snap extension that delivers human-readable transaction summaries via secure out-of-band Telegram messages, enabling users to verify transaction intent on a secondary device. Includes an optional air-gapped QR code verification method at unblind.app.
• Unblind Safe Dashboard Read-only alternative interface for Safe multisig users that pulls transaction data from the official Safe API and translates pending transactions into plain English for independent, secure verification of multisig signing decisions.
• Multiplexer Open-source MEV launchpad smart contract acting as a mini virtual machine for crafting powerful, precise, atomic Ethereum operations. Supports batch calls (CALL, DELEGATECALL), contract deployment (CREATE), and flash loan handling from providers such as Morpho and Aave.

Quantifiable outcome

• Intercepted over $1.3M in DeFi exploits across multiple incidents
• +2 more outcomes

Named customers3 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration8 records

AI capability9 records

Feature7 records

Partnerships

Three partnerships are on record, tiered core.

• BalancercoreStrategic or Co-development Partner · 3 November 2025Collaborative recovery operation during Balancer exploit on November 3, 2025. Bitfinding's Exploit Interception Agent secured over $975,000 in assets and returned them to the Balancer DAO following the incident. Working with Balancer team members Danko, Fabio, Juani, and Daniel.
• SEAL (Security Alliance)coreStrategic or Co-development Partner · 3 November 2025Ongoing collaboration with SEAL for coordinated vulnerability disclosure and whitehat rescue operations. Bitfinding reports exploits through SEAL tickets and follows established protocols for returning rescued funds. Mentioned in context of Balancer and Paribus exploit responses.
• ParibuscoreStrategic or Co-development Partner · 18 January 2025Collaborative exploit interception during attack targeting Paribus.io on Arbitrum on January 18, 2025. Bitfinding deployed countermeasures in 3.2 seconds, preventing ~$86K in losses across Arbitrum and Ethereum Mainnet. Worked with Paribus security team to pause vulnerable contracts and return 100% of rescued funds.

Scale indicators6 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Hexagate: Hexagate offers real-time Web3 security monitoring and threat detection for smart contracts and transactions, competing head-to-head with BitFinding on proactive exploit prevention for DeFi protocols.
• SlowMist: SlowMist is a blockchain security firm providing audits, threat intelligence, and on-chain monitoring including the MistTrack tool. Its incident response and monitoring services directly overlap with BitFinding's exploit interception capabilities.
• PeckShield: PeckShield is a long-standing blockchain security firm offering audits, on-chain monitoring, and exploit response. Its real-time monitoring and whitehat incident response directly overlap with BitFinding's core offering.
• Hypernative: Hypernative provides pre-exploit detection and automated response for Web3 protocols using AI/ML models, targeting the same DeFi security monitoring use case as BitFinding's Exploit Interception Agent.
• BlockSec: BlockSec operates Phalcon, a real-time attack-monitoring and hack-blocking bot for DeFi protocols, alongside audit services. It is the most direct competitor to BitFinding's Exploit Interception Agent, having intervened in comparable exploits on Ethereum and Layer 2 networks.

Broad incumbents

• CertiK: CertiK is the largest smart contract audit and formal verification firm, offering audits, Skynet monitoring, and incident response. It is a broad incumbent whose product portfolio spans BitFinding's narrower focus.
• Trail of Bits: Trail of Bits is a well-established blockchain and software security firm offering audits, formal verification, and security tooling. It overlaps with BitFinding on smart contract security but as a much broader consulting practice.
• OpenZeppelin: OpenZeppelin is a leading smart contract security and developer tools company, offering audits, Defender for monitoring, and widely-used contract libraries. It competes indirectly with BitFinding in DeFi security tooling.

Emerging players

• Blowfish: Blowfish provides transaction simulation and phishing/drainer detection APIs for wallets, directly competing with BitFinding's Unblind engine in the human-readable signing and wallet security category.
• Stelo Labs: Stelo Labs (acquired by Sophos) built a transaction simulation and wallet security extension that translated signing requests into plain English, a near-identical use case to BitFinding's Unblind Snap and Safe Dashboard.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/bitfinding
• GitHubgithub.com/bitfinding

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about BitFinding