What enigmadark does

Enigma Dark is a private, founder-led security research firm founded in 2019 by vnmrtz.eth, providing tailored security reviews, invariant systems, and advisory services exclusively to a curated set of EVM (Ethereum Virtual Machine) protocols. The firm's core offering comprises three service lines: Security Reviews (manual smart contract audits), Invariant Systems (property-based testing frameworks that verify protocol logic under edge-case conditions and adversarial input), and Advisory (architectural and integration security consultation). The team combines specialists in Solidity, Rust, and Go, and includes researchers with strong external reputations such as Top C4 wardens, an Immunefi top-50 white-hat, and a researcher with 25+ top-5 public audit contest placements and 80+ completed reviews.

The firm's portfolio includes multi-version engagements with marquee DeFi protocols such as Aave (v3.2, v3.4, v3.7, v4), Euler Finance (EVC Playground, EVK, Earn, EulerSwap, Rescue Strategy), Silo Finance (v2, v3), and additional clients including Twyne, Makina Finance, Flower, Tenor Finance, and Solady. Engagement acceptance is selectively curated and referral-driven ('by introduction only'), with every engagement explicitly principal-led rather than delegated to junior staff. The GTM motion runs through direct inquiry at [email protected] with no public pricing, supported by technical content marketing via a public Notes section, GitHub repositories, conference talks, and an X/Twitter presence.

The business model is professional services revenue from bespoke, multi-version audit and invariant engagements, with no disclosed pricing, no disclosed funding rounds, no parent company, and no public headcount figure. Public artifacts include original research such as the RAI debt-auction bug post-mortem (discovered after an OpenZeppelin audit) and the Stargate v2 integration pitfalls checklist, both serving as credibility signaling rather than revenue-generating products. Founder vnmrtz.eth is also co-founder of Flower (flUSD), which is simultaneously an Enigma Dark client.

Name

enigmadark

Legal name

Enigma Dark

Website

https://enigmadark.com

Company type

Private

Founded year

2019

Operating status

Operating

Short description

Enigma Dark is a founder-led security research firm providing principal-delivered security reviews, invariant systems, and advisory services exclusively to a curated set of EVM protocols, with marquee DeFi clients including Aave and Euler.

Ownership category

akta.pro rank

Product category

Smart Contract Security Auditing

NAICS

Other Computer Related Services (541519)

SIC

Finance Services (6199)

akta.pro primary industry

Bug Bounty, Vulnerability Disclosure & Security Services (FSAPAJAL)

akta.pro secondary industry

Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG)

Keywords

• Smart contract security
• EVM protocol audits
• Invariant testing
• DeFi security reviews
• Blockchain security research

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Security Reviews & Audits: Principal-led security reviews and audit services for EVM protocols. Engagements are tailored to client needs and selectively accepted.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

Enigma Dark is a principal-led security research firm that delivers tailored security reviews, invariant system development, and strategic advisory exclusively for a curated set of EVM protocols. Engagements are accepted selectively and every project is handled directly by senior security researchers rather than delegated to junior staff. The firm combines code audits, property-based invariant testing, and fuzzing methodologies to identify vulnerabilities and verify protocol behavior under adversarial conditions.

Product overview

Enigma Dark is a principal-led security research firm providing tailored security reviews, invariant systems, and advisory services exclusively for a curated set of EVM protocols. The company's core offerings consist of three service lines: Security Reviews (comprehensive code audits and vulnerability assessments), Invariant Systems (automated testing frameworks that verify protocol logic across edge cases), and Advisory (strategic security consultation). Their portfolio demonstrates engagements across major DeFi protocols including Aave (v3/v4), Euler Finance, Silo Finance, Twyne, Makina Finance, Flower, Tenor Finance, and Solady, with each engagement typically involving both review and invariant testing components tailored to specific protocol versions and features.

Differentiator

Problem solved

Functional benefit

Products and services

• Security Reviews Tailored security reviews and code audits for EVM protocols, examining smart contract logic, access controls, bug fixes, and potential vulnerabilities. Delivered by senior researchers directly to EVM protocol engineering and security teams.
• Invariant Systems Development and testing of invariant systems that verify protocol behavior under various conditions and edge cases, ensuring protocol logic remains sound under adversarial conditions. Includes formal verification and property-based testing harnesses for EVM protocols.
• Advisory Strategic security advisory services for EVM protocol teams, including integration guidance, architectural consultation, and security consultation across protocol versions and integrations.

Quantifiable outcome

• Bug discovered in RAI's debt auction mechanism following OpenZeppelin audit - a well-intentioned bug-fix that inadvertently introduced a higher-severity issue
• +1 more outcomes

Named customers8 records

Segments1 record

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Scale indicators5 records

Recent moves6 records

Expansion highlights4 records

Direct peers

• Spearbit: Blockchain security consultancy offering curated, principal-led audits for Web3 protocols via a network of independent senior researchers. Directly comparable business model to Enigma Dark; one of Enigma Dark's team members (ladboy) is also a Senior Researcher at Spearbit, confirming overlap in talent pool and methodology.
• ChainSecurity: Boutique smart-contract audit firm specializing in formal verification and security reviews for DeFi protocols. Closely comparable in size, methodology, and EVM focus; competes for engagements with major DeFi protocols like Aave, Compound, and similar tier-one clients.
• Zellic: Smart-contract security firm offering audits and formal verification for EVM and non-EVM protocols, founded by researchers with CTF and top-tier audit-competition backgrounds. Directly comparable in talent profile, methodology, and target clientele.
• Runtime Verification: Formal-verification-focused security firm with extensive experience auditing DeFi and EVM protocols using theorem proving and model checking. Comparable to Enigma Dark in deep-methodology positioning, particularly relevant given Enigma Dark's emphasis on invariant testing.
• yAudit: Curated audit collective of independent senior security researchers, operating a similar model of selective, principal-led engagements for EVM protocols. Direct overlap with Enigma Dark (HHK is listed as a hacker at yAudit) and very similar business model.
• MixBytes: Smart-contract security firm providing audits and formal verification for DeFi protocols, with deep expertise across EVM. Comparable boutique-style audit firm competing for similar protocol engagements with selective client acceptance.

Broad incumbents

• OpenZeppelin: Largest smart-contract audit and security firm in Web3, providing audits, security tooling, and Defender platform. Provides a full productized security stack whereas Enigma Dark is purely services-led; directly competes for EVM protocol audit mandates (e.g., the RAI audit mentioned in Enigma Dark's research was originally conducted by OpenZeppelin).
• Trail of Bits: Established security research firm with a dedicated blockchain security practice covering EVM and broader crypto audits. Competes for the same high-end protocol engagements and shares the principal-led, research-driven positioning that distinguishes Enigma Dark.

Emerging players

• Code4rena: Competitive audit platform hosting public audit contests for smart contracts; several Enigma Dark researchers (Lambda, CarrotSmuggler) are Top C4 wardens. Not a direct service competitor but a parallel channel for protocol security work that affects the same researcher pool.
• Cyfrin Audits: Smart-contract audit firm built around Code4rena's founder, offering curated audits for EVM protocols with an emphasis on security education. Competes for similar protocol clients and overlaps on researcher talent.

Market position

Strengths1 record

Weaknesses1 record

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/EnigmadarkLabs
• GitHubgithub.com/Enigma-Dark
• LinkedInlinkedin.com/company/enigma-dark

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about enigmadark