llms.txt
Compare with other sites' llms.txt files →# CertiK
> The Trust Layer for Digital Value
CertiK is the largest Web3 security services provider, founded in 2017 by Professor Ronghui Gu of Columbia University and Professor Zhong Shao of Yale University. It grew out of their research in formal verification, and today applies formal verification, AI-driven analysis, and expert manual review to secure blockchain protocols, smart contracts, and decentralized applications.
CertiK also provides compliance and supervision tools for institutions and regulators, and publishes security research and incident data as the CertiK Report.
## Key statistics
- Clients served: 5,500+
- Digital assets assessed: $600B+
- Vulnerability findings: 119,000+
- Research and analysis published: 700+
- Countries and regions covered: 150+
- Projects monitored on Skynet: 17,000+
- Monthly Skynet users: 1.8M+
- Jurisdiction consultations: 30+
- Valuation: more than $2B
## Certifications
- [SOC 2 Type II compliance](https://www.certik.com/company/trust-and-security)
- [ISO 27001 certification](https://www.certik.com/company/trust-and-security)
## Services
- [Smart contract audit](https://www.certik.com/services/smart-contract-audit): CertiK audits smart contracts using AI and formal verification identifying vulnerabilities to ensure secure transparent blockchain code with comprehensive reporting.
- [Formal verification](https://www.certik.com/services/formal-verification): CertiK's formal verification mathematically proves smart contract and blockchain correctness ensuring unmatched security for critical Web3 applications.
- [Penetration testing](https://www.certik.com/services/penetration-testing): CertiK's penetration testing uncovers vulnerabilities in Web3 applications and off-chain systems fortifying defenses against evolving cyber threats.
- [Proof of reserves audit](https://www.certik.com/services/proof-of-reserves): Demonstrate transparency and build lasting trust with CertiK's Proof of Reserves audit. Our independent, Skynet-enabled solution verifies your reserves in real time, protecting users, investors, and stakeholders while helping you meet regulatory expectations.
- [Validator service](https://www.certik.com/services/validator): CertiK Validator Service brings enterprise-grade, security-first validator operations to public blockchain ecosystems.
- [DLT security solutions](https://www.certik.com/services/dlt-security-solutions): Strategy, architecture design, and security assessments for institutions building distributed ledger technologies (DLT), covering on-chain systems, off-chain infrastructure, and regulatory readiness.
- [VARA compliance solutions](https://www.certik.com/services/vara): Navigate VARA compliance with CertiK's comprehensive security and compliance services tailored to Virtual Asset Regulatory Authority requirements in Dubai.
- [DORA and MiCA compliance](https://www.certik.com/services/dora-mica): Strengthen DORA and MiCA readiness with CertiK. End-to-end security testing across applications, infrastructure, smart contracts, and critical supporting systems for EU compliance.
## Products
- [Skynet](https://skynet.certik.com): Security rating and real-time monitoring platform for crypto assets and Web3 projects.
- [Skynet Score methodology](https://skynet.certik.com/skynet-score-methodology): How Skynet scores on-chain and off-chain security for Web3 projects, exchanges, and wallets.
- [Team Verified (KYC)](https://skynet.certik.com/leaderboards/team-verified): Identity verification for Web3 project teams, with results published on Skynet.
- [AI Auditor](https://aiauditor.certik.com): AI-powered smart contract auditing platform.
- [Hunt](https://hunt.certik.com): Bug bounties, auditing competitions, and challenges that connect Web3 projects with vetted ethical hackers.
## CertiK Report
- [CertiK Report dashboard](https://www.certik.com/certik-report/dashboard): Tracks Web3 security losses, incidents, attack vectors, and chain risk.
- [Hack3D reports](https://www.certik.com/certik-report/hack3d): Security research and incident data from CertiK. Quarterly and annual Hack3D reports tracking exploits, vulnerabilities, and losses across Web3.
- [Intel3D reports](https://www.certik.com/certik-report/intel3d): Web3 security intelligence from CertiK Skynet, reporting on fraud, threats, ecosystem risk, and emerging security trends across the digital asset landscape.
- [CertiK Hack3D: H1 2026 Report](https://www.certik.com/certik-report/hack3d/certik-hack3d-h1-2026-report): Web3 security losses exceeded $1.31 billion in H1 2026 across 344 incidents, with wallet compromise emerging as the most financially destructive attack vector and phishing shifting toward fewer, higher-value social engineering attacks.
- [Hack3d: The Web3 Security Report 2025](https://www.certik.com/certik-report/hack3d/hack3d-the-web3-security-report-2025): Welcome to the 2025 Skynet Hack3D Report! This report offers deep dives into the exploits, vulnerabilities, and trends that define blockchain and smart contract security. They’re an invaluable resource for anyone seeking to understand the current landscape of Web3 security. Each report contains detailed incident analyses, technical insights, and the most comprehensive statistics on hacks, scams, and exploits in the entire Web3 industry.
- [Hack3d: The Web3 Security Quarterly Report - Q2 + H1 2025](https://www.certik.com/certik-report/hack3d/hack3d-the-web3-security-quarterly-report-q2-h1-2025): Welcome to Hack3d: The Web3 Security Report for Q2 + H1 2025. Hack3d is the industry's most comprehensive record of statistics and analysis of on-chain security incidents. It equips stakeholders with the knowledge needed to make informed decisions in an increasingly high-stakes environment.
- [Hack3d: The Web3 Security Quarterly Report - Q1 2025](https://www.certik.com/certik-report/hack3d/hack3d-the-web3-security-quarterly-report-q1-2025): Welcome to CertiK’s Hack3d report for Q1 of 2025! During this quarter, hackers stole more than $1.6 billion across 197 security incidents. These figures represent an approximate 303.38% increase in value lost compared to the previous quarter, the majority of which is due to the Bybit exploit, the largest crypto theft in history. In our report, we discuss the latest trends in Web3 security, including an analysis of the most prominent attack vectors and targeted chains. We also highlight a variety of our recently-published technical and educational resources.
- [Hack3d: The Web3 Security Report 2024](https://www.certik.com/certik-report/hack3d/hack3d-the-web3-security-report-2024): Welcome to Hack3d: The Web3 Security Report for 2024. CertiK’s Hack3d reports offer deep dives into the exploits, vulnerabilities, and trends that define blockchain and smart contract security. They’re an invaluable resource for anyone seeking to understand the current landscape of Web3 security.
- [Hack3d: The Web3 Security Quarterly Report - Q3 2024](https://www.certik.com/certik-report/hack3d/hack3d-the-web3-security-quarterly-report-q3-2024): Welcome to Hack3d: The Web3 Security Report for Q3 2024. Hack3d serves as an essential resource and record of statistics for understanding security challenges and vulnerabilities in the Web3 space. It equips stakeholders with the knowledge and insights needed to fortify their defenses and make informed decisions in an increasingly high-stakes environment.
- [Hack3d: The Web3 Security Quarterly Report - Q2 + H1 2024](https://www.certik.com/certik-report/hack3d/hack3d-the-web3-security-quarterly-report-q2-h1-2024): A total of $688,102,941 was lost across 184 onchain security incidents in Q2 2024. This represents a 37% increase in value lost compared to Q1 2024, though there was an 18% decrease in the number of incidents quarter-over-quarter.
- [Hack3d: The Web3 Security Quarterly Report - Q1 2024](https://www.certik.com/certik-report/hack3d/hack3d-the-web3-security-quarterly-report-q1-2024): A total of $502,522,934 was lost to 223 hacks, scams, and exploits throughout the first quarter of 2024. Check out our comprehensive report for all the statistics, data, and analysis you need to understand the current state of onchain security.
- [Hack3d: The Web3 Security Report 2023](https://www.certik.com/certik-report/hack3d/hack3d-the-web3-security-report-2023): Hack3d reports offer deep dives into the exploits, vulnerabilities, and trends that define blockchain and smart contract security. They’re an invaluable resource for anyone seeking to understand the current landscape of Web3 security. Each report contains detailed incident analyses, technical insights, and the most comprehensive statistics on hacks, scams, and exploits in the entire Web3 industry.
- [Hack3d: The Web3 Security Quarterly Report - Q3 2023](https://www.certik.com/certik-report/hack3d/hack3d-the-web3-security-quarterly-report-q3-2023): A total of $699,790,794 was lost in Q3 2023, making it the most financially damaging quarter of the year.
- [HACK3D: The Web3 Security Quarterly Report - Q2 2023](https://www.certik.com/certik-report/hack3d/hack3d-the-web3-security-quarterly-report-q2-2023): Malicious actors drained $313,566,528 of value from Web3 protocols in the second quarter of 2023. This is a very similar figure to the $320 million lost in Q1, and a 58% decline from the $745 million lost in Q2 of 2022.
- [HACK3D: The Web3 Security Quarterly Report - Q1 2023](https://www.certik.com/certik-report/hack3d/hack3d-the-web3-security-quarterly-report-q1-2023): Malicious actors drained more than $320 million of value from Web3 protocols in the first quarter of 2023, while off-chain, Q1 saw some significant events for the crypto industry.
- [HACK3D: The Web3 Security Report 2022](https://www.certik.com/certik-report/hack3d/hack3d-the-web3-security-report-2022): The past year has been a painful one for many in crypto. Amid a broad market downturn – which has erased 65% of value from cryptocurrency’s market capitalization
- [HACK3D: The Web3 Security Quarterly Report - Q3 2022](https://www.certik.com/certik-report/hack3d/hack3d-the-web3-security-quarterly-report-q3-2022): More than $500 million was drained from Web3 platforms and users in Q3. CertiK's Hack3d report analyzes the most important incidents of the quarter and examines ongoing trends in the industry.
- [CertiK Intel3D The Rise of the AI Security Workforce: How Agentic AI Is Redefining Cybersecurity, AML & Compliance](https://www.certik.com/certik-report/intel3d/certik-intel3d-the-rise-of-the-ai-security-workforce-how-agentic-ai-is-redefining-cybersecurity-aml-and-compliance): Agentic AI is moving from assisting analysts to doing the work itself. Across Web2 and Web3, autonomous systems now triage threats, trace illicit funds, and draft regulatory filings, making governance and human accountability the new prerequisites for adoption.
- [CertiK Intel3D PSAV and the New Brazil Security Standard](https://www.certik.com/certik-report/intel3d/certik-intel3d-psav-and-the-new-brazil-security-standard): Brazil’s crypto market is entering a new era. By 30 October 2026, VASPs must demonstrate robust AML, sanctions, security, and custody controls to gain authorization—turning compliance and independent assurance into key competitive advantages.
- [CertiK Intel3D H1 2026 Wrench Attacks](https://www.certik.com/certik-report/intel3d/intel3d-wrench-h1-2026): 52 verified wrench attacks and $124.1 million in recorded exposure in H1 2026: a 33.3% rise in incidents, an 11.8-fold rise in losses, and a threat that has narrowed into a Western European crisis.
- [Skynet 2026 Stablecoin Threat Intelligence Report](https://www.certik.com/certik-report/intel3d/skynet-2026-stablecoin-threat-intelligence-report): CertiK's Skynet 2026 Stablecoin Threat Intelligence Report examines the two defining stablecoin security threats of 2026: escalating attacks on interconnected financial infrastructure and the rise of state-sponsored sanctions evasion through A7A5, a Russian-ruble-backed stablecoin that processed over $110 billion in transactions within its first year.
- [Skynet DPRK Crypto Threats Report](https://www.certik.com/certik-report/intel3d/skynet-dprk-crypto-threats-report): Our Skynet DPRK Crypto Threats Report discusses key North Korean hacker trends, including amounts stolen, number of incidents, and the most substantial hacks over the past 10 years.
- [Skynet State of Digital Asset Regulations Report](https://www.certik.com/certik-report/intel3d/skynet-state-of-digital-asset-regulations-report): For companies operating or planning to scale globally, the implications are that multi-jurisdictional licensing is now a baseline requirement; AML compliance budgets must align with the scale of enforcement; and security audits are recurring, jurisdiction-specific costs, rather than one-time exercises.
- [Skynet Crypto ATM Fraud Report ](https://www.certik.com/certik-report/intel3d/skynet-crypto-atm-fraud-report): Crypto ATM fraud is one of the fastest-growing financial crime categories in the United States. Criminal organizations exploit the speed and pseudonymity of crypto kiosks to extract funds from vulnerable populations at an accelerating pace. In the Skynet Crypto ATM Fraud Report, we discuss types of crypto ATM attacks, global statistics, attacker profiles, key enforcement actions, detection and mitigation strategies, and recommendations to protect against these types of fraud.
- [2026 Skynet Prediction Markets Report](https://www.certik.com/certik-report/intel3d/2026-skynet-prediction-markets-report): Prediction markets crossed into the mainstream in 2025, with annual trading volume growing 4x and a small number of dominant platforms emerging. Kalshi, Polymarket, and Opinion now control the vast majority of global volume, each pursuing distinct regulatory and technical strategies.
- [Skynet Wrench Attacks Report](https://www.certik.com/certik-report/intel3d/skynet-wrench-attacks-report): In 2025, wrench attacks unfortunately crossed a critical threshold. What was once treated as an edge-case risk has become a structural threat to digital asset ownership. Attackers are no longer acting opportunistically; they are operating as organized, transnational groups that combine OSINT-driven targeting, social engineering, and extreme physical violence to extract private keys.
- [Skynet U.S. Digital Asset Policy Report](https://www.certik.com/certik-report/intel3d/certik-us-digital-asset-policy-report): This report summarizes the legal mechanics, market-structure impacts, and operational requirements of this new regime. It also examines the remaining fragmentation at the state level (the ‘Preemption Gap’) and shows how a de facto ‘Universal Baseline’ of cybersecurity and AML/CFT expectations now governs multi-state operators.
- [2025 Skynet Digital Asset Treasuries (DAT) Report](https://www.certik.com/certik-report/intel3d/2025-skynet-digital-asset-treasuries-dat-report): This report introduces the Skynet DAT Security & Compliance Framework, a model that moves beyond surface-level metrics to provide an assessment of a DAT's operational integrity. By analyzing five critical pillars: Custodian & Third-Party Diligence, Internal Controls & Operational Security, On-Chain Risk Exposure, Capital Strategy Resilience, and Regulatory & Disclosure Posture, the framework reveals significant disparities in the quality and resilience of leading firms.
- [2025 Skynet Korea Web3 Ecosystem Report ](https://www.certik.com/certik-report/intel3d/2025-skynet-korea-web3-ecosystem-report): South Korea’s Web3 market is at a unique inflection point. Regulatory tailwinds are lowering institutional barriers while raising security baselines, and super-app distribution led by leading Web2 corporations is turning once-experimental use cases into real consumer products.
- [2025 Skynet RWA Security Report](https://www.certik.com/certik-report/intel3d/2025-skynet-rwa-security-report): In our 2025 RWA Security Report, we look at the evolving security landscape of RWAs, outlines how CertiK’s Skynet RWA Framework provides structured criteria for assessing protocol risks, and highlights the performance of leading platforms such as Ondo Finance, Paxos, and Tether.
- [Skynet Stablecoin Spotlight Report: H1 2025](https://www.certik.com/certik-report/intel3d/skynet-stablecoin-spotlight-report-h1-2025): In our 2025 Stablecoin Report, we look at the current stablecoin landscape, vulnerabilities that affect stablecoins, and how CertiK’s Skynet Security Score can help evaluate stablecoin security.
## Solutions
- **For enterprises**: security, compliance, and risk management for institutional adoption. Smart contract audit, penetration testing, DLT security solutions, VARA compliance solutions, DORA and MiCA compliance, proof of reserves audit.
- **For Web3 projects**: secure a protocol from launch to long-term operation. Smart contract audit, Skynet, penetration testing, Team Verified (KYC), Hunt, validator service.
- **For exchanges and custodians**: transparency, monitoring, and resilience for asset platforms. Penetration testing, proof of reserves audit, smart contract audit, Skynet Score, Hunt.
- **For regulators and compliance teams**: assurance aligned with regulatory standards. DLT security solutions, VARA compliance solutions, DORA and MiCA compliance, proof of reserves audit, Skynet, Skynet Score.
- **For security researchers**: tools and data for the security research community. AI Auditor, Hunt.
## Ecosystems
CertiK secures projects across blockchain ecosystems, including:
- [BNB Chain](https://www.certik.com/ecosystems/bnb-chain)
- [Bitcoin](https://www.certik.com/ecosystems/bitcoin)
- [TON](https://www.certik.com/ecosystems/ton)
- [Sui](https://www.certik.com/ecosystems/sui)
- [Aptos](https://www.certik.com/ecosystems/aptos)
- [Cosmos](https://www.certik.com/ecosystems/cosmos)
- [Cardano](https://www.certik.com/ecosystems/cardano)
- [Algorand](https://www.certik.com/ecosystems/algorand)
- [Kaia](https://www.certik.com/ecosystems/kaia)
- [ZKPs](https://www.certik.com/ecosystems/zkps)
## Company
- [About CertiK](https://www.certik.com/company/about): Founding story, mission, regulatory contributions, investors and clients, leadership team, and FAQ.
- [Research](https://www.certik.com/company/research): Papers on formal verification and program analysis.
- [Trust and security](https://www.certik.com/company/trust-and-security): CertiK's own security and compliance program: SOC 2 Type II and ISO 27001.
- [Testimonials](https://www.certik.com/company/testimonials): Client testimonials from Web3 projects, exchanges, and enterprises.
- [Employee verification](https://www.certik.com/company/worker-validation): Check whether someone is an authorized CertiK employee.
- [Careers](https://www.certik.com/company/careers): Open roles at CertiK.
- [Disclaimer](https://www.certik.com/company/disclaimer): Legal disclaimers for CertiK content, products, and services.
## Notable clients
Binance, Tether, OKX, Apple, Samsung, Ripple, Crypto.com, PancakeSwap, Cardano, Fireblocks, Aptos, TON, Gala, The Sandbox, Ethereum, WEMIX, Bitget, Trust Wallet, Paxos, Pepe, Hedera, Ondo, Frax Finance, Ant Group, Sei, Aethir, Peaq, Bitcoin.com, Wormhole, 1inch, Venus, BloFin, Floki, WalletConnect, Sui, Kaia
## Backed by
12 top-tier funds, including Binance, Sequoia, Hillhouse, Goldman Sachs, and SoftBank Vision Fund.
## Regulatory contributions
- **Monetary Authority of Singapore (MAS)**: Co-founder and CEO Ronghui Gu serves on the MAS International Technology Advisory Panel. ([source](https://www.mas.gov.sg/who-we-are/mas-advisory-panels-and-committees/international-technology-advisory-panel))
- **Task Force on Promoting Web3 Development (Hong Kong SAR)**: Policy contributions and recommendations on DLT regulation. ([source](https://www.info.gov.hk/gia/general/202306/30/P2023063000579.htm))
- **Abu Dhabi Global Market (ADGM)**: Stablecoin policy dialogue,
