hashlock.com

mx

smtp.google.com

ns

arushi.ns.cloudflare.com

anuj.ns.cloudflare.com

caa

digicert.com; cansignhttpexchanges=yes

ssl.com

pki.goog; cansignhttpexchanges=yes

pki.goog; cansignhttpexchanges=yes

digicert.com; cansignhttpexchanges=yes

letsencrypt.org

letsencrypt.org

ssl.com

txt

google-site-verification=VaFi9chpLVPu5eEywQIVMrAJIaNbcWNwCqnwXUybaww

v=spf1 +ip4:110.232.143.138 +include:_spf.google.com -all

google-site-verification=amvIOq75oD1UATsSKBzxkdUYHzIHnI35K4Q59OVqR0g

dmarc

v=DMARC1; p=reject; sp=reject; rua=mailto:postmaster@hashlock.com; ruf=mailto:postmaster@hashlock.com; fo=1; aspf=r; adkim=r

# As a condition of accessing this website, you agree to abide by the following
# content signals:

# (a)  If a Content-Signal = yes, you may collect content for the corresponding
#      use.
# (b)  If a Content-Signal = no, you may not collect content for the
#      corresponding use.
# (c)  If the website operator does not include a Content-Signal for a
#      corresponding use, the website operator neither grants nor restricts
#      permission via Content-Signal with respect to the corresponding use.

# The content signals and their meanings are:

# search:   building a search index and providing search results (e.g., returning
#           hyperlinks and short excerpts from your website's contents). Search does not
#           include providing AI-generated search summaries.
# ai-input: inputting content into one or more AI models (e.g., retrieval
#           augmented generation, grounding, or other real-time taking of content for
#           generative AI search answers).
# ai-train: training or fine-tuning AI models.
# use:      how AI systems may consume the content (immediate, reference, or full).

# ANY RESTRICTIONS EXPRESSED VIA CONTENT SIGNALS ARE EXPRESS RESERVATIONS OF
# RIGHTS UNDER ARTICLE 4 OF THE EUROPEAN UNION DIRECTIVE 2019/790 ON COPYRIGHT
# AND RELATED RIGHTS IN THE DIGITAL SINGLE MARKET.

# BEGIN Cloudflare Managed content


User-agent: *
Content-Signal: search=yes,ai-train=no,use=reference
Allow: /

# Training crawlers
User-agent: Amazonbot
Disallow: /

User-agent: Applebot-Extended
Disallow: /

User-agent: Bytespider
Disallow: /

User-agent: CCBot
Disallow: /

User-agent: ClaudeBot
Disallow: /

User-agent: Diffbot
Disallow: /

User-agent: Google-Extended
Disallow: /

User-agent: GPTBot
Disallow: /

User-agent: omgili
Disallow: /

User-agent: anthropic-ai
Disallow: /

User-agent: Claude-Web
Disallow: /

User-agent: cohere-ai
Disallow: /

User-agent: MistralAI-Training
Disallow: /

User-agent: meta-externalagent
Disallow: /

User-agent: GoogleOther
Disallow: /

User-agent: Baiduspider
Disallow: /

User-agent: PetalBot
Disallow: /

User-agent: AwarioSmartBot
User-agent: AwarioRssBot
Disallow: /

User-agent: Google-CloudVertexBot
Disallow: /

User-agent: QualifiedBot
Disallow: /

User-agent: Cotoyogi
Disallow: /

User-agent: ICC-Crawler
Disallow: /

User-agent: atlassian-bot
Disallow: /

User-agent: FishBot
Disallow: /

User-agent: BorderxBot
Disallow: /

User-agent: NavuBot
Disallow: /

User-agent: SemrushBot-SWA
Disallow: /

User-agent: WARDBot
Disallow: /

User-agent: magpie-crawler
Disallow: /

User-agent: KimiBot
Disallow: /

User-agent: CitibotSiteCrawler
Disallow: /

# END Cloudflare Managed Content

User-agent: *
Disallow: /wp-admin/
Allow: /wp-admin/admin-ajax.php

Sitemap: https://hashlock.com/sitemap_index.xml

# Hashlock

> Hashlock is a global leader in Web3 security, delivering expert smart contract audits, Web3 security audits, blockchain security reviews, and smart contract penetration testing trusted by leading protocols, DeFi platforms, and crypto projects worldwide.

## About Hashlock

Hashlock is a Web3 security and smart contract auditing firm helping Web3 founders, DeFi protocols, NFT platforms, and enterprise blockchain teams secure their code before and after deployment. Hashlock's services span smart contract audits, Web3 security audits, blockchain security reviews, smart contract penetration testing, and managed bug bounty programs — combining senior manual review with industry-standard tooling, threat modelling, and post-deployment monitoring.

## Pages
- [Home](https://hashlock.com/): Overview of Hashlock's smart contract audits, Web3 security audits, and blockchain penetration testing services.
- [Company](https://hashlock.com/company): About Hashlock — team, Web3 security expertise, audit methodology, and global client base.
- [Bug Bounty Platform](https://hashlock.com/bug-bounty): Hashlock's managed bug bounty platform connecting Web3 protocols with vetted blockchain security researchers.
- [Redbelly Network — Bug Bounty](https://hashlock.com/bug-bounty/redbelly-network): Active Hashlock-managed bug bounty program for the Redbelly Network blockchain.
- [Events](https://hashlock.com/event): Hashlock's appearances and talks at Web3 security, blockchain, and crypto industry events.

## Published Audit Reports
- [Rakurai Audit Report](https://hashlock.com/audits/rakurai): Smart contract security audit conducted by Hashlock for Rakurai.
- [Lucid Labs Audit Report](https://hashlock.com/audits/lucid-labs): Smart contract security audit conducted by Hashlock for Lucid Labs.
- [Pruv Finance Audit Report](https://hashlock.com/audits/pruv-finance): Smart contract security audit conducted by Hashlock for Pruv Finance.
- [Futurity Galaxies Audit Report](https://hashlock.com/audits/futurity-galaxies): Smart contract security audit conducted by Hashlock for Futurity Galaxies.
- [Black Tie Audit Report](https://hashlock.com/audits/black-tie): Smart contract security audit conducted by Hashlock for Black Tie.

## Blog & Research
- [Your Audit Won't Stop an RPC Attack — Here's What Will](https://hashlock.com/blog/your-audit-wont-stop-an-rpc-attack-heres-what-will): Why traditional smart contract audits don't cover RPC-layer attacks on Web3 infrastructure, and the additional security measures protocols need.
- [Best Smart Contract Audit Companies 2026: Securing Your Blockchain Project](https://hashlock.com/blog/best-smart-contract-auditing-companies-securing-your-blockchain-project): Guide to the leading smart contract audit firms in 2026, evaluation criteria, and how Web3 founders should choose an auditor.
- [Why AI Agents Need On-chain Identity & How ERC-8004 Solves It](https://hashlock.com/blog/why-ai-agents-need-on-chain-identity-how-erc-8004-solves-it): Analysis of the ERC-8004 standard for on-chain identity for autonomous AI agents operating in Web3.
- [Top 41 Crypto Venture Capital Firms Investing in Web3 Startups](https://hashlock.com/blog/top-41-crypto-venture-capital-firms-investing-in-web3-startups): Curated directory of leading crypto and Web3 venture capital firms backing blockchain startups.
- [Top Web3 Accelerator Programs for Crypto Startups](https://hashlock.com/blog/top-web3-accelerator-programs-for-crypto-startups): Guide to the top Web3 accelerator and incubator programs for early-stage crypto and blockchain founders.

## Optional
- [Sitemap](https://hashlock.com/sitemap_index.xml)