BlockSec

BlockSec is a blockchain security company, operating since 2021 by its own account, that pairs smart contract audits with its own monitoring (Phalcon Security), compliance screening (Phalcon Compliance) and fund-tracing (MetaSleuth) products. It fits teams that want an audit and post-deployment attack monitoring from the same vendor. Its public report index is active, with at least a dozen reports published between late July and September 9, 2026, mostly Solidity on EVM chains plus some NEAR (Rust) and Sui (Move) work.

At a glance

Founded	2021, per the firm (about)
Headquarters / jurisdiction	not stated on the firm's pages
Engagement model	private firm audit, alongside commercial monitoring, compliance and forensics products (homepage)
Core specialties	smart contract audits; real-time attack detection and blocking; AML/KYT compliance; on-chain fund tracing (homepage)
Ecosystems / languages	EVM (Solidity) primarily; NEAR (Rust) and Sui (Move) in recent reports (report index)
Public report index	blocksec.com/audit-report; GitHub audit-reports
Open-source tooling	MetaSuites browser extension, DeFi PoC collection, BpfChecker research artifact (GitHub)
Published pricing	not published

What they do

The homepage lists smart contract and infrastructure audits alongside Phalcon Security (real-time threat detection and automated attack blocking), Phalcon Compliance (KYA/KYT screening and suspicious-transaction reporting), MetaSleuth (cross-chain fund tracing), a Safe{Wallet} monitor, sequencer-level screening for L2s, and the free Phalcon Explorer transaction viewer (homepage).

The audit page describes a four-phase process (scope and quotation, agreement and scheduling, audit with iterative fix review, report and remediation), multi-auditor cross-review, threat modeling, and in-house static analyzers and LLM-assisted detectors (audit service). The firm's self-reported figures include 1,000+ clients and $50B+ in assets secured (audit service); these were not independently checked.

Specialties and ecosystem coverage

The public report index is dominated by Solidity on EVM chains. Among the twelve most recent entries are a cross-chain Solidity audit for Puffer, NEAR/Rust work for Rhea Finance's xRHEA token, and a combined BSC/Sui (Solidity and Move) engagement for DeAgentAI (report index). The Puffer v2 report also covered contracts tied to a TEE workload-measurement layer (Puffer v2 report).

Against the directory: the EVM focus and BNB Chain work are confirmed. PancakeSwap audits appear in the index (cross-farming and veCAKE reports, e.g. veCAKE). No audit reports for MetaMask, the Uniswap Foundation, Compound or Forta were found in the index; the homepage names Uniswap Foundation and Compound as clients, but without saying which service they use (homepage). Monitoring and incident-response capabilities are evidenced by the product pages and incident write-ups. NEAR and Sui work is evidenced but absent from the directory's chain list.

Recent public work

Pulled from the BlockSec audit report index, newest first:

• Puffer Protocol v2, September 9, 2026: 4 medium and 5 low findings, no critical (report)
• Pharos Labs Prosper contracts, September 8, 2026 (report)
• Rhea Finance Agg-Oracle, August 18, 2026 (report)
• DeAgentAI multisig-timelock contracts (BSC, Sui), August 11, 2026 (report)
• Bitget Wallet solver, August 10, 2026 (report)
• Puffer institutional, August 6, 2026 (report)
• Inverter Network EMUSD contracts, August 5, 2026 (report)
• Rhea Finance xRHEA token (NEAR, Rust), July 31, 2026 (report)

Research, tooling and methodology

BlockSec's GitHub organization includes MetaSuites (a browser extension for exploring transactions, updated September 2026), defi_poc (proof-of-concept code for DeFi vulnerabilities), an audit-reports repository updated September 2026, and BpfChecker, a differential fuzzing project for eBPF runtimes that the repository says was accepted to CCS 2024 (GitHub).

The blog publishes weekly incident round-ups and exploit analyses, for example a September 24, 2026 analysis of losses at a multicall router and Nostra, and a September 17, 2026 write-up on Liquid Network and Symbiosis (blog). Recent posts also cover AML and sanctions-compliance topics, reflecting the compliance product line (blog). Its reports describe the method as automated scanning, manual verification and business-logic analysis, and group findings into Medium/Low risk plus Recommendations and Notes (Puffer v2 report).

Track record and incidents

No reputable post-audit incident naming BlockSec as the auditor of exploited code was found in this pass. BlockSec frequently appears in incident coverage as an analyst or monitoring provider (for example its own zkLend post-mortem), which is different from having audited the exploited code.

Who should consider them — and who might look elsewhere

The strongest public evidence is a steady stream of Solidity audits for DeFi, staking and wallet infrastructure, combined with monitoring and incident tooling that the same vendor operates. Teams that want audit plus runtime attack detection, or exchanges and institutions that also need AML screening, are the clearest fit. There is little public evidence of Solana, Cairo, ZK circuit or formal verification work.

How to engage

Audit requests go through the expert contact form, which asks for the project name, website, repository link, expected completion date and a Telegram handle. Pricing and timelines are quoted per engagement; the audit page says scope and a cost estimate are agreed before scheduling (audit service).

Gaps and unverified claims

• Headquarters and team size are not stated on the firm's own pages.
• Pricing is not published.
• Client and asset figures (1,000+ clients, $50B+ secured) are self-reported.
• No public audit report was found for MetaMask, the Uniswap Foundation, Compound or Forta, which the directory lists as notable audits.
• The directory's report index is blocksec.com/audit-report; the older blocksec.com/audits path returns 404.
• The report index page served 106 distinct report links on 2026-09-24 (counted from page source); the index may paginate, so this is a floor.

Sources

1. BlockSec homepage, accessed 2026-09-24
2. About BlockSec, accessed 2026-09-24
3. Audit service page, accessed 2026-09-24
4. Audit report index, accessed 2026-09-24
5. Puffer Protocol v2 audit report, accessed 2026-09-24
6. PancakeSwap veCAKE audit report, accessed 2026-09-24
7. BlockSec GitHub organization, accessed 2026-09-24
8. BlockSec blog, accessed 2026-09-24
9. zkLend exploit post-mortem (BlockSec blog), accessed 2026-09-24
10. Expert contact form, accessed 2026-09-24
11. Pharos Labs Prosper report, accessed 2026-09-24
12. Rhea Finance Agg-Oracle report, accessed 2026-09-24
13. DeAgentAI multisig-timelock report, accessed 2026-09-24
14. Bitget Wallet solver report, accessed 2026-09-24
15. Puffer institutional report, accessed 2026-09-24
16. Inverter Network EMUSD report, accessed 2026-09-24
17. Rhea Finance xRHEA report, accessed 2026-09-24