Kudelski Security

Kudelski Security is the cybersecurity division of the Swiss Kudelski Group. Its main business is managed detection and response and enterprise security. Blockchain security assessment is one service within its "AI & Emerging Technology" practice. It suits enterprises and protocol teams whose risk sits in cryptography: threshold signatures (TSS/MPC), zero-knowledge proofs, key management and L1 architecture, rather than high-volume DeFi contract audits. The strongest evidence-backed signal is its cryptographic implementation work. This includes a 2023 tss-lib audit for io.finnet that led to four published CVEs, and a public archive of blockchain assessments running from 2019 to September 2025 (37 entries were counted on 2026-09-24; on 2026-10-14 the archive's own counter read 120 and the two figures could not be reconciled without a browser recount).

At a glance

Founded	not verified for the security division; the parent Kudelski Group dates to 1951 (company page)
Headquarters / jurisdiction	Cheseaux-sur-Lausanne, Switzerland (international HQ) and Phoenix, Arizona (US HQ) (company page)
Engagement model	private consultancy engagement within a large enterprise security firm
Core specialties	cryptographic secure code review, threshold cryptography, ZK proof review, architecture review and threat modeling, smart contract code review
Ecosystems / languages	archive filters list Solidity, Rust, Go, TEAL/PyTeal, ink!, Haskell, Cadence, TypeScript; chains include Solana, Ethereum/EVM, BNB Chain, Algorand, Aleph Zero, Concordium, Thorchain, Avalanche (Ava Labs) (blockchain archive)
Public report index	kudelskisecurity.com/blockchain
Open-source tooling	cryptanalysis and fuzzing tools on GitHub, e.g. ECDSA nonce-recurrence attack, fuzzomatic (Rust fuzzing)
Published pricing	not published (blockchain assessment page)

What they do

The Blockchain Security Assessment page covers:

• review of cryptographic code and supporting infrastructure
• protocol and architecture assessment
• security-by-design guidance
• compliance alignment

The engagement runs in three phases (kickoff and scoping, manual review, findings and remediation), and the page says assessments are aligned with "OWASP, NIST, and MITRE ATT&CK frameworks". It sits alongside AI security and quantum-computing security in the firm's AI & Emerging Technology practice.

The archive tags each engagement by type: Cryptographic Secure Code Review, Smart Contract Secure Code Review, Secure Code Review, Implementation Review, Architecture Review, Threat Modeling and Mobile Application Assessment (archive). The firm announced a dedicated Blockchain Security Center in January 2019, citing earlier audits of Cardano wallets, Monero's Bulletproofs and Tangem hardware wallets (press release).

Specialties and ecosystem coverage

Evidenced by the archive (blockchain archive):

• Threshold cryptography / MPC: Ava Labs threshold signatures (Mar 2024), LitProtocol FROST (Feb 2025), Uniwire TSS ECDSA CLI (May 2025), ING threshold cryptography (Mar 2021) and an HTSS audit (Nov 2022).
• Solana: Solana Labs architectural review (Nov 2019), Solana inflation logic (Oct 2020), Solend, Synthetify, Phantom, Starke Finance vaults (May 2025).
• Zero-knowledge: Concordium ZK proofs (Jan 2021).
• Other chains: Algorand projects (Pact, Defly, AlgoRai), Aleph Zero (AZERO.ID; A Modular DAO in ink!), Thorchain (Enshrined Oracle, Sep 2025), Flow USDC, and RIF on Chain v2 in Solidity (May 2024).

Directory entries not evidenced: The directory lists cryptography, smart contracts, protocol design and key management as specialties, and the archive supports all of them. It does not evidence the directory's Polygon, Arbitrum, Cosmos or Polkadot chains, apart from Aleph Zero, which is Substrate-based. Nor does it show the directory's notable audits Lido, Cosmos SDK, Near Protocol or "Solana Stake Pool". The Solana work in the archive consists of the Labs architecture and inflation-logic reviews.

Recent public work

All entries are from the blockchain archive. The archive had 37 entries across five paginated pages when crawled on 2026-09-24; on 2026-10-14 its pagination read "12 / 120", so the entry count could not be confirmed, although the newest entry was still the September 2025 Enshrined Oracle review. The individual entry pages loaded site navigation only, with no report text or PDF link, so the dates and titles below come from the listing cards.

1. Enshrined Oracle (Thorchain, Go): code review, Sep 2025
2. Uniwire: TSS ECDSA CLI cryptographic secure code review, May 2025
3. Starke Finance: vaults secure code review (Solana/Rust), May 2025
4. LitProtocol: FROST implementation, cryptographic secure code review, Feb 2025
5. A Modular DAO (Aleph Zero, ink!): secure code review, Sep 2024
6. RIF on Chain v2 (Solidity): smart contract secure code review, May 2024
7. Ava Labs: threshold signature implementation (Go), Mar 2024

No public blockchain report dated after September 2025 appeared in the archive.

Research, tooling and methodology

• Disclosed vulnerabilities: Kudelski audited io.finnet's Go threshold-ECDSA library (tss-lib). io.finnet then published four issues as CVE-2022-47930, CVE-2022-47931, CVE-2023-26556 and CVE-2023-26557. These covered ZK-proof replay, hash-separator collisions and non-constant-time arithmetic (Kudelski research post, 2023-03-23).
• Open-source tooling: The GitHub org holds 72 repositories. Relevant ones include an ECDSA polynomial nonce-recurrence attack tool, fuzzomatic (automatic Rust fuzzing), post-quantum Go implementations (archived) and SGX tooling.
• Current research output: The research blog is active (posts dated September 2026), but its recent posts are enterprise threat research and advisories, not blockchain. The old research.kudelskisecurity.com blockchain category now redirects to the general blog.
• Severity scheme: not verified, because report pages did not render content.

Track record and incidents

This pass found no reputable post-audit incident report naming Kudelski Security as the auditor of exploited code.

Who should consider them — and who might look elsewhere

The strongest public evidence is in cryptographic implementation review: threshold signatures, FROST, TSS/MPC wallets and ZK proofs. There is also architecture and threat-model work for L1s and wallets, much of it on Solana, Algorand and Aleph Zero. Enterprises that already buy security services, or that need regulator-friendly framework alignment, may find the broader firm useful. Teams seeking a high-volume EVM DeFi audit partner found little recent public evidence. Since 2024 the archive shows only one engagement tagged "Smart Contract Secure Code Review" (RIF on Chain v2, May 2024), and the archive shows no blockchain reports in the past 12 months. Those teams should ask for recent sample reports.

How to engage

Use the "Contact Us" form on the blockchain assessment page or the AI & Emerging Technology page. A standalone /contact-us URL returned 404. For cryptographic reviews, prepare the specification or paper the implementation follows, the repository at a fixed commit, and a threat model.

Gaps and unverified claims

• Founding year: the directory's 2012 is not stated on the company page, which gives only the Group's 1951 founding.
• Team size: the directory's "25+ (blockchain division)" is not published. The company page cites 400+ staff in the security division overall.
• Report content: individual archive entry pages rendered no report text or download link on 2026-09-24, so finding counts and severity schemes could not be checked.
• Directory links: the directory's publicReports URL is the /blockchain archive and its GitHub link is the firm's kudelskisecurity org.
• Notable audits and chains: Lido, Cosmos SDK, Near and Solana Stake Pool, and the Polygon, Arbitrum, Cosmos and Polkadot chains, were not found in the archive.

Sources

1. Kudelski Security homepage — accessed 2026-09-24
2. Company page — accessed 2026-09-24
3. Blockchain Security Assessment service — accessed 2026-09-24
4. AI & Emerging Technology services — accessed 2026-09-24
5. Blockchain report archive — accessed 2026-09-24
6. Audits page (redirects to archive) — accessed 2026-09-24
7. Archive entry: Enshrined Oracle (no content rendered) — accessed 2026-09-24
8. Research blog — accessed 2026-09-24
9. Research: multiple CVEs in threshold cryptography implementations — accessed 2026-09-24
10. Old research blog blockchain category (redirect) — accessed 2026-09-24
11. Press release: Blockchain Security Center (2019) — accessed 2026-09-24
12. GitHub: kudelskisecurity — accessed 2026-09-24
13. kudelskisecurity.com/contact-us (404) — accessed 2026-09-24