Launching a Protocol? Don't Get Hacked.
Get matched with the right auditor, find the tools your team needs, and learn from $2B+ in exploit postmortems — curated by practitioners since 2017.
One sponsor slot on this page. Labeled, never mixed into our rankings.
Sponsor this page →Featured Resources
Curated picks from our directory
Top Security Tools*
- Slither
Static analysis framework for Solidity smart contracts. Detects vulnerabilities, optimizes gas usage, and suggests code improvements.
- Echidna
Property-based fuzzer for Ethereum smart contracts. Uses grammar-based fuzzing campaigns to find violations of security properties.
- Forta
Real-time threat detection network for blockchain activity. AI-powered monitoring bots detect exploits, scams, and anomalies as they happen.
- Mythril
Symbolic execution tool for EVM bytecode analysis. Detects security vulnerabilities in Ethereum smart contracts.
- Hypernative
Real-time Web3 threat detection and prevention platform using proprietary ML models. Detects cyber, economic, governance, and community threats before they have impact.
- Blockaid
Real-time transaction screening and dApp security platform. Scans 15M+ sites daily and protects major wallets including MetaMask, Coinbase, and Safe from scams and exploits.
- Flashbots Protect
Private transaction RPC that shields users from MEV extraction. Serves 2.1M+ Ethereum accounts and has protected $43B in DEX volume from frontrunning and sandwich attacks.
- GoPlus Security
Web3 security infrastructure providing token security detection, malicious address screening, and contract risk analysis across 30+ chains.
- AuditAgent
AI-driven pre-audit tool by Nethermind that detects vulnerabilities and simulates attack scenarios beyond traditional scanning capabilities.
- Arkham Intelligence
On-chain intelligence platform with entity-level wallet labeling, real-time alerts, and an intelligence marketplace. Deanonymizes blockchain activity at scale.
Trusted Auditors*
- Trail of Bits
Rating: 4.9/5 · Est. 2012
- OpenZeppelin
Rating: 4.8/5 · Est. 2015
- Cyfrin
Rating: 4.7/5 · Est. 2022
- Spearbit
Rating: 4.8/5 · Est. 2021
- OtterSec
Rating: 4.7/5 · Est. 2021
- NCC Group
Rating: 4.5/5 · Est. 1999
- Pashov Audit Group
Rating: 4.7/5 · Est. 2023
- Cantina
Rating: 4.6/5 · Est. 2023
Security Feed
- UnverifiedResearchers halve quantum resource benchmark for key operation in Bitcoin, Ethereum attack
t.me/unfolded
- UnverifiedCronos says $9.2 million remains unrecovered after Tectonic exploit, chain rollback
t.me/unfolded_defi
- UnverifiedBlockstream’s Liquid Network reportedly hacked by whitehats for 4k bitcoins
t.me/officer_cia
- UnverifiedSerbia targeted activists with Pegasus spyware.
t.me/officer_cia
- ConfirmedKelpDAO LayerZero — Compromised RPC infrastructure feeding data into a single verifier setup
Arbitrum · $292M
- Confirmed
Drift Protocol — Social engineering + oracle manipulation
Solana · $285M
- Confirmed
Venus — On-chain + off-chain exploit
BNB Chain · $2.18M
Confirmed incidents are cited and verified. Unverified items are public community reports, shown for awareness only — follow the link before acting on one.
* How we rank: Tools are scored on community adoption (GitHub stars, downloads), active maintenance, detection accuracy, and practitioner recommendations. Auditors are evaluated on public audit track record, severity of findings in audited protocols, post-audit exploit rate, transparency (public reports), and reputation among security researchers. No firm pays for ranking — sponsored placements are labeled as such, appear only in designated slots, and never affect a listing's position or score. See our full methodology.
The Founder's Path to Secure Launch
Three steps between your code and a safe deployment
Are You Rekt Test Ready?
The Rekt Test is the industry-standard security checklist every protocol should pass before launch. Answer a few quick questions to see where you stand.
Why Trust Us
Built on experience, maintained with integrity
Since 2017
Deep expertise in digital asset custody and smart contract auditing. We've navigated every market cycle and seen every attack vector.
No Conflicts
Independent advisory through Savy Advisors LLC. We don't sell audits or run a security firm — our recommendations are unbiased.
AI-Curated
Automated monitoring keeps our directory current. Tools, auditors, and threat data are continuously verified and updated.
Community
Connect with security researchers and practitioners
Secureum
Premier smart contract security bootcamp and community. Offers structured learning paths from Solidity basics to advanced auditing techniques.
Immunefi
Largest Web3 bug bounty platform. Connects security researchers with protocols offering bounties for vulnerability discoveries.
Spearbit
Distributed network of expert security researchers providing peer-reviewed smart contract audits through a decentralized guild model.