We secure smart contracts with
formal verification.

Secure your critical code with formal verification, the highest security standard in software

Trusted by

StarkwareEthereum FoundationNexus MutualInternet Computer

Audits give opinions. We give guarantees.

Mathematical certainty

Your contracts are proven correct across every possible input, not just the ones someone thought to test.

Skin in the game

We either find bugs or formally verify your contract is correct. If we can't do either, you get your money back.

We stay with you

3 months of re-verification on every code change, included. Auditors move on after they invoice.

How formal verification works

1

Modeling

We model your code’s behavior in Lean. The model can target different levels of the compilation pipeline based on your needs.

2

Specification

We define the properties your contract must always satisfy, such as solvency, access control, and accounting invariants.

3

Verification

We write a mathematical proof in Lean that the implementation satisfies the specification. You can independently verify it with one CLI command.

3 months of maintenance

Ship a contract change and we re-verify equivalence at no extra cost. Extendable to 12 months for longer coverage.

Full refund guarantee

If we can't prove you have a bug nor formally verify you don't, we refund. We stake our reputation on every job.

Frequently asked questions

Get a Quote

We take 4 protocols per quarter. Formal verification demands deep focus. We'd rather verify fewer contracts well than many poorly.