We secure smart contracts with
formal verification.

Secure your critical code with formal verification, the highest security standard in software

Trusted by

StarkwareEthereum FoundationNexus MutualLido

Audits give opinions. We give guarantees.

✓

Mathematical certainty

Your contracts are proven correct across every possible input, not just the ones someone thought to test.

✓

Skin in the game

We either find bugs or formally verify your contract is correct. If we can't do either, you get your money back.

✓

We stay with you

3 months of re-verification on every code change, included. Auditors move on after they invoice.

How formal verification works

1

Modeling

We model your code’s behavior in Lean. The model can target different levels of the compilation pipeline based on your needs.

2

Specification

We define the properties your contract must always satisfy, such as solvency, access control, and accounting invariants.

3

Verification

We write a mathematical proof in Lean that the implementation satisfies the specification. You can independently verify it with one CLI command.

↻

3 months of maintenance

Ship a contract change and we re-verify equivalence at no extra cost. Extendable to 12 months for longer coverage.

✔

Full refund guarantee

If we can't prove you have a bug nor formally verify you don't, we refund. We stake our reputation on every job.

Frequently asked questions

Contact our team

We take 4 protocols per quarter. Formal verification demands deep focus. We'd rather verify fewer contracts well than many poorly.