Accretion

Accretion is a Singapore-based security audit firm that operates exclusively on the Solana blockchain. Founded by Robert Reith, a researcher with four years of Solana-specific audit experience, the firm positions itself as a specialist alternative to generalist security shops that cover multiple chains. Every engagement is handled by auditors who work solely with Solana's runtime, account model, and program framework—not EVM veterans adapting their methodology.

Core Services

Accretion reviews the full range of Solana program architectures: Anchor-based programs, native hand-rolled programs, and Pinocchio programs. Service categories include DeFi protocol audits (swaps, lending, perpetuals, yield strategies), governance systems (DAOs, voting mechanisms, multisigs), and operational security reviews covering key management, multisig configuration, and deployment procedures.

Audit scope is defined per engagement after an initial review of the codebase. Pricing runs from roughly seven thousand dollars for small programs under 2,000 normalized lines of code up to one hundred fifty thousand dollars or more for critical infrastructure with zero-knowledge components or multiple interacting programs. The firm targets a 24-hour response to initial inquiries and a two-to-four week lead time for most engagements.

Every completed audit includes fix verification at no additional cost and a six-month post-audit support period with 24/7 emergency response for critical issues that emerge after deployment.

Track Record

As of early 2025 the firm had completed more than 70 audits, accumulating 938 total findings across severity tiers: 50 critical, 100 high, 261 medium, 337 low, and 190 informational. The average audit surfaces 2.1 high or critical issues. Accretion states it finds critical or high-severity vulnerabilities in roughly 80% of audits, including in codebases that other security firms had previously reviewed.

Notable protocols audited include Jupiter, Sanctum, Metaplex, Marginfi, MetaDAO, Ellipsis, Light Protocol (four separate engagements), Realms, and the Solana Foundation. The combined TVL across audited protocols exceeds three billion dollars.

Team

The six-person team includes researchers with backgrounds in binary exploitation and competitive security research. Mahdi Rostami holds the top position on the Hats Finance leaderboard. Other researchers include Niklas Brymko, a binary exploitation specialist, and associate researchers Timur Dzhandzhhava and Matej Hyčko. Sven Welsch leads business development. Robert Reith (handle: r0bre) serves as CEO and lead researcher and also authors the firm's Substack publication.

Public Tools and Research

Accretion has released three public tools for the Solana ecosystem:

• Solana Data Reverser — helps developers and auditors reverse-engineer on-chain account layouts
• simd.wtf — a searchable index of Solana Improvement Documents
• Solana Opsec Standard — an operational security checklist for Solana protocol teams

The firm's Substack covers Solana security research and developer education. Published pieces include a deep dive on hidden IDL instructions and their security implications within the Anchor framework, and a collection of 100 Solana tips aimed at both developers and auditors. The research output reinforces the firm's positioning as a source of new bug-class discovery rather than checkbox compliance auditing.

Solana Ecosystem Fit

Solana's account model, cross-program invocations, program-derived addresses, and runtime-level quirks present attack surfaces that differ substantially from EVM chains. Most generalist audit firms carry EVM-rooted mental models and tooling. Accretion's exclusive Solana focus means its auditors are familiar with failure modes that surface specifically in SVM programs: signer privilege escalation through CPI, account confusion via incorrect discriminator checks, reentrancy patterns distinct from the EVM model, and framework-level issues introduced by Anchor or Pinocchio.

The firm operates in a segment of the market where demand for Solana-native audit capacity has grown alongside DeFi TVL on the chain. Its client list spans the largest and most security-conscious projects in the ecosystem, and its published track record of re-auditing code that other firms have cleared is a notable differentiator in a market where audit quality varies substantially.