CoinFabrik

CoinFabrik is a blockchain security and development firm founded in Buenos Aires in 2014, offering smart contract audits, protocol development, and advisory services across more than a dozen blockchain ecosystems including Solana, Ethereum, Polkadot, Stellar, and Stacks.

Background and History

CoinFabrik launched in 2014 as one of the earliest dedicated blockchain R&D shops in Latin America. Over the following decade the company expanded to 60-plus employees distributed across five countries, with a client list that includes Solana, Microsoft, Algorand, and Decentraland. The firm structured its work into three practice areas — security, development, and advisory — and built standing relationships with several blockchain ecosystem programs that route external audit demand to vetted firms.

By 2026 CoinFabrik had completed more than 500 projects and conducted more than 350 security reviews, positioning itself as a mid-to-large boutique in the smart contract audit market. Its geographic base in Argentina brought an academic connection that shaped its tooling work: the team collaborated with the Laboratory on Foundations and Tools for Software Engineering (LaFHIS) at the University of Buenos Aires on automated vulnerability detection research.

Core Services

Smart contract audits are the firm's highest-profile offering. CoinFabrik's audit team works in Solidity, Rust, Clarity, TEAL, and Substrate, covering Ethereum-compatible chains, Solana, Stacks, Algorand, and Polkadot-parachain environments. The team publishes audit reports publicly on its website and via a GitHub repository, providing a searchable record of reviewed protocols and identified vulnerabilities.

Protocol development covers DeFi applications, Web3 gaming platforms, DAOs, bridges, rollups, stablecoins, and oracle integrations. The firm positions this as security-led development — engineers with audit experience building production contracts — rather than a generic software shop adding blockchain capability.

Advisory and technical due diligence serve investors and project teams evaluating acquisition targets or new protocol integrations. These engagements typically assess code quality, architecture risk, and compliance posture rather than producing line-by-line audit findings.

Open-Source Security Tooling

CoinFabrik developed Scout, an extensible open-source static analysis tool for smart contract security. Scout operates as a Rust-based CLI and integrates into CI pipelines via a Cargo subcommand and a GitHub Action. The tool detects common vulnerability classes and deviations from best practices, then outputs reports in HTML, Markdown, JSON, PDF, or SARIF formats.

Scout has been extended to support multiple execution environments:

• Scout for Soroban: targets Stellar's Rust-based smart contract platform, developed with support from the Stellar Community Fund.
• Scout for Substrate: targets Polkadot parachain development, funded through the Web3 Foundation Grants Program and the Aleph Zero Ecosystem Funding Program.
• Scout for ink!: covers the ink! smart contract language used on Polkadot.

CoinFabrik also released Scout Agent, a multi-agent AI auditor built on the Scout core and designed for Soroban contracts. It uses a Supervisor-Expert architecture to surface security vulnerabilities and logic flaws that static rules alone may miss.

For the Stacks ecosystem, the firm built STACY, a static analyzer for Clarity, the language used in Stacks smart contracts.

For Solana specifically, CoinFabrik developed SOLbricks, a Solana smart contract testing tool targeting developers building on the network.

Solana Ecosystem Involvement

CoinFabrik has a documented presence in the Solana ecosystem that predates many other Latin American audit firms. The company hosted the first Solana hackathon held in Argentina, which contributed to regional developer adoption. Its audit team covers Solana's Rust-based native programs and Sealevel runtime, including SPL programs, DeFi protocols, and NFT infrastructure.

The Solana-specific service page lists expertise in the Sealevel runtime and SVM performance optimization, with an internal team described as specialists in Rust — Solana's primary smart contract language. Industry comparison sources have noted CoinFabrik as an accessible Solana audit option relative to the top-tier firms, with audit pricing typically ranging from $5,000 to $50,000 depending on contract complexity.

Ecosystem Program Memberships

CoinFabrik holds formal positions in several ecosystem audit programs:

• Polkadot Assurance Legion — an official member auditor in Polkadot's curated security program, which funnels parachain and runtime audits to vetted firms.
• Stellar Audit Bank — an approved auditor for Stellar ecosystem projects, including Soroban smart contracts.
• Stacks Nakamoto — a recognized auditor during the Stacks Nakamoto upgrade cycle.

These memberships function as ecosystem-level endorsements and direct a portion of grant-funded audit demand toward CoinFabrik without competitive bidding.

Clients and Audit History

The public audit report catalog covers protocols on Stacks (AIBTC DAO, Stone, Alex, XLink, Zest Protocol, Velar, MemeGoat), Stellar Soroban (BondHive, Aquarius, Excellar), Polkadot Substrate (LAOS Network), and Solidity-based chains (YALA, Crucible, Mokens League). The GitHub audit report repository provides downloadable PDFs and is updated as new reports are cleared for public disclosure.

The firm does not operate a token, a proprietary protocol, or a fee-sharing mechanism. Revenue comes entirely from services contracts.

Team and Research Orientation

CoinFabrik presents as research-oriented relative to typical audit shops. The blog covers compiler fuzzing, cryptographic scaling solutions, governance mechanism design, and vulnerability class analysis. The collaboration with the University of Buenos Aires on Scout reflects an investment in automated detection methods beyond manual review.

The company also publishes practitioner-facing content — guides on becoming a smart contract auditor, platform comparisons, and incident analyses such as a post-mortem on the $1.5 billion Bybit hack — which functions as a lead-generation channel targeting developers and protocol teams.

Summary

CoinFabrik is a decade-old blockchain security and development firm with a broad multichain footprint and formal membership in the Polkadot, Stellar, and Stacks audit ecosystems. Its Solana practice covers native Rust programs and SVM-specific security concerns, supported by the SOLbricks testing tool and an engineering team with Rust expertise. The firm publishes audits openly, contributes open-source security tooling through Scout, and maintains an academic research partnership with the University of Buenos Aires. It does not issue a token and operates as a professional services company.