CoinFabrik

CoinFabrik is a blockchain security and software development firm established in 2014, with headquarters in Buenos Aires and offices in Palo Alto, Rome, Rio de Janeiro, and Barcelona. Over its decade in the industry the company has delivered more than 350 security audits across over 500 projects, reporting more than 9,000 vulnerabilities detected and more than 10 billion dollars in client assets secured per its official website. CoinFabrik is one of the older independent security outfits operating across Solana and peer ecosystems. Services: Security (flagship) covers smart contract audits, code reviews, quality assurance, risk assessment, custody solution design, and blockchain forensics across Solidity, Rust, Clarity, Go, and Soroban on Solana, Ethereum, Polkadot, Polygon, Avalanche, Stacks, Stellar, Algorand, Near, Tron, Rootstock, and ThorChain. Development covers DeFi protocols, DePIN, bridges, DAOs, rollups, stablecoins, oracles, and onchain gaming for clients including Microsoft, Cisco, Verizon, Solana Foundation, Ethereum Foundation, and Algorand. Advisory covers blockchain strategy consulting, technical due diligence, and fractional Web3 CTO services. Audit methodology follows four stages: scoping, security review with private report, client remediation, and final validation with optional publication. For Solana programs (Rust/Anchor), the workflow uses X-Ray for vulnerability pattern scanning, Cargo Audit for dependency CVEs, and Cargo Clippy for coding errors. Targeted Solana vulnerabilities include missing ownership checks, insufficient signer validation, unchecked arithmetic overflows, unvalidated cross-program invocations, and account data manipulation. Auditors also develop proof-of-concept exploits to validate severity. SOLbricks is a Solana smart contract testing tool built by CoinFabrik for developers on the network. The firm lists the Solana Foundation as a client and co-organized the 2024 Summer Sol Sessions conference in Argentina with the Solana Foundation. Open-source tools include Scout (extensible static analyzer for Soroban, ink!, and Substrate at github.com/CoinFabrik/scout-audit), STACY (Clarity/Stacks analyzer), and CyScout (Solidity/CodeQL analyzer). Ecosystem credentials: Polkadot Assurance Legion approved auditor, Stellar Audit Bank recognized auditor, and performed the audit of the Stacks Nakamoto upgrade. Public audit reports are at github.com/CoinFabrik/coinfabrik-audit-reports. Founded in 2014 with 60-plus employees including security researchers and Rust and Solidity engineers. For Solana teams the firm offers pre-deployment security reviews of Rust and Anchor programs, SOLbricks testing support, and development services for high-performance on-chain applications.