Extropy

Extropy is an Oxford-based blockchain and cryptography consultancy that has operated at the intersection of smart contract security, zero-knowledge proof engineering, and developer education since 2015. The firm's stated mission is making blockchain knowledge accessible — a principle that runs through its audit practice, its open-source training materials, and its Extropy Academy learning platform.

What Extropy Does

Extropy operates across three overlapping areas: smart contract security auditing, technical consulting and development, and intensive developer training. The firm describes itself as a "blockchain consultancy offering tutorials, training, and development," but in practice its audit practice and ZK engineering work sit alongside its educational programs as primary service lines.

Security Auditing

Extropy has conducted smart contract audits since 2017. Coverage spans Solidity (EVM), Rust (Solana and other chains), Cairo (Starknet), and zero-knowledge virtual machine implementations. Audit engagements draw on manual code review, static analysis tooling, and formal verification techniques. The firm has collaborated with ecosystems including Base, Starknet, and MINA.

ZK audit work focuses specifically on circuit-level vulnerabilities. Extropy's training materials describe under-constrained circuits as "the #1 vulnerability in ZK systems," alongside arithmetic overflow in finite field arithmetic and soundness failures. Workshops reference actual bugs found in production ZK protocols, positioning the instructional content as a direct output of live audit work.

Extropy publishes a weekly "Security Bytes" series on Medium that dissects recent Web3 exploits — covering vulnerabilities in DeFi protocols, exchange wallets, on-chain governance, and bridge infrastructure. The series draws on the firm's auditing methodology and continued into early 2026, covering incidents across Ethereum, Solana, BNB Smart Chain, and Bitcoin. Recent editions have analyzed access control failures, EIP-7702 delegation exploits, Gnosis Safe execution risks, and exchange wallet vulnerabilities attributed to nonce reuse or RNG failures.

Development Consulting

Technical consulting services cover full-stack decentralized application development, zero-knowledge system design and implementation, cryptography advisory, and language research. The firm has offered DSL design services and protocol-level architecture work alongside application development.

Extropy Academy

Extropy Academy (academy.extropy.io) is the firm's learning platform, described as "the learning hub for smart contract security, DeFi, and zero-knowledge proofs." It delivers hands-on courses, curated lessons, and expert-guided workshops. Much of the content is offered at low or no cost, consistent with the firm's stated commitment to open access.

The academy covers topics from foundational blockchain concepts through advanced auditing methodology, MEV strategy, and formal verification. Extropy's ZK Security Audits workshop, taught by founder Laurence Kirk, requires no prior ZK experience and builds from first principles to circuit-level vulnerability analysis — drawing explicitly on real audit findings from major ZK protocols.

Open-Source Training and Research

The ExtropyIO GitHub organization hosts training repositories that include:

• SolanaBootcamp — Rust-based Solana development training materials
• ZeroKnowledgeBootcamp — ZK proof education (Cairo)
• AdvancedSolidityBootcamp — Smart contract security in Solidity
• AcademyMEVCourse — Code snippets for MEV coursework
• AwesomeZK and AwesomeMaths — Curated resource lists for ZK practitioners
• Phishnet and Fuzzhead — Security tooling (active as of January 2026)

Extropy has also delivered intensive multi-week bootcamps through Encode Club covering Advanced Solidity, Solana, and zero-knowledge proofs / zkML.

Research Publications

The firm produces technical research articles through Extropy Academy and Medium. A 2025 cross-chain MEV analysis examined arbitrage bot behavior across Ethereum (Proposer-Builder Separation), Solana (Jito auction mechanism), Optimism (centralized sequencing), and Starknet (ZK rollup constraints) — quantifying active bot populations, operational costs, and profit distribution using empirical on-chain forensic analysis.

Tokens and Assets

Extropy does not issue or operate a native token. There is no associated token mint or on-chain governance structure.

Team and History

Extropy was founded in 2015 by Laurence Kirk, who left a career in low-latency financial application development in London to pursue graduate study at Oxford while launching the consultancy. Kirk serves as CEO, lead auditor, and primary instructor. He is recognized as a speaker at blockchain and cryptography conferences and has contributed to Encode Club bootcamps and AI governance events.

The founding team included specialists in software development, embedded systems, IT security, legal-tech applications, and cryptography. The firm is based in Oxford, UK.

Solana Ecosystem Fit

Extropy's engagement with Solana runs across several tracks. On the education side, the firm maintains a SolanaBootcamp repository on GitHub and has delivered Solana development training through Encode Club, covering Rust-based program development. On the research side, the 2025 cross-chain MEV analysis specifically examined the Jito auction mechanism and quantified Solana arbitrage bot economics alongside comparable analysis of Ethereum, Optimism, and Starknet.

On the security side, Extropy's Security Bytes series covers Solana-related exploits alongside EVM incidents, and the firm's stated audit capabilities include Rust-based smart contracts — the primary language for Solana on-chain programs. This positions Extropy as a security and education resource for Solana builders alongside its established EVM and ZK client base.