# CertiK > The largest Web3 security service provider CertiK is a Web3 security company founded in 2018 by Professor Ronghui Gu of Columbia University and Professor Zhong Shao of Yale University. CertiK applies formal verification, AI-driven analysis, and expert manual review to secure blockchain protocols, smart contracts, and decentralized applications. ## Key Statistics - Market Cap Assessed: $576B+ - Clients Served: 5,500+ - Projects Monitored: 18,600+ - Valuation: $2B - Monthly Skynet Users: 1.8M+ ## Certifications & Recognition - SOC2 Type II Compliant - ISO 27001 Certified ## Products - [Code Audit](https://www.certik.com/products/smart-contract-audit): Smart contract security assessment - [Skynet](https://www.certik.com/products/skynet): Rating platform for crypto assets - [Penetration Testing](https://www.certik.com/products/pentest): In-depth attack simulation - [Formal Verification](https://www.certik.com/products/formal-verification): Mathematically verified code - [SkyInsights](https://www.certik.com/products/skyinsights): Compliance, AML and risk management - [DLT Security Solutions](https://www.certik.com/products/dlt-security-solutions): Enterprise infrastructure readiness - [AI Auditor](https://aiauditor.certik.com): AI-powered smart contract auditing platform - [Hunt](https://hunt.certik.com): Bug Bounties, Auditing Competitions, and Challenges - [KYC Verification](https://www.certik.com/products/kyc): Project team identity verification - [CertiK Validator Service](https://www.certik.com/products/skynode): Enterprise-grade validator operations - [Skynet Score](https://www.certik.com/products/skynet-score): On- and off-chain security evaluation - [VARA Compliance Solutions](https://www.certik.com/products/vara): Dubai VASP licensing advisory - [DORA & MiCA Compliance](https://www.certik.com/products/dora-mica): EU CASP regulatory advisory - [Proof of Reserves Audit](https://www.certik.com/products/proof-of-reserves-audit): Independent reserves verification - [L1 Chain Audit](https://www.certik.com/products/l1-chain-audit): Layer 1 blockchain protocol security - [Skylens](https://skylens.certik.com): Explore on-chain data in depth **Code Audit** -- Smart contract security assessments using AI-powered analysis, manual expert review, and formal verification. Supports Solidity, Rust, Move, Go, and other blockchain languages. **Skynet** -- Real-time security monitoring and rating platform for blockchain protocols and DeFi ecosystems. Stats: 17,000+ projects monitored, 100+ ecosystems monitored, 1.8M+ monthly active users. **Penetration Testing** -- In-depth attack simulations for Web3 applications, mobile apps, wallets, and off-chain infrastructure. Coverage areas: web, mobile, cloud, AI/ML, SDK, and source code. **Formal Verification** -- Mathematical proofs that verify smart contract and blockchain protocol correctness across all possible conditions. **SkyInsights** -- Compliance, AML, and risk management for exchanges, DeFi protocols, financial institutions, and crypto custodians. Stats: 300M+ address labels, 9+15 chains full and lite supported, 12+66 categories and subcategories, 4,000+ incidents detected since 2020. **DLT Security Solutions** -- Strategy, architecture design, and security assessments for institutions adopting distributed ledger technologies. **AI Auditor** -- AI-powered smart contract auditing platform for security researchers and Web3 teams. **KYC Verification** -- Identity verification for Web3 project team members, with results published on Skynet for due diligence and transparency. **Hunt** -- Bug Bounties, Auditing Competitions, and Challenges connecting Web3 projects with vetted ethical hackers. **CertiK Validator Service** -- Managed validator and full nodes across multiple blockchain networks. Stats: 13+ supported networks, $747.8M+ in secured value, and 99.99% uptime. **Skynet Score** -- Real-time on-chain and off-chain security evaluation for Web3 projects, exchanges, and wallets. **VARA Compliance Solutions** -- Dubai VASP licensing advisory with security audits, compliance gap analysis, risk assessments, and advisory support. **DORA & MiCA Compliance** -- EU CASP regulatory advisory covering penetration testing, smart contract auditing, source code review, infrastructure assessments, incident response support, and third-party risk management. **Proof of Reserves Audit** -- Independent verification that exchanges and custodians hold sufficient assets to back customer deposits. **L1 Chain Audit** -- Expert audits, formal verification, and vulnerability assessments for consensus mechanisms, networking layers, VMs, and cryptographic implementations. **Skylens** -- On-chain data exploration for investigation, analysis, and security research workflows. ## Solutions **For Enterprises** -- Security, compliance, and risk management for institutional adoption: Code Audit, Penetration Testing, DLT Security Solutions, VARA Compliance Solutions, DORA & MiCA Compliance, SkyInsights, Proof of Reserves Audit. **For Web3 Projects** -- Secure your protocol from launch to long-term operation: Code Audit, Skynet, Penetration Testing, KYC Verification, CertiK Hunt, CertiK Validator Service. **For Exchanges & Custodians** -- Transparency, monitoring, and resilience for asset platforms: Penetration Testing, Proof of Reserves Audit, Code Audit, SkyInsights, Skynet Score, CertiK Hunt. **For Regulators & Compliance** -- Compliance and assurance aligned with regulatory standards: DLT Security Solutions, VARA Compliance Solutions, DORA & MiCA Compliance, SkyInsights, Proof of Reserves Audit, Skynet, Skynet Score. **For Security Researchers** -- Tools and data to support the global security research community: AI Auditor, Hunt, Skylens. ## Ecosystems CertiK provides security services across blockchain ecosystems including: - [BNB Chain](https://www.certik.com/ecosystems/bnb-chain) - [Bitcoin](https://www.certik.com/ecosystems/bitcoin) - [TON](https://www.certik.com/ecosystems/ton) - [Cosmos](https://www.certik.com/ecosystems/cosmos) - [Cardano](https://www.certik.com/ecosystems/cardano) - [Aptos](https://www.certik.com/ecosystems/aptos) - [Algorand](https://www.certik.com/ecosystems/algorand) - [Sui](https://www.certik.com/ecosystems/sui) - [Kaia](https://www.certik.com/ecosystems/kaia) - [ZKPs](https://www.certik.com/ecosystems/zkps) ## Company - [About](https://www.certik.com/company/about): Mission, founding story, leadership team, and milestones. - [Research](https://www.certik.com/company/research): Security research, vulnerability disclosures, and technical deep-dives. - [Testimonials](https://www.certik.com/company/testimonials): Client testimonials from Web3 projects, exchanges, and enterprises. - [Worker Validation](https://www.certik.com/company/worker-validation): Verify whether an individual is an authorized CertiK employee. - [We're Hiring](https://www.certik.com/company/careers): Career opportunities for people building trust in Web3 security. - [Disclaimer](https://www.certik.com/company/disclaimer): Legal disclaimers for CertiK content, products, and services. ## Notable Clients Binance, Tether, OKX, Apple, Samsung, Ripple, Crypto.com, PancakeSwap, Cardano, Fireblocks, Aptos, TON, Gala, The Sandbox, Ethereum, WEMIX, Bitget, Trust Wallet, Paxos, Pepe, Hedera, Ondo, Frax Finance, Ant Group, Sei, Aethir, Peaq, Bitcoin.com, Wormhole, 1inch, Venus, BloFin, Floki, WalletConnect, Sui, Kaia ## Backed By Binance, Sequoia, Coatue, Shun Wei, Tiger Global, SoftBank, Goldman Sachs, Lightspeed, Coinbase, Insight Partners, Advent International, Yale University ## Regulatory Contributions - **United States Congress**: CertiK CBO Jason Jiang engages with U.S. Congress Members on Web3 security policy. - **Monetary Authority of Singapore (MAS)**: Co-founder Ronghui Gu joined the MAS International Technology Advisory Panel as the sole Web3 representative. ([source](https://www.mas.gov.sg/who-we-are/mas-advisory-panels-and-committees/international-technology-advisory-panel)) - **Hong Kong SAR**: Joined the Hong Kong Web3 Development Task Force for DLT regulation recommendations. ([source](https://www.info.gov.hk/gia/general/202306/30/P2023063000579.htm)) - **Seoul and Busan (South Korea)**: Signed Web3 Security Partnership MOUs. ([source](https://www.globenewswire.com/news-release/2025/01/15/3009780/0/en/Busan-Digital-Asset-Exchange-and-CertiK-Reach-Strategic-Cooperation-to-Promote-Security-Upgrade-of-Digital-Asset-Transactions.html)) - **Abu Dhabi Global Market (ADGM)**: Co-Founder participated in a closed-door roundtable on stablecoins. - **Financial Services Agency of Japan (JFSA)**: Collaborated on contract auditing compliances and incident monitoring. ## Resources - [Blog](https://www.certik.com/blog): Vulnerability post-mortems, ecosystem assessments, product announcements, technical deep-dives, and Web3 security education. - [Hack3D Reports](https://www.certik.com/certik-report/hack3d): Quarterly and annual Web3 security research tracking exploits, vulnerabilities, incidents, and losses across the ecosystem. - [CertiK Report](https://www.certik.com/skynet-report): Web3 security reports powered by Skynet intelligence, including the quarterly and annual "Hack3d" series. - [CertiK Intel3D H1 2026 Wrench Attacks](https://www.certik.com/certik-report/intel3d/intel3d-wrench-h1-2026): Research on physical coercion attacks targeting Web3 participants, including incident trends and security recommendations. - [FAQ](https://www.certik.com/faq): Answers about CertiK services, products, and security practices. - [Skynet Rating](https://skynet.certik.com): Real-time security ratings and risk analytics for Web3 projects.