Sherlock
Sherlock is a blockchain security firm known for deep protocol-level audits across DEX, Lending, Bridge. This profile aggregates its audit record, 8,900+ findings and notable clients, so you can evaluate fit before requesting a competitive quote through Procur3.
- Audits
- 670
- Findings logged
- 8,900+
- all severities
- Crit + high + med
- 3,985
- material findings
Overview
About Sherlock
Sherlock is a blockchain security firm specialising in smart contract audits and protocol-level security reviews. The team works primarily in Solidity, Rust, Move and Vyper, covering engagements across Ethereum, Arbitrum, Optimism and related ecosystems. Core areas of expertise include DEX, Lending, Bridge, Yield.
With 670 audits on record, Sherlock has worked with notable protocols including Aztec Network, Ethereum Foundation, Aave, Uniswap. The firm's review history provides a transparent track record that teams can evaluate before engaging.
Through Procur3, teams can put their scope to Sherlock alongside other matched firms and receive a competitive quote without a three-week sales cycle.
- Languages
- Solidity, Rust, Move, Vyper
- Chains
- Ethereum, Arbitrum, Optimism, Base, Polygon
- Expertise
- DEX, Lending, Bridge, Yield, Derivatives, Liquid Staking, Cross Chain
- Services
- Smart Contract Audit, Audit Contests, Collaborative Audit, Bug Bounty
Track record
Findings by severity
| Critical, high & medium | 3,985 | 44.8% |
| Low, informational & other | 4,415 | 49.6% |
| Unclassified | ~500 | 5.6% |
Across 670 audits, Sherlock has logged 8,900+ findings, of which 3,985 were rated critical, high or medium, roughly 45% of the total.
Sherlock's published severity groups add up to fewer findings than its published total. The difference is shown as unclassified rather than assigned to either group.
Figures are updated periodically and may not include every engagement. Severity labels follow each report's own classification.
Selected work
Notable clients
- Aztec NetworkLayer 2 (Privacy / ZK)
- Ethereum FoundationLayer 1 Blockchain
- AaveLending
- UniswapDEX
- zkSyncLayer 2 (ZK Rollup)
- MorphoLending
FAQ
Questions about Sherlock
Where can I find Sherlock's audit reports?
Sherlock publishes its audit reports at github.com/sherlock-protocol/sherlock-reports.
What does Sherlock audit?
Sherlock lists Smart Contract Audit, Audit Contests, Collaborative Audit and Bug Bounty across Solidity, Rust, Move and Vyper, and has published work on Ethereum, Arbitrum, Optimism, Base and Polygon.
How much does a Sherlock audit cost?
Procur3 doesn't hold published pricing for Sherlock. Audit cost depends on scope, code size and the depth of review. See smart contract audit cost 2026 for typical ranges, or get an indicative figure from the audit cost calculator.
How do I get a quote from Sherlock?
Post your scope on Procur3 and send it to Sherlock as a private request, or open it to every matched firm and compare quotes.
Compare
Similar audit firms
ValkyriSolidity · 10+ auditsValkyri audit profileRequest a quote
StatemindGo, Rust, Solidity · 64+ auditsStatemind audit profileRequest a quote
Burra SecuritySolidity · 40+ auditsBurra Security audit profileRequest a quote
Phage SecuritySolidity · 100+ auditsPhage Security audit profileRequest a quote
Ready to work with Sherlock?
Send your scope to Sherlock privately, or open it to every matched firm and compare quotes side by side.