Skip to content

Softstack

On Procur3Est. 2017softstack.io ↗

SolidityRustMoveGoVyperCairoCircomNoirFunCBitcoin ScriptDamlEthereumBitcoinCanton

Softstack is a blockchain security firm known for deep protocol-level audits across smart contract security. This profile aggregates its audit record, 11,054 findings and notable clients, so you can evaluate fit before requesting a competitive quote through Procur3.

Last updated: November 2026

Audits
1,265
across 9+ years
Findings logged
11,054
all severities
Crit + high + med
3,814
material findings

Source: softstack.io/audits

Overview

About Softstack

Founded in 2017, Softstack is a blockchain security firm specialising in smart contract audits and protocol-level security reviews. The team works primarily in Solidity, Rust, Move and Go, covering engagements across Ethereum, Bitcoin, Canton and related ecosystems. Core areas of expertise include smart contract security.

With 1,265 audits on record, Softstack has worked with notable protocols including Ripple (XRP Ledger), BitGo Europe, Anchorage Digital, TON. The firm's review history provides a transparent track record that teams can evaluate before engaging.

Through Procur3, teams can put their scope to Softstack alongside other matched firms and receive a competitive quote without a three-week sales cycle.

Languages
Solidity, Rust, Move, Go, Vyper, Cairo, Circom, Noir, FunC, Bitcoin Script, Daml
Chains
Ethereum, Bitcoin, Canton, Aptos, Sui, TON
Services
Smart Contract Audit, Protocol Audit, Penetration Testing, Formal Verification, Fuzzing, Invariant Testing, Cryptography, L1/L2 Audit, Frontend Audit, Web2 Code Audit, Admin Audits (Multisigs), Cloud Infrastructure & Deployments, Incident Response, Real-time Monitoring

Track record

Findings by severity

Critical, high & medium3,81434.5%
Low, informational & other7,24065.5%

Across 1,265 audits, Softstack has logged 11,054 findings, of which 3,814 were rated critical, high or medium, roughly 35% of the total.

Figures are updated periodically and may not include every engagement. Severity labels follow each report's own classification.

Selected work

Notable clients

  • Ripple (XRP Ledger)
  • BitGo Europe
  • Anchorage Digital
  • TON
  • 21Shares
  • Worldcoin

FAQ

Questions about Softstack

Where can I find Softstack's audit reports?

Softstack publishes its audit reports at softstack.io/audits.

What does Softstack audit?

Softstack lists Smart Contract Audit, Protocol Audit, Penetration Testing, Formal Verification, Fuzzing, Invariant Testing, Cryptography, L1/L2 Audit, Frontend Audit, Web2 Code Audit, Admin Audits (Multisigs), Cloud Infrastructure & Deployments, Incident Response and Real-time Monitoring across Solidity, Rust, Move, Go, Vyper, Cairo, Circom, Noir, FunC, Bitcoin Script and Daml, and has published work on Ethereum, Bitcoin, Canton, Aptos, Sui and TON.

How much does a Softstack audit cost?

Procur3 doesn't hold published pricing for Softstack. Audit cost depends on scope, code size and the depth of review. See smart contract audit cost 2026 for typical ranges, or get an indicative figure from the audit cost calculator.

How do I get a quote from Softstack?

Post your scope on Procur3 and send it to Softstack as a private request, or open it to every matched firm and compare quotes.

Ready to work with Softstack?

Send your scope to Softstack privately, or open it to every matched firm and compare quotes side by side.