Softstack
Softstack is a blockchain security firm known for deep protocol-level audits across smart contract security. This profile aggregates its audit record, 11,054 findings and notable clients, so you can evaluate fit before requesting a competitive quote through Procur3.
- Audits
- 1,265
- across 9+ years
- Findings logged
- 11,054
- all severities
- Crit + high + med
- 3,814
- material findings
Source: softstack.io/audits
Overview
About Softstack
Founded in 2017, Softstack is a blockchain security firm specialising in smart contract audits and protocol-level security reviews. The team works primarily in Solidity, Rust, Move and Go, covering engagements across Ethereum, Bitcoin, Canton and related ecosystems. Core areas of expertise include smart contract security.
With 1,265 audits on record, Softstack has worked with notable protocols including Ripple (XRP Ledger), BitGo Europe, Anchorage Digital, TON. The firm's review history provides a transparent track record that teams can evaluate before engaging.
Through Procur3, teams can put their scope to Softstack alongside other matched firms and receive a competitive quote without a three-week sales cycle.
- Languages
- Solidity, Rust, Move, Go, Vyper, Cairo, Circom, Noir, FunC, Bitcoin Script, Daml
- Chains
- Ethereum, Bitcoin, Canton, Aptos, Sui, TON
- Services
- Smart Contract Audit, Protocol Audit, Penetration Testing, Formal Verification, Fuzzing, Invariant Testing, Cryptography, L1/L2 Audit, Frontend Audit, Web2 Code Audit, Admin Audits (Multisigs), Cloud Infrastructure & Deployments, Incident Response, Real-time Monitoring
Track record
Findings by severity
| Critical, high & medium | 3,814 | 34.5% |
| Low, informational & other | 7,240 | 65.5% |
Across 1,265 audits, Softstack has logged 11,054 findings, of which 3,814 were rated critical, high or medium, roughly 35% of the total.
Figures are updated periodically and may not include every engagement. Severity labels follow each report's own classification.
Selected work
Notable clients
- Ripple (XRP Ledger)
- BitGo Europe
- Anchorage Digital
- TON
- 21Shares
- Worldcoin
FAQ
Questions about Softstack
Where can I find Softstack's audit reports?
Softstack publishes its audit reports at softstack.io/audits.
What does Softstack audit?
Softstack lists Smart Contract Audit, Protocol Audit, Penetration Testing, Formal Verification, Fuzzing, Invariant Testing, Cryptography, L1/L2 Audit, Frontend Audit, Web2 Code Audit, Admin Audits (Multisigs), Cloud Infrastructure & Deployments, Incident Response and Real-time Monitoring across Solidity, Rust, Move, Go, Vyper, Cairo, Circom, Noir, FunC, Bitcoin Script and Daml, and has published work on Ethereum, Bitcoin, Canton, Aptos, Sui and TON.
How much does a Softstack audit cost?
Procur3 doesn't hold published pricing for Softstack. Audit cost depends on scope, code size and the depth of review. See smart contract audit cost 2026 for typical ranges, or get an indicative figure from the audit cost calculator.
How do I get a quote from Softstack?
Post your scope on Procur3 and send it to Softstack as a private request, or open it to every matched firm and compare quotes.
Ready to work with Softstack?
Send your scope to Softstack privately, or open it to every matched firm and compare quotes side by side.



