On-chain infrastructure, built to be audited
Crypto is the one place where your bugs are public, permanent and profitable to someone else. We engineer accordingly: economics modelled first, invariants tested rather than assumed, and an independent audit standing between the code and the chain.
Everything from the contract to the settlement report
Eight areas we take end-to-end responsibility for — including the unglamorous parts that decide whether a protocol survives its first volatile week.
Smart Contract Engineering
Solidity, Vyper and Rust contracts with full invariant and fuzz coverage, deterministic deployments and upgrade paths that do not strand state.
DeFi Protocol Design
AMMs, lending markets, perpetuals, staking and real-world-asset vaults — economic modelling first, code second, audit before mainnet.
Wallets & MPC Custody
Embedded wallets, account abstraction, threshold signing and policy engines that keep keys recoverable without keeping them exposed.
Exchange & Trading Rails
Matching engines, order routing, market-data pipelines and settlement flows engineered for latency budgets measured in microseconds.
Tokenization & RWAs
Token standards, vesting and treasury tooling, plus compliant tokenization of real-world assets with transfer-restriction logic built in.
Indexing & On-Chain Data
Subgraphs, custom indexers and reorg-safe ETL that turn raw chain state into analytics your product and your finance team both trust.
Bridges & Interoperability
Cross-chain messaging, canonical bridge integrations and liquidity routing with explicit trust assumptions documented for every hop.
Compliance & Key Policy
Travel Rule integrations, sanctions screening, audit trails and signing policy that survive a regulator's questions and an auditor's sampling.
Four gates every protocol passes
These are not optional extras we quote separately. They are the minimum standard for anything we put our name on.
- 01
Specification before Solidity
Every protocol starts as a written spec with stated invariants and an economic model. If the incentives do not hold on paper, no amount of clean code saves them on chain.
- 02
Invariants, not happy paths
We write property-based and fuzz tests against the invariants themselves — supply conservation, solvency, access control — so the suite catches states no one thought to enumerate.
- 03
Independent audit as a gate
An external audit is scheduled before a mainnet date is announced, and every finding is tracked to resolution with a public summary. We do not launch on an open critical.
- 04
Keys, policy and recovery
Threshold signing, hardware-backed roots, spending policy and a rehearsed recovery path. The question is never whether a key is lost, only whether you planned for it.
Networks and tooling
We are chain-agnostic by default and opinionated once we understand your users, your latency budget and your regulatory surface.
- Ethereum
- Base
- Arbitrum
- Optimism
- Solana
- Polygon
- Avalanche
- Cosmos
- Bitcoin / Lightning
- Sui
- Starknet
- zkSync
Contracts
- Solidity
- Vyper
- Rust / Anchor
- Move
Tooling
- Foundry
- Hardhat
- Echidna
- Slither
- Tenderly
Integration
- viem
- wagmi
- ethers
- The Graph
- Chainlink
Custody
- MPC / TSS
- HSM
- Account abstraction
- Safe
Three ways to work with us, priced after discovery
We quote once we understand the scope, because a number invented before that is a number someone will have to renegotiate later.
Architecture Sprint
Fixed fee · 2 weeks
A senior team drops into your problem and leaves you with an architecture, a threat model and a costed delivery plan you can execute with anyone.
Best for teams deciding what to build
- Technical & economic architecture
- Threat model and risk register
- Costed roadmap with milestones
- Executive readout
Product Pod
Monthly retainer · 3 month minimum
A cross-functional pod — product engineer, platform engineer, designer and a fractional architect — shipping to production every two weeks.
Best for zero-to-one and major rebuilds
- Dedicated cross-functional pod
- Two-week sprints with live demos
- Full CI/CD and observability setup
- Direct Slack channel with the builders
Audit & Assurance
Scoped fee · 2–4 weeks
Independent review of a codebase, protocol or cloud estate, delivered as a prioritised report with reproductions and remediation guidance.
Best for pre-launch and pre-raise
- Line-by-line contract review
- Invariant and fuzz test suite
- Infrastructure & access review
- Public-ready audit summary
Shipping something on chain?
Send us the repository, the spec, or the idea on a napkin. We will tell you honestly what it needs before it touches mainnet.
San Francisco, CA · Serving clients in 30+ countries