Sec3 is a security research firm focused on smart contract audits and formal verification for production onchain systems.
Our deepest expertise is in Solana and SVM security, where real risk often lives in account validation, authority boundaries, CPIs, token accounting, oracle assumptions, and protocol invariants.
We approach audits as system-level security reviews, not checklist exercises. Our work combines manual code review, adversarial testing, static analysis, and PhD-led formal methods.
We help DeFi, stablecoin, RWA, payments, and infrastructure teams find critical logic flaws, validate fixes, and ship with confidence.
Manual smart contract and protocol reviews for systems that move real value. We focus on business logic, account and authority checks, asset accounting, upgrade paths, oracle assumptions, and cross-program or cross-chain interactions. Each review produces clear findings, fix guidance, and follow-up validation.
Mathematical review of critical protocol invariants. We help teams specify the properties that must always hold, then use formal methods and targeted analysis to test whether the implementation preserves them across edge cases and adversarial flows.
Pre-mainnet security support for teams preparing to ship. We review architecture, code, deployment assumptions, admin controls, and operational procedures so teams can close high-risk gaps before production users and liquidity arrive.
Research-backed security analysis supported by Sec3’s Solana static analysis work, vulnerability research, and automated scanner technology. We use tooling to expand coverage but rely on senior researchers for final judgment.
Early security input for teams designing new protocols, payment flows, tokenized asset systems, and DeFi primitives. We help identify fragile assumptions, define invariants, and reduce security risk before implementation locks in.
This site contains content and information, including links to other sites and resources, that was prepared by third parties ("Third Party Content") who are not affiliated with Circle or any of its affiliates (collectively "Circle"). Circle makes no representations on the accuracy, suitability, or validity of Third Party Content. As such, Circle is neither responsible nor liable for any Third Party Content, including any errors, omissions, or delays, or for any actions taken in reliance upon any Thirds Party Content. Reference to any specific company, product, service, or website of any third party does not constitute an implied or express endorsement, recommendation, favoring or validation by Circle. All content provided is for educational and informational purposes only. Circle shall not be liable for any damage or loss relating to use of, or reliance upon, the Third Party Content.