# Safe Edges

> Safe Edges is a blockchain security and smart contract audit firm. We have audited 200+ Web3 protocols, secured $4B+ in digital assets, and no client protocol has been hacked after sign-off. We are an official security partner of Fuel Chain. Services span smart contract audits, DeFi/DeFAI security, Web3 penetration testing, blockchain forensics, ZK security, AI agent & MCP audits, and vCISO.

Contact: info@safeedges.in · Book a call: https://calendly.com/vivanchauhan-safeedges/30min · Telegram: @bugtester25

## Core services

- [Blockchain Security Audit](https://safeedges.in/services/blockchain-security-audit): End-to-end review of a blockchain system — contracts, protocol and consensus, node and key infrastructure, and off-chain services with on-chain authority.
- [Smart Contract Audit](https://safeedges.in/services/smart-contract-audit): Manual review, fuzzing, invariant testing and exploit-path simulation before mainnet deployment.
- [Blockchain Security Assessment](https://safeedges.in/services/blockchain-security-assessment): Posture evaluation — architecture, threat model, controls, key management and operational readiness — with a risk rating and prioritised remediation.
- [Blockchain Vulnerability Assessment](https://safeedges.in/services/blockchain-vulnerability-assessment): Breadth-first enumeration across contracts, nodes, RPC, APIs and dependencies, hand-verified to remove false positives.
- [Blockchain Infrastructure Security Audit](https://safeedges.in/services/blockchain-infrastructure-security-audit): Nodes, validators, sequencers, RPC, signing services, cloud identity, CI/CD and monitoring.
- [Layer 2 Security Audit](https://safeedges.in/services/layer-2-security-audit): Rollup contracts, proof and fraud-proof systems, sequencer and proposer operations, canonical bridge, escape hatch and upgrade authority.
- [Tokenized Securities Audit](https://safeedges.in/services/tokenized-securities-audit): Security token review — transfer restrictions, investor eligibility, cap-table integrity, corporate actions and transfer-agent powers (ERC-1400, ERC-3643, ERC-1404).
- [All security services](https://safeedges.in/services): Full catalogue of audit, testing and advisory services.
- [Bridge Audit](https://safeedges.in/services/bridge-audit): Message verification, validator set and lock/mint accounting review for cross-chain bridges.
- [Perp DEX Audit](https://safeedges.in/services/perp-dex-audit): Funding rate, liquidation engine, margin and oracle review for perpetuals venues.
- [Incident Response](https://safeedges.in/services/incident-response): Live exploit triage, containment, fund tracing and post-mortem.
- [DeFi Due Diligence](https://safeedges.in/services/defi-diligence): Economic and protocol-level review for lending, DEX, staking and yield systems.
- [Lending Protocol Audit](https://safeedges.in/services/lending-audit): Collateral, liquidation, interest-rate model and oracle risk review.
- [Stablecoin Audit](https://safeedges.in/services/stablecoin-audit): Peg mechanics, mint/redeem paths and reserve logic review.
- [dApp Audit](https://safeedges.in/services/dapp-audit): Front-end, RPC, signing flow and contract-integration review.
- [Wallet Audit](https://safeedges.in/services/wallet-audit): Key storage, signing flows, permissions and supply-chain hardening.
- [Blockchain Protocol Audit](https://safeedges.in/services/blockchain-protocol-audit): Consensus, state transition, bridging and validator assumptions for L1/L2/appchains.
- [Blockchain Penetration Testing](https://safeedges.in/services/pen-test): Offensive testing of nodes, RPC endpoints, APIs, infrastructure and dApp front ends.
- [AI & MCP Audit](https://safeedges.in/services/ai-mcp-audit): Prompt injection, tool hijacking, RAG poisoning, privilege escalation and autonomous-action risk for AI agents and Model Context Protocol servers.
- [DeFAI Audit](https://safeedges.in/services/defai-audit): Security review for AI-driven DeFi agents and automated strategy systems.
- [ZK Security](https://safeedges.in/zk-security): Circuit, proving-system and verifier review for zero-knowledge applications.
- [Blockchain Forensics](https://safeedges.in/services/blockchain-forensics): On-chain investigation, fund tracing and incident response.
- [RWA Audit](https://safeedges.in/services/rwa-audit): Tokenised real-world asset protocol and compliance-surface review.
- [GameFi Audit](https://safeedges.in/services/gamefi-audit): Game economy, asset and contract security review.
- [DePIN Audit](https://safeedges.in/services/depin-audit): Device, oracle and reward-mechanism review for decentralised physical infrastructure.
- [AVS Audit](https://safeedges.in/services/avs-audit): Actively Validated Service and restaking security review.
- [NFT Due Diligence](https://safeedges.in/services/nft-due-diligence): Mint logic, royalty, metadata and marketplace-integration review.
- [vCISO](https://safeedges.in/services/vciso): Fractional security leadership, policy design and program execution.

## Blockchain security by industry

- [Banks & Financial Institutions](https://safeedges.in/industries/banks-and-financial-institutions): Custody governance, core-system integration, settlement finality and board/regulator-ready evidence.
- [Fintech](https://safeedges.in/industries/fintech): Wallet and custody architecture, payment and settlement flows, API authorisation and partner-ready assurance.
- [Crypto Exchanges](https://safeedges.in/industries/crypto-exchanges): Hot/cold custody, withdrawal authorisation, deposit crediting, listing risk and insider containment.
- [Custodians](https://safeedges.in/industries/custodians): Key ceremony, MPC/HSM architecture, quorum policy, segregation and tested recovery.
- [Stablecoin Issuers](https://safeedges.in/industries/stablecoin-issuers): Mint and burn authority, redemption under stress, attestation integrity and cross-chain supply reconciliation.
- [Tokenization Platforms](https://safeedges.in/industries/tokenization-platforms): Issuance factory, tenant isolation, restriction engine, identity registry and asset-link integrity.
- [Enterprise](https://safeedges.in/industries/enterprise): Permissioned and consortium ledgers, endorsement policy, identity services and ERP integration risk.
- [Institutional Investors](https://safeedges.in/industries/institutional-investors): Investor-commissioned technical due diligence with an investment-committee risk memo.
- [Central Banks & CBDC](https://safeedges.in/industries/central-banks-and-cbdc): Issuance authority, tiered distribution, privacy architecture, offline integrity and resilience.
- [All industries](https://safeedges.in/industries)

## Markets served

- [India](https://safeedges.in/locations/india) — headquarters
- [United States](https://safeedges.in/locations/united-states)
- [United Kingdom](https://safeedges.in/locations/united-kingdom)
- [Europe](https://safeedges.in/locations/europe)
- [Japan](https://safeedges.in/locations/japan)
- [Singapore](https://safeedges.in/locations/singapore)
- [United Arab Emirates](https://safeedges.in/locations/united-arab-emirates)
- [South Korea](https://safeedges.in/locations/south-korea)
- [All markets](https://safeedges.in/locations)

## Chain-specific audits

- [Ethereum Smart Contract Audit](https://safeedges.in/services/chain/ethereum-smart-contract-audit)
- [Solana Audit](https://safeedges.in/services/chain/solana-audit)
- [Base Audit](https://safeedges.in/services/chain/base-chain-audit)
- [Arbitrum Audit](https://safeedges.in/services/chain/arbitrum-audit)
- [Optimism Audit](https://safeedges.in/services/chain/optimism-audit)
- [Polygon Audit](https://safeedges.in/services/chain/polygon-audit)
- [BSC Audit](https://safeedges.in/services/chain/bsc-audit)
- [Avalanche Audit](https://safeedges.in/services/chain/avalanche-audit)
- [Sui Audit](https://safeedges.in/services/chain/sui-audit)
- [Starknet Audit](https://safeedges.in/services/chain/starknet-audit)
- [zkSync Audit](https://safeedges.in/services/chain/zksync-audit)
- [Scroll Audit](https://safeedges.in/services/chain/scroll-audit)
- [Linea Audit](https://safeedges.in/services/chain/linea-audit)
- [Aztec Audit](https://safeedges.in/services/chain/aztec-audit)
- [Monad Audit](https://safeedges.in/services/chain/monad-audit)
- [Berachain Audit](https://safeedges.in/services/chain/berachain-audit)
- [HyperEVM Audit](https://safeedges.in/services/chain/hyperevm-audit)
- [Near Audit](https://safeedges.in/services/chain/near-audit)
- [Cosmos Audit](https://safeedges.in/services/chain/cosmos-audit)
- [Polkadot Audit](https://safeedges.in/services/chain/polkadot-audit)
- [Flow Audit](https://safeedges.in/services/chain/flow-audit)
- [Tezos Audit](https://safeedges.in/services/chain/tezos-audit)
- [Stacks Audit](https://safeedges.in/services/chain/stacks-audit)

## Language-specific audits

- [Solidity Audit](https://safeedges.in/services/lang/solidity-audit)
- [Rust Audit](https://safeedges.in/services/lang/rust-audit)
- [Move Audit](https://safeedges.in/services/lang/move-audit)
- [Cairo Audit](https://safeedges.in/services/lang/cairo-audit)
- [Sway Audit](https://safeedges.in/services/lang/sway-audit)
- [Noir Audit](https://safeedges.in/services/lang/noir-audit)
- [Clarity Audit](https://safeedges.in/services/lang/clarity-audit)
- [Cadence Audit](https://safeedges.in/services/lang/cadence-audit)
- [Go Audit](https://safeedges.in/services/lang/go-audit)

## Company

- [About Safe Edges](https://safeedges.in/about-us): Team, track record and security philosophy.
- [Public audit reports](https://safeedges.in/reports): Completed audits and published findings.
- [FAQ](https://safeedges.in/faq): How audits are scoped, priced and delivered.
- [Contact](https://safeedges.in/contact)

## Research and open-source tools

- [Safe Edges Insights (research blog)](https://blog.safeedges.in/): Exploit post-mortems, vulnerability research and protocol deep dives.
- [SwayScan](https://crates.io/crates/swayscan): Open-source static analysis CLI for the Sway language on Fuel.
- [EVM Sleuth](https://evmsleuth.com): On-chain investigation and proactive threat-detection system.
- [GitHub](https://github.com/Safe-Edges): Public audit portfolio and tooling.

## Optional

- [Privacy Policy](https://safeedges.in/privacy-policy)
- [Terms of Use](https://safeedges.in/terms-of-use)

## Buying an audit

- [Smart contract audit cost](https://safeedges.in/smart-contract-audit-cost): What an audit costs and why quotes vary, plus a free browser-based estimator. Token contracts start from $999 (24-48 hour turnaround); dApp, GameFi and RWA projects start from $2,999; DeFi protocols, L2s, bridges, ZK circuits and AI agents are scoped per project.
- [Audit process](https://safeedges.in/audit-process): The six-phase engagement in the order it happens - scoping and threat modelling, independent manual review, static and dynamic analysis, exploit-path simulation, reporting, and fix review - plus how to prepare.
- [Free security tools](https://safeedges.in/tools): SwayScan (open-source Sway static analyser, crates.io) and EVM Sleuth (free EVM contract inspection), plus a pre-audit self-check list.
- [Our team](https://safeedges.in/team): The named security researchers who carry out the audits.
- [Published reports](https://safeedges.in/reports): Public audit reports from completed engagements.
- [FAQ](https://safeedges.in/faq): Cost, timeline, scope, NDA and re-test questions answered.