Certora provides formal verification tools that mathematically validate smart contract code against specified behavior rules, ensuring comprehensive security and correctness. By identifying vulnerabilities across all possible contract states and paths, Certora protects over $25 billion in total value locked (TVL) in decentralized finance applications.
Funding
$36M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
+1Founders
Product
Problem
Smart contracts are susceptible to vulnerabilities that can lead to exploits, resulting in significant financial losses in decentralized finance (DeFi). Traditional testing methods often fail to identify all potential attack vectors across the complex state space of smart contract code.
Solution
Certora offers formal verification tools that mathematically prove smart contract code adheres to specified rules and expected behaviors. The Certora Prover analyzes every possible contract state and execution path to identify vulnerabilities that hackers could exploit. By integrating the Prover into the development pipeline, developers can secure their code on every commit and gain confidence in the security of their smart contracts. In addition to the Prover, Certora provides security audits conducted by formal verification experts who write custom rules to ensure code security.
Target Audience
The primary customers are DeFi projects, Web3 developers, and security-conscious organizations seeking to ensure the security and correctness of their smart contracts.
Features
- Certora Prover: Formally verifies smart contract bytecode against user-defined rules.
- Comprehensive state and path analysis: Checks every possible contract state and path to identify vulnerabilities.
- Integration into development pipeline: Enables security checks on every commit.
- Custom rule development: Formal verification experts write custom rules tailored to specific contract requirements.
- Security Audits: Dedicated auditors provide detailed reports and interactive collaboration.
- Community engagement: Crowdsources custom formal specifications to find vulnerabilities.