Certora

About

Certora is a smart contract security company operated by Certora Ltd. It develops Certora Prover, a formal verification tool that checks smart contract bytecode against rules describing the expected behaviour of the code, and offers security audits built around it. Each audit combines a manual code review with formal verification: the team determines scope and timeline, security experts write formal specifications in the Certora Verification Language (CVL), whose syntax is close to Solidity, run them against the code with the Prover and deliver a report listing vulnerabilities together with the specifications. Clients can re-run these rules whenever their code changes, which requires a Prover subscription. The Prover can also be integrated into a development pipeline to run on every commit, and Certora maintains Gambit, a mutation testing tool. The company runs community audit contests focused on formal specifications and publishes its audit and formal verification reports on its website. Its site presents ecosystem pages for Solana, Stellar and Sui, and its published reports include DeFi lending, restaking and governance protocols on Ethereum.

At a glance

• Develops Certora Prover, a formal verification tool for smart contracts
• Every audit combines manual review with formal verification
• Delivers the CVL specifications so clients can re-run them after code changes
• Maintains Gambit, a mutation testing tool
• Publishes audit and formal verification reports on its website

Certora: frequently asked questions

What services does Certora offer?

According to its public information, Certora offers: Audit.

Which blockchains does Certora work with?

Certora works with Ethereum, Solana, and Sui.

Which smart contract languages does Certora use?

Certora works with Solidity.

Is Certora verified on smart-contract.com?

Not yet. This listing was compiled from public information and Certora has not claimed it or gone through the vetting process of smart-contract.com.

How can I get a quote from Certora?

Describe your project once on smart-contract.com: you receive comparable quotes from vendors that match it, in the same format. Development and audit are always entrusted to two independent companies.