Arbitrum is a family of optimistic rollups that execute transactions off Ethereum and post the resulting data back to it, with fraud proofs allowing incorrect state to be challenged. For a project, it offers lower transaction costs with the familiar EVM development experience, while adding rollup-specific assumptions that must be understood and reviewed.
Building on Arbitrum
Arbitrum is EVM-compatible: Solidity and Vyper contracts compile with the usual toolchains and most Ethereum code deploys with little change. A sequencer orders transactions, and messages between Ethereum and Arbitrum go through dedicated bridge contracts, with withdrawals to Ethereum subject to a challenge period. Arbitrum also supports contracts compiled to WebAssembly, written in languages such as Rust, which run alongside EVM contracts.
Languages: Solidity, Vyper, and Rust through the WebAssembly environment
Frameworks: Foundry, Hardhat
Differences to check: block number and timestamp semantics, gas accounting that includes the cost of posting data to Ethereum
What auditors look at
Sequencer assumptions: behavior if the sequencer is down or delays transactions, and use of sequencer uptime checks with price feeds
Cross-chain messaging between Ethereum and Arbitrum: authentication of the sender, address aliasing of L1 contracts, retryable messages that can fail or be redeemed later
Time and block dependencies that behave differently from Ethereum mainnet
Bridged tokens: which bridge issued the asset and whether the contract assumes a canonical version
Classic EVM risks (reentrancy, access control, oracle manipulation), which apply unchanged
Before requesting quotes
Specify whether the system is Arbitrum only or also deployed on Ethereum or other rollups, and which parts communicate across chains
Describe every L1 to L2 or L2 to L1 message flow and who is allowed to trigger it
List the oracles and bridged assets you depend on, and your plan if the sequencer is unavailable
Indicate whether any code uses the WebAssembly environment, as it requires reviewers with Rust experience
Arbitrum smart contract auditors Wrocław software house for blockchain development, on-chain analytics and crypto compliance
Ethereum · Arbitrum · Base · Polygon · BNB Chain · +4 more
B Public informationUkraine Ukrainian blockchain development company with a dedicated security audit practice
Ethereum · Polygon · Arbitrum · Solana · Sui · +4 more
Web3 security company offering smart contract and infrastructure audits plus threat monitoring
Ethereum · Arbitrum · BNB Chain · Sui
Pune blockchain engineering studio building DeFi protocols, wallets and node clients
Ethereum · Arbitrum · Base · Polygon · Polkadot
Web3 security firm: smart contract, L1/L2 protocol and source code audits, penetration testing
Ethereum · BNB Chain · Polygon · Optimism · ZKsync · +2 more
Smart contract audits, penetration testing and security education, maker of Aderyn and Solodit
Ethereum · ZKsync · Arbitrum · Avalanche · BNB Chain · +8 more
I Public informationUkraine Kyiv engineering studio whose Blockchain Hub builds L1s, DeFi protocols and smart contracts
Ethereum · Base · Arbitrum · BNB Chain · Polygon · +1 more
I Public informationSouth Africa South African security firm offering smart contract audits, penetration testing and threat modeling
Boutique firm auditing smart contracts and Solana programs, with protocol development
Ethereum · Solana · Optimism · Arbitrum · Base
Spanish blockchain-only development company focused on RWA tokenization and smart contracts
Ethereum · Polygon · BNB Chain · Arbitrum · Solana
O Public informationBulgaria Blockchain security firm auditing Solidity smart contracts, with web-based public reports
Ethereum · Polygon · Arbitrum · Base · BNB Chain · +3 more
O Public informationUnited Kingdom Smart contract security audits and the open-source OpenZeppelin Contracts library
Ethereum · Arbitrum · Optimism · Base · ZKsync · +2 more
Remote team of security researchers auditing EVM, Solana and Move smart contracts
Ethereum · Solana · Arbitrum · Optimism · Base · +3 more
Web3 security firm offering smart contract audits, economic analysis and infrastructure tests
Ethereum · Solana · Polygon · TON · Avalanche · +3 more
Smart contract audit firm also offering dApp penetration testing, wallet audits and monitoring
Ethereum · NEAR · BNB Chain · Polygon · Optimism · +8 more
RL Public informationUnited States Web3 and AI engineering firm with a Buenos Aires team, building and auditing smart contracts
Ethereum · Arbitrum · Base · Optimism · Polygon · +5 more
Web3 security firm offering smart contract audits, penetration testing and zero-knowledge services
Ethereum · BNB Chain · Polygon · Arbitrum · Avalanche
Web3 security team auditing smart contracts, dApps and blockchains, with a Bitcoin layer 2 focus
Ethereum · Arbitrum · BNB Chain · Solana · Polygon · +3 more
S Public informationGermany Flensburg Web3 company offering smart contract audits, pentests, development and compliance
Development Audit Penetration testing Ethereum · Arbitrum · Optimism · Base · Polygon · +8 more
Code security audits and economic audits for Web3 protocols, in Solidity, Rust and Move
Ethereum · Arbitrum · Polygon · Base · Optimism · +4 more
TO Public informationUnited States Security firm reviewing smart contracts, nodes and bridges, maker of Slither and Echidna
Ethereum · Arbitrum · Optimism · Solana · Sui · +4 more
Smart contract and zero-knowledge audits backed by formal methods and in-house tools
Ethereum · Arbitrum · Optimism · Base · Polygon
Polish security firm offering smart contract audits, dApp pentesting and AI security reviews
Audit Penetration testing Development Ethereum · Arbitrum · Polygon · BNB Chain · Base · +4 more
Z Public informationUnited Arab Emirates Smart contract and protocol audits, pentesting, compliance and product development, Dubai
Audit Penetration testing Development Ethereum · Solana · Polygon · Arbitrum · Optimism · +9 more
Arbitrum smart contract developers Wrocław software house for blockchain development, on-chain analytics and crypto compliance
Ethereum · Arbitrum · Base · Polygon · BNB Chain · +4 more
B Public informationUkraine Ukrainian blockchain development company with a dedicated security audit practice
Ethereum · Polygon · Arbitrum · Solana · Sui · +4 more
Pune blockchain engineering studio building DeFi protocols, wallets and node clients
Ethereum · Arbitrum · Base · Polygon · Polkadot
I Public informationUkraine Kyiv engineering studio whose Blockchain Hub builds L1s, DeFi protocols and smart contracts
Ethereum · Base · Arbitrum · BNB Chain · Polygon · +1 more
L Public informationAustralia Brisbane product studio building smart contracts, DeFi protocols and full Web3 products
Ethereum · Base · Arbitrum · Optimism · Polygon · +1 more
Ahmedabad engineering firm building Ethereum and Layer 2 smart contracts, dApps and DAO tooling
Ethereum · Arbitrum · Optimism · Base
Boutique firm auditing smart contracts and Solana programs, with protocol development
Ethereum · Solana · Optimism · Arbitrum · Base
Spanish blockchain-only development company focused on RWA tokenization and smart contracts
Ethereum · Polygon · BNB Chain · Arbitrum · Solana
RL Public informationUnited States Web3 and AI engineering firm with a Buenos Aires team, building and auditing smart contracts
Ethereum · Arbitrum · Base · Optimism · Polygon · +5 more
R Public informationUkraine Web3 engineering partner writing audit-ready smart contracts on EVM chains, Solana and Bitcoin
Ethereum · Polygon · BNB Chain · Arbitrum · Base · +6 more
S Public informationGermany Flensburg Web3 company offering smart contract audits, pentests, development and compliance
Development Audit Penetration testing Ethereum · Arbitrum · Optimism · Base · Polygon · +8 more
Polish security firm offering smart contract audits, dApp pentesting and AI security reviews
Audit Penetration testing Development Ethereum · Arbitrum · Polygon · BNB Chain · Base · +4 more
Z Public informationUnited Arab Emirates Smart contract and protocol audits, pentesting, compliance and product development, Dubai
Audit Penetration testing Development Ethereum · Solana · Polygon · Arbitrum · Optimism · +9 more
Z Public informationEstonia Senior crypto engineering team for L1 consensus, zero-knowledge, DeFi mechanisms and stablecoins
Ethereum · Solana · NEAR · Arbitrum · Base · +1 more