Auditors · audits and the hacks that came after
Auditors (33)
33 audit firms on record as of Oct 4, 2026; 'hacked after' counts the audited tokens with a hack dated after the firm's audit.
Audit firms
33
linked on DefiLlama · Oct 4, 2026
Audit links
135
across all firms
Hacked after
2
audited tokens with a later hack, per firm
Lost after audit
$6.15M
sum of post-audit hacks
All auditors
ordered by audits on record · hacked after = audited tokens with a hack dated after the firm's audit · the rank compares that rate among 16 firms with at least 3 audits (1 = fewest hacks after)
| Auditor | Audits | Hacked after | Rate | Rank (1 = fewest hacks after) | Lost after audit | Median days audit → hack |
|---|---|---|---|---|---|---|
| Certik | 24 | 1 | 4.2% | 15th of 16 | $5.9M | 770 |
| PeckShield | 17 | 0 | 0.0% | 1st of 16 | $0 | — |
| SlowMist | 11 | 0 | 0.0% | 1st of 16 | $0 | — |
| Quantstamp | 9 | 0 | 0.0% | 1st of 16 | $0 | — |
| Halborn | 7 | 0 | 0.0% | 1st of 16 | $0 | — |
| Trail of Bits | 7 | 0 | 0.0% | 1st of 16 | $0 | — |
| ChainSecurity | 6 | 0 | 0.0% | 1st of 16 | $0 | — |
| Hacken | 5 | 0 | 0.0% | 1st of 16 | $0 | — |
| Zellic | 5 | 0 | 0.0% | 1st of 16 | $0 | — |
| OpenZeppelin | 4 | 0 | 0.0% | 1st of 16 | $0 | — |
| ConsenSys Diligence | 3 | 0 | 0.0% | 1st of 16 | $0 | — |
| Immunefi (bug bounty) | 3 | 0 | 0.0% | 1st of 16 | $0 | — |
| Neodyme | 3 | 0 | 0.0% | 1st of 16 | $0 | — |
| Obelisk | 3 | 0 | 0.0% | 1st of 16 | $0 | — |
| Runtime Verification | 3 | 0 | 0.0% | 1st of 16 | $0 | — |
| Salus | 3 | 1 | 33.3% | 16th of 16 | $250K | 353 |
| BlockSec | 2 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| Coinspect | 2 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| Omniscia | 2 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| Pessimistic | 2 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| SolidProof | 2 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| ABDK | 1 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| Ackee Blockchain | 1 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| Beosin | 1 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| Code4rena | 1 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| Cyfrin | 1 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| Hashlock | 1 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| Kudelski Security | 1 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| MixBytes | 1 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| OtterSec | 1 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| Secure3 | 1 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| SmartState | 1 | 0 | 0.0% | fewer than 3 audits | $0 | — |
| Veridise | 1 | 0 | 0.0% | fewer than 3 audits | $0 | — |
- 2 firms have at least one such case; the count is a fact about dates, not a cause.
Source: DefiLlama audit links, DeFiHackLabs hacks; "hacked after" joins a hack on the same token dated after the audit · fetched