Least Authority

Least Authority is a Berlin-based security consulting firm founded in 2011, dedicated to advancing digital security and preserving privacy as a fundamental human right. The company has established itself as a leading provider of security audits and consulting services for Web3, blockchain, and FinTech organizations, with over 300 completed audits since beginning security consulting work in 2014.

Core Services

Least Authority offers comprehensive security consulting services that support teams throughout the complete development cycle. Their core service offerings include source code audits, smart contract security audits, specification and white paper reviews, decentralized systems architecture evaluation, security-by-design consultation, and compliance consulting for regulated environments.

Key Strengths

The company possesses deep expertise in advanced cryptography and zero-knowledge proof technology, with proven experience auditing zkSNARK systems (Groth16, Plonk-ish systems, STARKs), elliptic curves, MPC threshold signatures, consensus mechanisms, and zkEVMs. Their team can audit projects in multiple programming languages including C, C++, Python, Haskell, Rust, Node.js, Clarity, Solidity, Go, JavaScript, ZoKrates, and circom.

Least Authority maintains strong ecosystem integration, supporting major blockchain platforms including Ethereum, Polygon, Cosmos, Stacks, Tezos, Mina, and Filecoin. The company is featured in trusted industry directories and has completed high-profile audits for organizations like Ethereum Foundation, MetaMask, World (formerly Worldcoin), Mozilla, and Protocol Labs.

Notable Clients and Projects

The company's client portfolio includes many of the most prominent names in the blockchain industry: Polygon, World, Ethereum, MetaMask, Mina Protocol, Mozilla, Tezos, Protocol AI, and Stacks. Their 2015 Ethereum audit notably identified issues that led to the DAO hack, demonstrating their ability to identify critical vulnerabilities.

Why Choose Least Authority

Least Authority combines deep technical expertise with a mission-driven approach to security and privacy. Their team has published the MoonMath Manual for zk-SNARKs education, developed innovative privacy-preserving technologies like ZKAPs (Zero Knowledge Access Passes), and maintains active contributions to open-source security projects. They offer compliance-oriented security consulting for MiCA, GDPR, DORA, and other regulatory frameworks, helping Web3 projects navigate complex global legislation while maintaining robust security practices.