Runtime Verification Inc.

Runtime Verification Inc. is a leading blockchain security company founded in 2010, specializing in formal verification and smart contract auditing using advanced mathematical methods. The company applies runtime verification-based techniques to perform security audits on virtual machines and smart contracts on public blockchains, dedicated to improving the safety, reliability, and correctness of software systems in the blockchain field.

Core Services

Runtime Verification offers comprehensive blockchain security services including smart contract audits, formal verification, and security consulting. Their audit approach is distinguished by using formal methods experts who begin with deep design reviews before code analysis, employing cutting-edge verification tools to mathematically prove or disprove security properties. They have secured over $100 billion in total value and protected more than 100 clients including major players like Ethereum Foundation, Lido, Maker, Optimism, Solana Foundation, Arbitrum, and Stellar Development Foundation.

The company provides three tiers of formal verification services: free open-source tools for developers, consulting services with dedicated engineers ($30k/month), and full outsourced formal verification ($50k/month). Their smart contract audits follow a rigorous 3-week minimum per 1,000 lines of code approach, priced at $20,000/week, which includes design review, code review, formal verification, real-time bug reporting, and comprehensive audit reports.

Advanced Security Tools

Runtime Verification has developed a suite of open-source security tools that are free for non-commercial use. Kontrol enables symbolic execution for Solidity contracts, turning Foundry tests into formal proofs. Simbolik is a cutting-edge Solidity debugger for deep code analysis. KaaS (K as a Service) provides cloud-based compute power and CI-integrated fuzzing capabilities for formal verification. Komet offers formal verification and fuzzing for Rust smart contracts. These tools are built on the K Framework, a semantic framework for programming languages that enables rigorous analysis of blockchain protocols.

Key Strengths

The company's competitive advantages include 7+ years of auditing expertise since 2017, a two-auditor approach where experts are fully immersed in each audit with full team support, and a formal verification methodology that eliminates entire classes of vulnerabilities traditional audits miss. They are pioneers in runtime verification research with over 100 publications that shaped the field. Their transparent pricing model ($20k/week for audits) and commitment to quality over speed sets them apart in an industry racing to the bottom on timelines.

Notable Clients and Impact

Runtime Verification has established partnerships with leading blockchain foundations and protocols including Ethereum Foundation, Solana Foundation, Arbitrum, Optimism, Stellar Development Foundation, Immunefi, Pi Squared, and BuildBear Labs. Their client portfolio spans major DeFi protocols (Lido, Maker, Morpho, Uniswap, Olympus DAO), Layer 2 solutions (Optimism, Arbitrum), staking platforms (StakeWise, Stakefish), and numerous other blockchain projects across Ethereum, Algorand, Cardano, Cosmos, MultiversX, Polkadot, and Tezos ecosystems.

Why Choose Runtime Verification

Runtime Verification delivers what they call "uncompromising end-to-end reviews" that serve as a mark of security-conscious teams. Their audits are highly esteemed in the industry, with clients like Arbitrum stating "Runtime Verification's audits are the most rigorous we've seen." The company is aligned with Ethereum ethos, making their advanced tools open-source despite millions invested in development. They believe that comprehensive audits with longer timelines yield better results than rushed reviews, refusing to compromise on quality for speed. Their formal methods approach provides the highest level of guarantee achievable, proving code will always behave as expected across the entire input space rather than just testing for specific bugs.