Formal Verification Services

Runtime Verification provides professional formal verification services that deliver the highest level of security assurance for blockchain smart contracts. Unlike traditional testing that looks for specific bugs, formal verification mathematically proves that implementations adhere to specifications for the entire input space, verifying logic rather than just reviewing code.

Service Tiers

Runtime Verification offers three engagement tiers to match different project needs:

Use Tier (Free)

Developers can access Kontrol, an open-source tool for symbolic execution of Solidity contracts, with support from Runtime Verification's team. This tier enables teams to perform formal verification internally, turning Foundry tests into formal proofs without learning new semantics. Proofs are written in Solidity itself, making formal verification accessible to smart contract developers.

Consult Tier ($30k/month)

One full-time engineer dedicated to your project with full team support, providing:

• Kontrol setup with remote compute resources
• Expert advice on writing proofs and improving specifications
• Assistance writing lemmas for Foundry tests
• Ongoing support for formal verification integration

Outsource Tier ($50k/month)

Two full-time verification engineers who take full ownership of the formal verification process:

• Produce specifications and execute formal verification
• Enable symbolic execution in CI/CD pipelines
• Integrate throughout the development lifecycle
• Work pre or post implementation phases

Verification Development Cycle

The formal verification process includes:

1. Mechanism design and threat modeling
2. Defining formal specifications
3. Implementation with symbolic execution
4. Iterative testing with Kontrol and KaaS
5. Bug fixes and edge case handling
6. Streamlined auditing with well-polished, formally verified contracts

This approach ensures holistic security, catches edge cases early, and integrates security from the start rather than as an afterthought. The methodology leverages Solidity-based proofs and is accessible to development teams with Runtime Verification's expert guidance.