Veridise logo

Veridise

Veridise is a blockchain security company specializing in smart contract and zero-knowledge audits. It combines formal methods, manual code review, and in-house vulnerability-detection tools for blockchain protocols and Web3 projects.
Distributed

Veridise AuditHub


Project Links


Description

Veridise AuditHub is an online audit environment included with Veridise security audits. It lets clients track audit progress and findings in real time, review affected code and tool results, collaborate with auditors, and re-run detection tools when validating fixes. Its audit analysis suite includes OrCa, Vanguard, and Picus.

Category: Service Provider

OrCa


Project Links


Description

OrCa is a Veridise fuzzer for Ethereum/EVM smart contracts that uses developer-defined temporal properties, written in Veridise’s V specification language, to guide fuzzing. It analyzes contract behavior and reports concrete inputs and execution traces for safety-property violations. It supports multi-contract fuzzing, Foundry-compatible workflows, invariant validation, regression testing, and protocol behavior exploration; it is available to Veridise audit clients through AuditHub.

Category: Developer Tooling

Vanguard


Project Links


Description

Vanguard is a static analysis engine developed by Veridise for smart-contract security. Using abstract interpretation, it analyzes smart-contract semantics, including interleaved transactions and value flow, to detect reentrancy, unsafe token transfers, access-control errors, unchecked call statuses, and missing validation. It supports Hardhat and Foundry CI/CD workflows, GitHub Actions reporting, AuditHub-based finding triage, and custom detectors through its query language.

Category: Developer Tooling

ZK Vanguard


Project Links


Description

ZK Vanguard is a Veridise static-analysis tool for zero-knowledge circuits, including Circom, Halo2, and custom DSLs. It detects issues such as non-deterministic witnesses, private-input leakage, unconstrained signals, underconstrained outputs, unused subcomponents, witness-constraint differences, and divide-by-zero errors without runtime execution. It supports CI/CD reporting through GitHub Actions, finding triage through AuditHub, and custom detectors through its query language.

Category: Developer Tooling

Picus


Project Links


Description

Picus is a ZK security tool developed by Veridise that combines static analysis and solver-based reasoning to identify under-constrained circuits and generate concrete counterexamples. It can also formally verify circuits against under-constrained behavior, supports Circom and other DSLs, and integrates with AuditHub and CI/CD workflows.

Category: Developer Tooling