- Project fits within Guardian’s target market of DeFi and/or Financial Services
- Project fits the profile of a business that can become a strong Guardian partner over time
- Team has a demonstrable need for the granted funding
Guardian Security Fund
Jupiter
$1,000,000 In Security Audit Grants
Guardian is allocating audit grant coverage to help high-caliber teams ship with the highest tier of Smart Contract assurance.
Jupiter
Protected across active clients
$0
protected
The Fund
How the grants program functions
Audit coverage for teams shipping onchain, so the cost of a full review stops deciding whether the review happens.
$1,000,000
Applied towards audits by Guardian
- Awarded in
- Four tiers, selected every 6-week cohort
- Covers
- Partial grants up to a full audit grant
- Selection
- Discretionary based on fit and fund capacity
The Grant Tiers
- Everything Bronze looks for
- Silver grantee awards limited based on capacity within the Cohort
- Everything Bronze looks for
- Team shows promise and exudes a track record of successful execution
- The granted audit contributes to a mission critical step of the Project’s roadmap / operations
- Gold grantee awards limited based on capacity within the Cohort
- Meets all selection criteria for Gold
- 1-2 teams selected every 6 week cohort
- Selection based on fit and calendar availability amongst all applicants each cohort
What do you get
- A full Guardian audit: two competing teams and an exhaustive invariant suite
- A review you would have deferred, at a fraction of list price or fully sponsored
What does Guardian get
- A client relationship: grantees come back for update reviews, new products, the next release
- The Guardian standard spreads: referrals, ecosystem growth, co-marketing
Irrefutable Proof
Respected as #1 in digital asset security for 5 years.
On the left, every codebase Guardian reviewed alongside another firm at or near the same time, with every report public. On the right, what the relationship becomes after the first audit.
Guardian's commitment to high quality audits, keeping up with industry best practices and alignment between the auditors and the protocol has led to them being a highly valuable partner in improving security of the protocol
10/10 They are hands down some of the absolute best security minds in the space. This is how auditing DeFi protocols should be.
10/10, Guardian has throughly evaluated our EVM implementation and has identified design flaws that AI agents can hardly identify.
Guardian demonstrated professionalism and attention to detail second to none. They identified issues our other auditors missed.
Having seen many audits over many years, no one even comes close to Guardian's approach, and the quality of the audit is unmatched.
Even with our super tight timeline, Guardian was professional, quick, and thorough, delivering high-quality work right on time. By far the best team we've worked with.
Our experience with Guardian has been amazing. All security researchers on the team were exceptional at understanding all intricacies of the design and the team is well suited to audit any novel DeFi product that comes their way.
Guardian has been an integral part of the growth of GMX and our ecosystem of protocols who also rely on them for audits. Having Guardian as a strategic partner has allowed us to move more quickly while keeping security as our highest priority.
Guardian auditors conducted a remarkably thorough review. Their approach was well structured and we greatly appreciated the speed and professionalism of their feedback.
My team and I have worked with many auditors in the past, including generally considered top tier firms. I can confidently say that we have never felt as secure as when working with Guardian.
Guardian found a key bug that had been missed in previous audits, despite being outside the audit's scope. This is an honest signal of commitment and going the extra mile is rare.
Extremely proficient. I feel like they care about their contribution on a personal level. They are on a mission to become the best auditors out there. They don't need much guidance and understand the codebase quickly.
Guardian has an impeccable eye to detail and goes above and beyond to ensure that the code is watertight. They are able to assess super advanced Solidity inline-assembly with ease.
We were impressed with Guardian's overall approach to security, focus on tests, attention to detail and streamlined audit process. We enjoyed working with them.
In our previous engagements, the Guardian team was extremely thorough. I also felt that the two-team approach would give a more in-depth coverage of our codebase.
Guardian's commitment to high quality audits, keeping up with industry best practices and alignment between the auditors and the protocol has led to them being a highly valuable partner in improving security of the protocol
10/10 They are hands down some of the absolute best security minds in the space. This is how auditing DeFi protocols should be.
10/10, Guardian has throughly evaluated our EVM implementation and has identified design flaws that AI agents can hardly identify.
Guardian demonstrated professionalism and attention to detail second to none. They identified issues our other auditors missed.
Having seen many audits over many years, no one even comes close to Guardian's approach, and the quality of the audit is unmatched.
Even with our super tight timeline, Guardian was professional, quick, and thorough, delivering high-quality work right on time. By far the best team we've worked with.
Our experience with Guardian has been amazing. All security researchers on the team were exceptional at understanding all intricacies of the design and the team is well suited to audit any novel DeFi product that comes their way.
Guardian has been an integral part of the growth of GMX and our ecosystem of protocols who also rely on them for audits. Having Guardian as a strategic partner has allowed us to move more quickly while keeping security as our highest priority.
Guardian auditors conducted a remarkably thorough review. Their approach was well structured and we greatly appreciated the speed and professionalism of their feedback.
My team and I have worked with many auditors in the past, including generally considered top tier firms. I can confidently say that we have never felt as secure as when working with Guardian.
Guardian found a key bug that had been missed in previous audits, despite being outside the audit's scope. This is an honest signal of commitment and going the extra mile is rare.
Extremely proficient. I feel like they care about their contribution on a personal level. They are on a mission to become the best auditors out there. They don't need much guidance and understand the codebase quickly.
Guardian has an impeccable eye to detail and goes above and beyond to ensure that the code is watertight. They are able to assess super advanced Solidity inline-assembly with ease.
We were impressed with Guardian's overall approach to security, focus on tests, attention to detail and streamlined audit process. We enjoyed working with them.
In our previous engagements, the Guardian team was extremely thorough. I also felt that the two-team approach would give a more in-depth coverage of our codebase.
We've worked with a variety of audit shops before. Some are complete nightmares. But Guardian has been a delight to work with.
The Guardian team's attention to detail is top-notch. We sleep soundly at night knowing that Guardian went through every detail of our codebase rigorously.
Great experiences with team. We're impressed by their professionalism, efficiency and quality of work.
Guardian was an incredible partner in our audit. For each finding, they provided great detail as well as practical recommendations. Highly recommend!
When Cyfrin wants to work with another auditing team, we choose Guardian.
Our audit with Guardian way exceeded expectations in terms of the number of vulnerabilities they were able to find and the level of service that they provided.
We very much appreciate Guardian's approach to security and the entire audit process. Guardian goes above and beyond to not only do manual audits but also contributes to verification processes.
You guys did an ace job here as always really appreciate your efforts so far
The Guardian team is incredibly knowledgeable, thorough, and mindful. They caught issues that required extensive knowledge of dependencies.
Guardian's work helped us not only better secure our smart contracts, but also refine specs and assumptions of the system overall.
As a security audit company, Guardian's approach to security and overall effectiveness is truly exceptional. Working with them has been a revelation – their auditors are among the best we've ever collaborated with.
Guardian's thorough audit process have left a strong impression on us. Their keen eye for detail and responsive support are qualities that shine through in every engagement.
We can't recommend Guardian highly enough. Their team is top-notch: diligent, insightful, and a joy to work with.
It's clear that Guardian's a team of talented professionals that care deeply about the end outcome.
Guardian's pragmatic and business-focused approach to security ensures that every insight is not only technically sound but directly useful for real-world decision-making.
Guardian has been an excellent security partner through multiple audits. Their combination of great security researchers and custom fuzz testing is an incredibly strong approach to security. Highly recommend.
We've worked with a variety of audit shops before. Some are complete nightmares. But Guardian has been a delight to work with.
The Guardian team's attention to detail is top-notch. We sleep soundly at night knowing that Guardian went through every detail of our codebase rigorously.
Great experiences with team. We're impressed by their professionalism, efficiency and quality of work.
Guardian was an incredible partner in our audit. For each finding, they provided great detail as well as practical recommendations. Highly recommend!
When Cyfrin wants to work with another auditing team, we choose Guardian.
Our audit with Guardian way exceeded expectations in terms of the number of vulnerabilities they were able to find and the level of service that they provided.
We very much appreciate Guardian's approach to security and the entire audit process. Guardian goes above and beyond to not only do manual audits but also contributes to verification processes.
You guys did an ace job here as always really appreciate your efforts so far
The Guardian team is incredibly knowledgeable, thorough, and mindful. They caught issues that required extensive knowledge of dependencies.
Guardian's work helped us not only better secure our smart contracts, but also refine specs and assumptions of the system overall.
As a security audit company, Guardian's approach to security and overall effectiveness is truly exceptional. Working with them has been a revelation – their auditors are among the best we've ever collaborated with.
Guardian's thorough audit process have left a strong impression on us. Their keen eye for detail and responsive support are qualities that shine through in every engagement.
We can't recommend Guardian highly enough. Their team is top-notch: diligent, insightful, and a joy to work with.
It's clear that Guardian's a team of talented professionals that care deeply about the end outcome.
Guardian's pragmatic and business-focused approach to security ensures that every insight is not only technically sound but directly useful for real-world decision-making.
Guardian has been an excellent security partner through multiple audits. Their combination of great security researchers and custom fuzz testing is an incredibly strong approach to security. Highly recommend.
Select client stories
The Guardian Model
What the grant applies towards: The Guardian Standard
What a grant actually buys. Pick any cell to open it. The menu walks itself if you leave it alone.
01Audit
02Post-Audit (Included)
03Ongoing (Included)
Every update re-enters the same loop
01 / Audit
Two independent teams, one scope.
Team A uses expert manual review and gets the most out of the fuzzing suite. Team B directs billions of tokens throughout every corner of the codebase to uncover all AI-findable findings.
Competitive incentives reward whichever team finds more, and each team cross-checks the other.
Meet our world-class researchers
01 / Audit
Helix, the leading AI Auditor.
Bounty awards from
Helix powers one of the two Guardian teams on the audit with an exhaustive search throughout the entire codebase, spending billions of tokens and several days across hundreds of parallel agents.
Humans verify the context, configuration, and depth. Only human verified findings become the final result.
01 / Audit
An exhaustive invariant suite around your safety properties.
Guardian writes the protocol’s core safety properties as executable invariants, then pressure-tests every reachable state against them. The suite outlives the audit as a reusable harness for fixes, retesting, and every change you ship afterwards.
During the course of the review Security Researchers leverage the fuzzing suite to uncover edge cases that can hardly be found by AI or manual methods.
02 / Post-Audit
Guardian funds a $100,000 contest for AI & Human Auditors
The public Defender contest opens the audited scope to a global network of independent security researchers and AI Auditors.
Guardian covers a Critical findings pot of $100,000, paid out for any critical severity issue on the scope. Clients can opt to add additional funding for lower severities if desired. Timeline is adjustable, typically lasts 20 days and is non-blocking for deployment.
02 / Post-Audit
A hosted bounty with $50,000 in matching.
Guardian hosts and manages the bug bounty for you, including $50,000 in Critical bounty matching, so the protocol stays covered. You put up $50,000 and Guardian matches it on your bounty.
Benefit from tuned AI triage and known issue tracking, tapped in to the audit process.
03 / Ongoing
Half the package cost back toward offchain risk.
Offchain pentesting trusted by
The weakest link is rarely Smart Contracts.
Half of the package cost comes back as credits toward Guardian’s offchain assessments. Spend it across any combination of the six below to close the offchain gaps.
- OpSec Audit Drift · $285M (read the incident write-up) Signers tricked into blind-signing
- Infrastructure Pentest Mixin · $200M (read the incident write-up) Cloud provider’s database breached
- WebApp Pentest Crypto.com · $34M (read the incident write-up) Withdrawals approved with 2FA bypassed
- API Pentest 3Commas · $22M (read the incident write-up) Exchange API keys stolen and traded
- Offchain Automation Pentest THORChain · $10M (read the incident write-up) Offchain threshold signing broken
- Perimeter Audit CoW Swap · $1.2M (read the incident write-up) Registrar hijacked, frontend swapped
03 / Ongoing
Six months of update review, included.
Ship code to the same scope and Guardian keeps reviewing it. For six months after production, up to 2,500 smart contract SLOC, or 10,000 SLOC for offchain codebases. Every change is audited at the same standard.
No matter your shipping cadence, review any changes made to the scope we reviewed up to the SLOC limit (2,500 onchain or 10,000 offchain) split up however you would like.
Next Steps
-
01
Price it with the grant applied
Pick a tier on the calculator to see its criteria, what it covers, and what the audit costs once the grant is applied.
-
02
Apply with context
Tell us about the protocol, the timeline, the codebase, and what needs the most scrutiny.
-
03
We’ll get back to you with a final grant decision
Our team reviews each cohort's applications and follows up with the tier awarded.