Category: blockchain security firm / cryptanalysis and reverse-engineering research / public audit-report infrastructure / Move security tooling
Summary: Verichains is best cataloged as broader security-and-research infrastructure rather than as a simple smart-contract audit boutique. Its first-party surface combines blockchain security reviews, cryptography and reverse-engineering expertise, public audit reports, Move decompilation tooling, and recognizable research around threshold-signature vulnerabilities. The combination matters: Verichains is not only selling point-in-time reviews, it is also publishing reusable security tooling and research artifacts that help explain its operating weight across wallets, MPC systems, and emerging blockchain runtimes.
Offers broader security work outside purely onchain audits, including application security, penetration testing, governance-risk-compliance support, cryptography reviews, and custom security research
Maintains a first-party public audit-report repository on GitHub with a long tail of released reports across ICO-era projects, DeFi, gaming, wallets, and infrastructure
Builds public tooling such as Revela, an open-source decompiler for Move smart contracts developed with Aptos Labs, plus related Sui/Move reverse-engineering work
Publishes notable research such as TSSHOCK and highlights reverse engineering as a core competency, which makes the firm especially relevant for MPC, wallet, and low-level blockchain-security work
Key claims:
The homepage frames Verichains as offering protection through security research and deep reverse-engineering expertise, and says it has investigated and mitigated some of the biggest hacks in Web3
The homepage says the team combines expertise in cryptography, blockchain, application security, and low-level security engineering, which helps explain why the firm spans wallets, custody, MPC, and blockchain infrastructure rather than only EVM contracts
The homepage highlights TSSHOCK, described there as a comprehensive security survey of MPC that helped safeguard billions of dollars in digital assets, and also highlights Revela as an advanced Move decompiler
The GitHub organization is important primary evidence because it verifies control of the Verichains domains and exposes pinned/public repos including public-audit-reports, revela, sui-revela, and tsshock
The public-audit-reports repository shows a large first-party corpus of released security reports rather than a tiny marketing sample, which supports cataloging Verichains as durable audit-report infrastructure
The Revela README says Verichains worked with Aptos Labs to build what it calls the first open-source tool for decompiling Move bytecode back into high-level source, which is a meaningful ecosystem-tooling contribution rather than generic marketing collateral
Whitepaper: No canonical standalone Verichains whitepaper or litepaper surfaced in this pass. The clearest current sources of truth were the official site, GitHub organization, public audit-report repository, and the first-party Revela / TSSHOCK materials; see ../whitepapers/verichains-primary-sources-2026-05-03.md.