ChainLight primary sources — 2026-05-04

Project status in this pass

• No canonical standalone ChainLight whitepaper or litepaper surfaced.
• The clearest current sources of truth were the official site, the security-audit page, Theori’s public web3-publications repository, and ChainLight’s DART and ecosystem-research posts.
• ChainLight is best understood as public security-and-risk infrastructure wrapped around an audit practice, rather than as a simple private smart-contract audit shop.

Primary-source snapshots

1) Official company positioning

• URL: https://chainlight.io/
• Key excerpt:
  • The homepage says ChainLight was established in 2016 and that its award-winning experts provide tailored security solutions to fortify smart contracts and blockchain products.
  • The same page says the security-audit service has a proven track record of zero client compromises.
  • It also presents DART as a risk-management platform that goes beyond standard assessments and audits by surfacing concealed threats, which broadens ChainLight beyond one-off manual review.

2) Security-audit process page

• URL: https://chainlight.io/security-audit
• Key excerpt:
  • The page lays out a five-phase process: request security audit, receive quote and audit strategy, security examination and audit, security consultation and code review, and final security audit report.
  • It says clients receive real-time security analysis, vulnerability reports, code-level suggestions, patch suggestions, and an audit certification.
  • This supports the core view that ChainLight runs a structured professional audit practice rather than only publishing research.

3) Public audits and track-record repository

• URL: https://raw.githubusercontent.com/theori-io/web3-publications/master/README.md
• Key excerpt:
  • The repository describes itself as “Web3 Audits, Publications, and Track records by ChainLight of Theori.”
  • It says the team has consulted for Upbit and Coinone since 2019, entered the Web3 security market in earnest, and is collecting publicly available publications because many client audits remain undisclosed under NDA.
  • The listed public artifacts include Ethereum bug-bounty placement, Paradigm CTF placement, and disclosed audits or reports for KLAYswap, Orbit Bridge, MESHswap, Klaytn governance contracts, and Blur Blend.
  • This repository is the clearest first-party evidence that ChainLight maintains a public security corpus and not only a closed consulting business.

4) DART risk-intelligence launch

• URL: https://blog.chainlight.io/introducing-dart-digital-asset-risk-tracker-3a577814327
• Key excerpt:
  • The post says ChainLight launched DART as “a comprehensive security platform” protecting users, exchanges, and project builders from vulnerabilities and threats across Web3.
  • It says DART combines an expert-designed risk-assessment model, static analysis, real-time blockchain monitoring, latent-risk tracking, and personalized alerts.
  • The article explicitly contrasts DART with narrower approaches such as ordinary audits or transaction monitoring, which supports classifying ChainLight as broader risk infrastructure.

5) Ecosystem research on AI-blockchain security

• URL: https://blog.chainlight.io/ecosystem-explorer-exploring-security-risks-in-ai-blockchain-projects-2c490a726d13
• Key excerpt:
  • The article frames itself as ChainLight’s internal analysis of trending Web3 projects from a security perspective.
  • It maps the decentralized-AI stack into infrastructure and application layers, then analyzes their trust, verifiability, centralization, and censorship risks.
  • This helps show that ChainLight also operates a first-party research surface around emerging crypto sectors, not just a service-sales page.

Working conclusion

ChainLight is best cataloged as blockchain security and digital-asset risk infrastructure. The deciding evidence in this pass was the combination of a formal audit workflow, a public repository of disclosed audits and track record material, a dedicated risk-intelligence platform in DART, and first-party ecosystem research on new attack surfaces such as AI x blockchain. That mix makes ChainLight look more like a reusable security knowledge and risk layer for Web3 participants than a simple audit boutique.