CoinFabrik company primary sources — 2026-08-08

Entity-split status in this pass

• CoinFabrik now clears the bar for companies/ rather than staying only as a projects/ note.
• The useful question is not just what audit reports or security tools exist? but which named operator publishes the audit corpus, packages the multichain review workflow, and turns tools like Scout and Stacy into reusable security baseline infrastructure?
• The clearest current sources of truth are the official homepage, the smart-contract-audits service page, the public audits README, and the Scout README.

Primary-source snapshots

1) Official company homepage

• URL: https://www.coinfabrik.com/
• Fetched: 2026-08-08 via web_fetch
• Key excerpt:
  • The homepage says CoinFabrik has spent 10 Years Securing the Ecosystem and Bringing Innovation Onchain and that its track record is backed by more than 500 successful projects.
  • It presents security audits, blockchain development, advisory, QA, and DeFi/game development as one company surface rather than isolated business lines.
  • It also highlights Tools for Developers, including Stacy and Scout, which is important because the company is explicitly packaging open-source security tooling alongside audit work.

2) Smart-contract-audits service page

• URL: https://www.coinfabrik.com/services/smart-contract-audits/
• Fetched: 2026-08-08 via web_fetch
• Key excerpt:
  • The page currently advertises +10B Secured Assets, +350 Security Audits, +9K Vulnerabilities Detected, and 10 Years in the Market.
  • It says CoinFabrik has contributed to blockchain security since 2014 and lists language coverage including Solidity, Rust, Clarity, Go, Soroban, and more.
  • It documents a four-step audit workflow: code submission, private report, client fixes, and optional public report publication.
  • That publication step matters because report-release policy is part of the company-shaped assurance boundary, not just a back-office detail.

3) Public audit corpus

• URL: https://raw.githubusercontent.com/coinfabrik/audits/main/README.md
• Fetched: 2026-08-08 via web_fetch
• Key excerpt:
  • The README exposes a structured public audit table and links the corpus back to CoinFabrik’s audit-report webpage.
  • Recent visible entries span Stacks, Paxos, THORChain, Fireblocks, 1inch, Soroban projects, Substrate projects, and Clarity-heavy work.
  • The corpus is multiyear and multi-language, which is the strongest evidence that CoinFabrik’s public report surface is a durable ecosystem artifact rather than a one-off marketing archive.

4) Scout README

• URL: https://raw.githubusercontent.com/coinfabrik/scout-audit/main/README.md
• Fetched: 2026-08-08 via web_fetch
• Key excerpt:
  • Scout is described as an extensible open-source tool for ink!, Soroban, and Substrate developers and auditors to detect common security issues and best-practice deviations.
  • The README documents CLI use, multiple output formats, a VS Code extension, and a GitHub Action, which shows CoinFabrik is authoring reusable developer workflow rather than only a research prototype.
  • The acknowledgements section ties Scout to grants from Web3 Foundation, Aleph Zero, Stellar Community Fund, and Polkadot Assurance Legion.
  • The About CoinFabrik section reinforces that the company combines Web3 R&D with a dedicated in-house security-audit team.

Working conclusion

CoinFabrik is better modeled as a company-run security-review and tooling boundary than as a standalone project. The deciding evidence in this pass was the combination of a scaled multichain audit-publication corpus, explicit report-publication workflow, first-party security tools packaged on the main company site, and Scout’s clear role as company-authored CI/editor-integrated review infrastructure for non-EVM ecosystems.