Cowrie Research

coinfabrik-primary-sources-2026-05-03

3 min read

CoinFabrik primary sources — 2026-05-03

Project status in this pass

  • No canonical standalone CoinFabrik whitepaper or litepaper surfaced.
  • The clearest current sources of truth are the official site, the smart-contract-audits service page, the public audit-reports corpus, and the open-source Scout repository.
  • CoinFabrik is best understood as security-and-tooling infrastructure rather than as a narrow audit shop because its first-party materials jointly expose a long-running audit corpus, ecosystem-specific static-analysis tooling, and explicit research ties.

Primary-source snapshots

1) Official company and security positioning

  • URL: https://github.com/coinfabrik
  • Key excerpt:
    • The GitHub organization says CoinFabrik is a Web3 research and development company with a strong cybersecurity background, founded in 2014.
    • It says the team has worked on 500+ decentralization projects across EVM and non-EVM stacks including Solana, Algorand, and Polkadot.
    • It also says CoinFabrik offers security audits through an in-house team working on Substrate, Solidity, Clarity, Rust, TEAL, and Soroban code.

2) Audit-services page and scale claims

  • URL: https://www.coinfabrik.com/services/smart-contract-audits/
  • Key excerpt:
    • The service page highlights “+350 Security Audits,” “+9K Vulnerabilities Detected,” and “10 Years in the Market.”
    • It says CoinFabrik has been contributing to blockchain security since 2014 and describes coverage across Solidity, Rust, Clarity, Go, Soroban, and more.
    • The page also lays out a four-step workflow: code submission, private report, client fixes, and optional public report publication.

3) Public audit-report corpus

  • URL: https://raw.githubusercontent.com/coinfabrik/audits/main/README.md
  • Key excerpt:
    • The audits repository presents a structured public table of audit reports spanning projects such as Stacks, Paxos, THORChain, 1inch, Fireblocks, and Allbridge.
    • The corpus cuts across several language and stack categories including Clarity, Rust, Solidity, Soroban, and Substrate.
    • The README also points back to CoinFabrik’s public audit-report webpage, showing that the GitHub corpus and website corpus reinforce one another.

4) Scout open-source security tooling

  • URL: https://raw.githubusercontent.com/coinfabrik/scout-audit/main/README.md
  • Key excerpt:
    • Scout is described as an extensible open-source security-analysis tool for ink!, Soroban, and Substrate developers and auditors.
    • The README says CoinFabrik built the tool from manual-auditing experience, ships several output formats, and supports editor and CI integration through a VS Code extension and GitHub Action.
    • It also cites grant support from the Web3 Foundation, Aleph Zero, Stellar Community Fund, and Polkadot Assurance Legion.

5) Example of current audit publication flow

  • URL: https://www.coinfabrik.com/blog/stacks-pox-audit-report/
  • Key excerpt:
    • The Stacks PoX audit summary page describes the PoX contract as a core Stacks consensus component and publishes a summary of findings with issue counts.
    • This helps confirm that CoinFabrik’s public corpus is not just archival storage but part of an ongoing audit-publication workflow tied to live ecosystems.

Working conclusion

CoinFabrik is best cataloged as blockchain security and tooling infrastructure. The deciding evidence in this pass was the combination of a sizeable multichain public audit corpus, explicit language-and-ecosystem coverage across Clarity/Soroban/Substrate/Solidity/Rust, a first-party static-analysis tool with editor and CI surfaces, and a research-forward organizational profile rather than a simple consultancy landing page.

Graph View