Verichains primary sources — 2026-05-03

Project status in this pass

• No canonical standalone whitepaper or litepaper surfaced.
• The clearest current source of truth is the official site, GitHub organization, public audit-report repository, and the first-party Revela / TSSHOCK materials.

Primary-source snapshots

1) Official homepage

• URL: https://verichains.io/
• Key excerpt:
  • Frames Verichains as combining security research with deep reverse-engineering expertise.
  • Says the firm has investigated and mitigated some of the biggest hacks in Web3.
  • Lists service coverage spanning blockchain security, application security, penetration testing, compliance/GRC, cryptography, and custom research/tool development.
  • Highlights TSSHOCK and Revela as flagship examples of its research/tooling footprint.

2) GitHub organization

• URL: https://github.com/verichains
• Key excerpt:
  • GitHub verifies that the organization controls the verichains.io domains.
  • Pinned/public repos prominently include public-audit-reports, revela, sui-revela, and tsshock.
  • Important because it shows Verichains publishing both audit artifacts and reverse-engineering/security tooling, not merely service pages.

3) Public audit reports repository README

• URL: https://raw.githubusercontent.com/verichains/public-audit-reports/master/README.md
• Key excerpt:
  • States that the repository consists of public security audit reports from Verichains Lab.
  • The README exposes a long list of released audit PDFs rather than a token sample set.
  • Useful primary evidence that the public audit corpus is a real enduring surface of the firm.

4) Revela repository README

• URL: https://raw.githubusercontent.com/verichains/revela/dev/README.md
• Key excerpt:
  • Describes Revela as a tool that decompiles Move smart contracts from low-level bytecode back to high-level source code.
  • Says Verichains worked with Aptos Labs to develop Revela and calls it the first open-source tool of its kind for Move bytecode decompilation.
  • Strong evidence that Verichains contributes real ecosystem tooling in addition to selling audits.

5) TSSHOCK materials

• URLs:
  • https://verichains.io/tsshock/
  • https://raw.githubusercontent.com/verichains/tsshock/main/README.md
• Key excerpt:
  • The homepage explicitly cites TSSHOCK as a comprehensive security survey of MPC.
  • The public repo README ties the work to a BlackHat USA 2023 release and positions it as exploit/research material rather than generic marketing copy.
  • Useful signal that Verichains does publish advanced cryptographic and wallet-security research, even if the public landing page is sparse.

Working conclusion

Verichains is best cataloged as security, cryptanalysis, and reverse-engineering infrastructure with a meaningful public audit corpus and Move-focused tooling footprint. The decisive clue is not any single service page, but the combination of public reports, public reverse-engineering tools, and flagship MPC research.