Security auditing for Web3
Public company, workplace, funding, and market signals
Quantstamp is a remote-first blockchain security firm founded in 2017 that provides smart contract audits, L1/L2 security audits, penetration testing, continuous monitoring, advisory services, and an insurance product (Chainproof) for Web3 teams.
Primary product
Smart contract and Web3 security audits
Founded
2017
Headquarters
San Francisco, California, USA
Team size
40-50
Work style
Remote
Industry
Computer and Network Security
Sub-industry
Blockchain security / smart contract auditing
Offices
0 jobs at Quantstamp
Check back later for new openings
Business model
Stage
Series A
Total raised
$3.4M
Latest round
Series A - II · Jun 2023
Leadership
CEO & Founder
Managing Director
Head of Revenue
Head of Japan and APAC
Founders
Co-founder
Investors
Remote-first, globally distributed, low-bureaucracy, and research-heavy, with flexible hours, a strong work-life-balance focus, few meetings, and regular team retreats.
Work style
Remote
Compensation
Quantstamp describes compensation as highly competitive and on par with big tech; public posts mention base salary, bonuses for performance and referrals, and equity.
Benefits
Pricing
Custom project-based / enterprise quote pricing; the company also advertises preferential pricing for account abstraction teams.
Differentiators
Technology
Customers
Competitors
Estimated revenue
$1M-$10M
Estimated monthly visits
19.6K
Traffic estimate as of Jul 2026
Quantstamp blog · Jul 2026
Quantstamp reported $75.32M lost across 32 crypto incidents in June, highlighted a targeted social-engineering attack against Humanity Protocol, and described a fresh npm supply-chain wave plus an actively exploited Oracle PeopleSoft zero-day.
Quantstamp blog · Jun 2026
Quantstamp said $59.52M was lost across 29 crypto incidents in May and emphasized the resurfacing Mini Shai-Hulud npm worm as the month’s biggest off-chain security story.
Quantstamp blog · May 2026
Quantstamp reported $635.24M lost across 28 crypto incidents in April, including the Axios npm compromise, Vercel breach via Context.ai, and several actively exploited CVEs.