Performances
RD Popularity Index
RD Growth Index
Comparison
Follow Updates
Follow Lists
People
About Hexens
Hexens is a blockchain security firm offering smart contract audits, L1/L2 protocol reviews, exchange and wallet security assessments, DeFi audits, bridge security, and TEE application reviews. Its core strength lies in combining manual expert analysis with frontier AI models to accelerate vulnerability detection, alongside its proprietary Glider engine—a code query tool that turns every verified EVM contract into queryable graph data, enabling variant analysis across 32+ chains in minutes. The market pain point Hexens addresses is that traditional auditing is one-contract-at-a-time: when a bug is found and fixed, the knowledge dies there, while the same flawed pattern often remains unfixed in dozens of forked protocols. Glider solves this by letting researchers describe a vulnerability pattern once and instantly find every contract sharing it across entire blockchains. In the past six months (2026-03-12 to 2026-09-12), Hexens has expanded Glider's commercial layer with the Token Risk API (real-time on-chain token scanner detecting 20+ threat vectors with a 0-100 risk score), the Security API (24/7 continuous scanning with instant alerts via webhook, Slack, Telegram, or email), and the Data API (structured access to 100+ semantic labels). It also launched Glider Monitor, a continuous monitoring layer that turns new exploits into queries and checks whether the same flaw exists in a client's live code, while mapping dependency graphs to reveal inherited risk. These developments shift Hexens from point-in-time audits toward ongoing, automated security surveillance.
Over the past six months, Hexens has advanced its smart contract security suite around the Glider code query engine and Glider Monitor. The company publicly shared results from a two-week Glider Monitor pilot: 12 live exploits were ingested and automatically converted into detectors, which then identified 198 confirmed-vulnerable deployments across Ethereum and BSC, spanning 80 distinct codebases and nine bug classes. Glider itself now covers 32+ EVM chains and 100+ semantic labels, with a free research IDE, an open Query Database, and a commercial API layer (Token Risk(s) API, Security API, Data API) available on AWS Marketplace. In parallel, Hexens disclosed a critical type-confusion vulnerability in the Aptos Move VM that exposed up to $70B in on-chain value; the team built a PoC on a 30+ validator cluster with ~90% success rate and followed responsible disclosure via SEAL 911. Looking ahead, Hexens' stated roadmap focuses on continuous defense: expanding Glider Monitor's real-time attack observation, dependency-graph risk mapping, invariant monitoring (oracles, vault health, stablecoin depegs), and exposure replay against customer contracts, while growing the open query library and bug-bounty surface through Remedy.
Co-founders:
Sipan Vardanyan (CEO): 15+ years in IT and 12+ in cybersecurity; former bank CISO; founded OneGuard; OWASP Armenia chapter lead; multiple CTF wins.
Vahe Karapetyan (CTO, @kemmio): Started learning C++ at 12, developed kernel drivers; found 0days in university; won 20+ CTFs; pioneered zero-knowledge audits; builds smart contract security tooling.
Core executives:
Kasper Zwijsen (Head of Audits): From CTFs and bug bounty; reported 14 critical and 15 high-severity bugs, $1M+ in bounties; led audits for top Web3 projects.
Hayk Andriasyan (Senior Security Researcher): Cryptography background; 7 years in development then appsec; now focuses on Web3 cryptography; conference speaker.
Francisco Henriques (Head of Offensive Security): ~8 years in red teaming and pentesting; covers finance, aerospace, critical infrastructure.
Ruben Muradyan (CISO): 25+ years in cybersecurity; specializes in DevSecOps and complex incident response.
Anush Stepanyan (CFO): Seasoned finance expert; aligns financial strategy with AI-based blockchain security tools.