Zerodrift

Zerodrift is an AI-native Web3 security firm providing smart-contract audits and continuous assurance for DeFi protocols, wallets and exchange infrastructure. Its differentiator is a hybrid audit framework: autonomous AI tooling scans code and onchain state at scale, senior researchers validate and rate findings, and each engagement becomes reusable detection agents and workflows. Coverage spans penetration testing, operational security reviews, real-time onchain monitoring and incident response.

Mechanically it turns auditing from a one-off report into a continuously running detection pipeline. Its 2026 public research includes a June 22 note that deprecated but still-live contracts had become an attack surface, leaking roughly $17 million in 40 days; a September 10 disclosure that a multi-model harness lifted recall on known vulnerabilities from 45.8% to 62.5%; and a September 14 demonstration of a prompt-injection chain in which malicious token metadata made an OKX Wallet OnchainOS agent grant unlimited approvals that a TEE signed without validation. The team says it has contributed to 150 audits.