Circle didn't just become a customer; they became our partner in 2023, back when Web3 security tooling was basically nonexistent. Together, we've built something that catches 70% of vulnerabilities before they hit external audits, with a roadmap to 85% and beyond.
That's the goal: Don't waste time. Don't waste money. Don't ship vulnerabilities.
When Circle was rapidly expanding its blockchain operations, the security team faced a fundamental challenge. The Web3 industry lacked the sophisticated security tools that had become standard in Web2 development environments.
Traditional Web2 software development had mature, integrated security tools that worked seamlessly within developer workflows. Web3 development was operating without these safeguards, which left security teams relying on manual audits as the primary line of defense. Audits are necessary. On their own, they are not sufficient, and they are not designed to be the only thing standing between a contract and production.
Circle recognized that to maintain their security standards while scaling, they needed tooling that could:
Since 2023, Circle and Olympix have worked together as design partners, collaborating to build and refine security tooling specifically architected for Web3 development. As a design partner, Circle provides continuous feedback and real-world testing that shapes product development, helping Olympix evolve from a suite of tools that followed Web2 best practices into a comprehensive security platform built for Web3's specific challenges.
This is a collaborative effort to bring best-in-class security directly into the blockchain development environment. Circle continues to grow with Olympix, now leveraging the full institutional-grade suite of tooling. As security leaders in the space, they are among the first teams to test Olympix's newest tooling before general release. Their recent two-year renewal demonstrates ongoing confidence in the platform's value and roadmap.
Shared Vision. Both organizations believed that Web3 security tooling needed to not just match Web2 capabilities, but exceed them. Circle's deep security expertise, combined with Olympix's technical innovation, created a powerful feedback loop for product development.
Non-Obtrusive Integration. The tooling was designed to work seamlessly within Circle's existing development workflows, providing security insights without slowing down the development process.
Deterministic Accuracy. Olympix achieves reproducible, deterministic results by building tooling on a proprietary intermediate representation and symbolic execution engine. Results are the same on every run, which is what makes the tooling safe for gating a pipeline.
Circle's internal audit team uses Olympix at multiple points in their security stack:
Pre-audit static analysis. All EVM-based smart contracts run through Olympix's static analyzer before being sent to external auditors. Independent benchmarking, including EigenLayer's comparison study, ranks Olympix as the top-performing static analyzer, with the lowest false positive rate and the highest absolute true positives measured in that study.
Mutation testing in CI. Mutation testing is integrated into CI/CD pipelines across Circle's repositories, hardening test suites and surfacing edge cases that would otherwise go undetected. It validates that tests actually fail when the code breaks, rather than passing for the wrong reason.
Internal Audit Agent (BugPOCer). Circle's team was among the first to gain access to Olympix's Internal Audit Agent. It surfaces critical logic vulnerabilities ahead of external audits and generates proof-of-concept exploits for each finding, so engineers get a reproducible demonstration rather than a description.
Advanced fuzzing and automated formal verification. Olympix’s' intelligent fuzzer and automated formal verification tooling was another early pilot with Circle. This technology automates the generation of invariants and fuzz tests, a process that has historically been manual and error-prone, and mathematically verifies contract behavior under the conditions it covers.
Multi-layered approach. Olympix complements Circle's on-chain monitoring and external audit processes.
Circle positions Olympix alongside their traditional audit firms, treating the tooling as a critical first line of defense in their security operations.
Circle is a global financial technology firm that enables businesses to harness the power of digital currencies and public blockchains for payments and commerce. Circle's platform enables individuals and organizations to secure digital assets while maintaining the highest security standards in the industry.
Olympix provides deterministic security tooling for Web3 development, using symbolic execution to catch vulnerabilities before they reach production. Trusted by leading organizations including Circle, Cork, and Uniswap Foundation, Olympix brings Web2-level security tooling to the blockchain ecosystem.
Learn more at olympix.security