Organization Name – Code4rena

Category – Banking & DeFi

About

powered by irmaAI

Code4rena, launched in the San Francisco Bay Area in 2021, runs competitive smart-contract audits: sponsors post a codebase and a prize pool, and a global network of independent security researchers — "Wardens" — compete to find vulnerabilities, paid per confirmed finding. The tournament structure is the interesting design bet here: instead of hiring one audit firm and hoping their team’s particular blind spots don’t matter, a sponsor gets many independent eyes searching in parallel, which should in theory catch a wider distribution of bug types than any single reviewer would.
…
One fact needs to be stated plainly, with no hedging: Code4rena has not received RMA™ certification. RMA™ status is Unverified across all seven pillars, and no RMA badge exists in this project’s certification record. The project’s own achievement log nonetheless includes an entry titled "RMA Achievement" dated 2023, describing recognition for "excellence in securing blockchain audits." That entry is inaccurate — VaaSBlock has not certified Code4rena, and a reader who took the achievement log at face value would reach the wrong conclusion about this project’s verification status. Co-founders Scott Lewis and Adam Brault, and Chief Security Officer Adam Baldwin, are all named but none are identity-verified in the registry — notable because founder identity is precisely the kind of trust signal sponsors rely on when choosing which audit marketplace to route high-value codebases through.

VBTransparencyScore 4.19 at the 24.62nd percentile, ranked 62nd of 98 in Banking and DeFi. The $ARENA token, launched in 2022, carries a 24-hour market cap near $4.9 million. X carries 41,313 followers, uncertified — an administrative gap for a platform whose core product is verification. A reported $3 million funding round in 2023 and over 100 completed audits in a single quarter are concrete, if project-stated, operational signals.

The competitive smart-contract audit market context is the right base rate to apply here: crowdsourced audit tournaments have a real track record of catching bugs single-firm reviews miss, but the model’s own credibility depends entirely on the sponsor’s ability to verify who’s actually running the tournament. An achievement log that fabricates a certification the project doesn’t hold is exactly the kind of signal that should widen, not narrow, a reader’s skepticism about the rest of the platform’s self-reported claims. Read More