Arbitrum Security Program

audit subsidyRolling, apply anytime

  • Your agent may submit
  • Bar: a repo with recent commits

A 12-month Arbitrum Foundation program that subsidizes a portion of a third-party smart contract audit for projects building on Arbitrum, with pre-audit AI security screening. Approved projects are matched with one of 13 audit firms, including Trail of Bits, OpenZeppelin, Certora, Cyfrin and Sherlock.

Who can apply

  • on Arbitrum
  • smart contract code that is audit-ready, with a defined audit scope

What the form asks

  • Email: your email
  • Company/Project name: a project name
  • What are you building?: a one-line description
  • Problem & Solution: the problem and your solution
  • Website URL: a website link
  • X/Twitter URL: the project's X link
  • Region: your team's region
  • City: your team's city
  • Team size (full-time employees/contractors): your team size
  • Scope of the Audit: the contracts in audit scope
  • Line of Code (SLOC): lines of code in scope
  • Desired completion date: a target audit completion date
  • Git Repos: optional
  • Preferred auditor: optional
  • Audit Budget (in USD, e.g. $20,000): your audit budget in USD
  • Number of founders/contributors: number of founders
  • Name (1st founder/contributor): the primary contact's name
  • Email (1st founder/contributor): the primary contact's email
  • Role (1st founder/contributor): the primary contact's role
  • Telegram (1st founder/contributor): the primary contact's Telegram
  • LinkedIn (1st founder/contributor): the primary contact's LinkedIn
  • Github (1st founder/contributor): the primary contact's GitHub
  • Name, email, role, Telegram, LinkedIn and Github (2nd and 3rd founder/contributor): optional
  • Mention any other founders NOT mentioned above: optional
  • Are the founders/contributors committed full-time (if not, explain why): optional
  • What is the equity/token breakdown between founders: the equity split between founders
  • Which Virtual Machines are you targeting?: the virtual machines you target
  • Which chains are you targeting?: the chains you target
  • How would you classify the project primarily?: a project category
  • When did you start to work on this?: when you started, with any pivots
  • Describe the competition and or the alternatives and why you are better: competitors and why you win
  • What's your current traction?: your current traction
  • Does the project have a token or plan to launch one?: answer the launch plans question
  • Did you fundraise or receive any other type of grants previously?: prior raises and grants
  • How much money does the company have? (USD): cash on hand in USD
  • What's the monthly burn rate? (USD): monthly burn in USD
  • What's the runway? (months): runway in months
  • Referral: optional
  • I acknowledge that participation is subject to final approval, and contingent on reaching an agreement regarding the project's alignment with the Arbitrum ecosystem (e.g., branding, deployment strategy, marketing, and ecosystem integration).: accept the alignment terms
  • I acknowledge that the project accepts that the audited code is exclusive to Arbitrum for a set period of time.: accept Arbitrum exclusivity

Rules

  • The program runs 12 months from its launch on September 28, 2026; no application deadline is stated.
  • Eligible: projects yet to launch, migrating from another chain, in the growth stage, launching new features or products, or launching their own Arbitrum Chain.
  • Before an auditor is sourced, an approved project must confirm its codebase is audit-ready, agree to the applicable audit subsidy, and sign a Commitment Agreement with the Arbitrum Foundation, which may include exclusivity or other commercial commitments.
  • The form asks you to accept that the audited code is exclusive to Arbitrum for a set period of time.
  • The Foundation subsidizes a portion of each audit depending on the commercial agreement reached. Only the agreed initial audit is covered.
  • Plan for about one month between approval and the expected start of the audit.
  • Reviewed on technical maturity, team, likelihood of success, and alignment with the Arbitrum ecosystem. The form says applications are processed in about 2 weeks.