Key Facts
- CertiK, the largest Web3 security services provider, has become a member of LF Decentralized Trust, the Linux Foundation’s open-source initiative for enterprise decentralised technology.
- LFDT projects are used across finance, banking, supply chain, healthcare and telecom, and CertiK joins as part of a wider intake of organisations this quarter.
- Independent smart contract audits are now required, directly or indirectly, for licensing and token admission in most major jurisdictions, including Hong Kong, the UAE, the EU and several US states.
- AML enforcement has displaced securities classification as the sector’s leading regulatory risk, with fines and settlements passing $900 million in H1 2025.
- CertiK recently signed a strategic partnership with the National Bank of the Kyrgyz Republic covering the security of the Digital Som.
- The company has worked with more than 5,500 enterprise clients to date.
CertiK has taken up membership of LF Decentralized Trust (LFDT), the Linux Foundation body advancing open-source, enterprise-grade decentralised technology for finance, banking, supply chain, healthcare, telecom and beyond. The Web3 security firm joins in a cohort of organisations admitted this quarter, reflecting the momentum behind open, standards-based infrastructure for decentralised systems.
The company is one of 15 new members LFDT named in the same intake, a list that also includes Swift, Wells Fargo, Cosmos, Sui Foundation and Ethereum Institutional — a sign that bank infrastructure teams now treat the foundation’s code as production material, not a pilot sandbox. IBM has separately wired Swift ledger access into its Digital Asset Haven platform.
Why the regulatory backdrop matters
The timing reflects a digital asset rulebook that has moved from exploratory guidance to live enforcement. CertiK’s own research has followed that turn: independent smart contract audits are now mandated, or required in practice, for licensing and token admission across most major markets, Hong Kong, the UAE, the EU and individual US states among them. Anti-money laundering work has displaced securities classification as the industry’s sharpest regulatory exposure, with AML fines and settlements clearing $900 million in the first half of 2025 alone. Exchanges, custodians and issuers are measured against prudential yardsticks close to those applied to banks, a pattern visible in the capital thresholds attached to crypto licence regimes and the EBA’s push to pull crypto lending and DeFi inside MiCA. The same institutional turn lies behind CertiK’s recent strategic partnership with the National Bank of the Kyrgyz Republic, struck to support the security of the Digital Som and strengthen the country’s oversight of digital assets.
“Security and compliance can’t be treated as one-off exercises bolted on late in a project’s lifecycle anymore; that’s exactly the kind of thinking the current regulatory environment is punishing,” said Ronghui Gu, Co-Founder and CEO of CertiK. “Open, vendor-neutral, standards-driven infrastructure is central to how enterprises actually build and scale trust in blockchain systems, and that’s what drew us to LFDT.”
“The industry needs infrastructure that’s built to standards from the start, not adapted to them after the fact,” said Daniela Barbosa, General Manager, Decentralized Technologies, Linux Foundation, and Executive Director, LF Decentralized Trust. “We welcome the research and audit expertise CertiK brings to our community. Contributions that help secure and scale LFDT’s open-source projects strengthen the foundation for everyone building on our technologies.”
What CertiK plans to contribute
CertiK intends to feed its security research and audit work into LFDT’s open-source projects and working groups, and to engage the foundation’s network of enterprises, start-ups and technical specialists building interoperable, production-grade decentralised infrastructure. The firm also expects to take part in LFDT community and industry activities as they come up.
CertiK bills itself as the largest Web3 security services provider, applying academic-grade technical rigour to the security problems facing Web3 ecosystems. Its full-lifecycle risk management line-up covers blockchain infrastructure assessments, smart contract audits, formal verification, penetration testing, custody architecture reviews, system performance evaluation and compliance support. It has served more than 5,500 enterprise clients and contributed to digital asset regulation in several jurisdictions. It posts updates on X and LinkedIn.
Frequently Asked Questions
What is LF Decentralized Trust?
LF Decentralized Trust is the Linux Foundation initiative that advances open-source, enterprise-grade decentralised technologies. Its projects are used across finance, banking, supply chain, healthcare, telecom and other sectors, and the foundation brings together enterprises, start-ups and technical experts working on interoperable, production-grade infrastructure. CertiK has joined it as part of a cohort of organisations admitted this quarter.
What will CertiK do as an LFDT member?
CertiK plans to contribute its security research and audit expertise to LFDT’s open-source projects and working groups, and to engage with the foundation’s wider ecosystem of enterprises, start-ups and technical specialists. It also expects to take part in LFDT’s community and industry activities as opportunities arise, applying the audit and formal verification work it already does commercially.
Why does the regulatory environment matter here?
Independent smart contract audits are now mandated or indirectly required for licensing and token admission in most major jurisdictions, including Hong Kong, the UAE, the EU and US states. AML enforcement has overtaken securities classification as the sector’s primary regulatory risk, with fines and settlements above $900 million in H1 2025, and exchanges, custodians and issuers face prudential standards close to those set for banks.