Halborn

Halborn

Cybersecurity audits and consulting for blockchain

Overview

Halborn is a cybersecurity firm focused on blockchain technology and digital assets. It helps exchanges, DeFi projects, and other crypto businesses with security audits, penetration testing, and consulting to protect digital assets and financial infrastructure. By combining expertise in blockchain-specific threats with traditional financial security, Halborn differentiates itself from competitors. It translates its deep technical knowledge into practical services to launch and maintain secure digital exchanges and smart contract ecosystems. The company’s goal is to strengthen clients’ defensive postures against security threats in the digital asset space, ensuring secure operations and trusted platforms.

About Halborn

Simplify's Rating
Why Halborn is rated
B-
Rated B on Competitive Edge
Rated B on Growth Potential
Rated C on Differentiation

Industries

Fintech

Cybersecurity

Crypto & Web3

Financial Services

Company Size

51-200

Company Stage

Series A

Total Funding

$90M

Headquarters

Miami, Florida

Founded

2019

Simplify Jobs

Simplify's Take

What believers are saying

  • Halborn conducted 2,500 assessments protecting $1 trillion in digital assets.
  • Partnerships with Hashgraph, Knova, and Polygon drive ecosystem security demand.
  • Team of 100 practitioners serves 800 clients including top financial institutions.

What critics are saying

  • Crypto downturns contract audit spending as in 2022's 40% valuation collapse.
  • SEC crackdowns eliminate DeFi client demand within 6-18 months.
  • Automated tools like Certora commoditize audits by 2027, compressing margins 30-50%.

What makes Halborn unique

  • Halborn specializes in blockchain Layer 1 assessments for protocols like Solana and Aptos.
  • Halborn's BVSS rates risks across stablecoin classes including algorithmic designs.
  • Halborn audited QRL's post-quantum cryptography library with no vulnerabilities found.

Help us improve and share your feedback! Did you find this helpful?

Funding

Total Funding

$90M

Above

Industry Average

Funded Over

1 Rounds

Series A funding typically happens when a startup has a product and some customers, and now needs funding to scale. This money is usually used to grow the team, expand marketing, and improve the product. Venture capital firms are frequently the main investors here.
Series A Funding Comparison
Above Average

Industry standards

$15M
$8.2M
Discord
$15M
Canva
$30M
Kalshi
$90M
Halborn

Benefits

Health Insurance

Unlimited Paid Time Off

Company Equity

Growth & Insights and Company News

Headcount

6 month growth

2%

1 year growth

0%

2 year growth

6%
The Associated Press
Apr 3rd, 2026
QRL's post-quantum cryptography library clears security audit with no vulnerabilities found

The Quantum Resistant Ledger has released results of an independent security audit of its post-quantum cryptography library conducted by blockchain security firm Halborn. The audit found no cryptographic vulnerabilities, with all 13 findings rated informational, the lowest severity level. The audit validated two post-quantum digital signature packages implementing schemes approved by the National Institute of Standards and Technology. These address vulnerabilities in existing blockchain infrastructure, which relies on elliptic curve cryptography that quantum computers could compromise, putting over $2 trillion in digital assets at risk. QRL 2.0 extends the network's quantum-resistant architecture with quantum-safe smart contracts and proof-of-stake consensus. The full audit report is available on Halborn's website, with previous security audits accessible in QRL's GitHub repository.

The Quantum Resistant Ledger (QRL)
Apr 3rd, 2026
Halborn audit validates QRL's post-quantum cryptography library.

Halborn audit validates QRL's post-quantum cryptography library. Independent review finds no cryptographic vulnerabilities; all 13 findings rated Informational 3rd April 2026 ZUG, Switzerland - April 3, 2026 - The Quantum Resistant Ledger (QRL) released the results of an independent security audit of its post-quantum cryptography library, conducted by blockchain security firm, and security partner, Halborn. The audit found no cryptographic vulnerabilities. All 13 findings were rated Informational, the lowest severity level, and the core signing, verification and key generation logic was validated as correct. All findings have since been resolved through code fixes or formal documentation. The audit covers the two post-quantum digital signature packages at the heart of QRL's network, both implementing signature schemes approved by the National Institute of Standards and Technology (NIST) as part of its post-quantum cryptography standardization process. The validated packages address a structural vulnerability present in most existing blockchain infrastructure. The majority of public blockchain networks rely on elliptic curve cryptography (ECC), a public-key scheme that a cryptographically relevant quantum computer (CRQC) could compromise, putting more than $2 trillion in digital assets at risk. That timeline has grown more concrete in recent years. Google's Willow processor demonstrated below-threshold quantum error correction in December 2024, IonQ's published roadmap projects a CRQC as early as 2028, and a Google research paper published March 30, 2026, warned that cryptographic migrations need to begin without delay while highlighting QRL as a presently post-quantum secure blockchain. Asset managers including BlackRock have flagged quantum computing as a material security risk to Bitcoin. The Halborn audit is the latest in a series of third-party reviews of QRL's architecture. QRL's 1.x network launched in 2018 with post-quantum cryptography as a foundational design requirement and was externally audited by X41 D-sec and Red4sec, among the earliest public blockchain networks to undergo such review at launch. QRL 2.0 extends that posture by incorporating quantum-safe smart contracts, a proof-of-stake consensus layer and continued third-party security audits from qualified firms. "We have successfully completed our security assessment of QRL's post-quantum cryptography library. The fact that all findings were classified as informational highlights the project's strong security posture. Collaboration throughout the engagement was seamless, with the QRL team demonstrating responsiveness and efficiency in addressing all observations. We are happy to support their initiative to advance toward a quantum-secure future." - Gabi Urrutia, SVP Security & Field CISO at Halborn The full audit report is available on the Halborn website. Previous QRL security audits are accessible in the QRL GitHub repository. About The Quantum Resistant Ledger. QRL 2.0 is a proof-of-stake blockchain built with NIST-approved post-quantum cryptography from its initial launch. The network supports EVM-friendly smart contracts, NFTs and digital identities through the QRVM and the Hyperion smart contract language. More information is available at www.theqrl.org. About Halborn. Halborn is the industry-leading blockchain solutions firm for enterprise-grade digital assets, trusted by the top financial institutions and blockchain ecosystem leaders. Experience world-class, end-to-end security, from smart contract auditing and pen testing to advisory services and beyond. Media contact. 3rd April 2026

Halborn
Mar 12th, 2026
Halborn partners with Knova to support secure tokenized market infrastructure.

Halborn partners with Knova to support secure tokenized market infrastructure. 03.12.2026 Halborn is excited to announce its partnership with Knova. As the trusted cybersecurity partner for the Knova ecosystem, Halborn will support institutions operating across traditional financial systems and the digital asset ecosystem. Halborn is also proud to join Knova's Tokenized Markets Circle, a group of leaders shaping the next generation of tokenized financial markets. As banks, asset managers, and fintechs expand into stablecoins and tokenized assets, risk increasingly sits at the seams between systems. Integrations between banking platforms, custodians, wallets, and blockchain networks introduce new operational and security challenges. Knova addresses this challenge with software that runs directly within a client's environment or cloud infrastructure. The platform acts as a unified operating layer that allows institutions to represent, move, and manage fiat, securities, stablecoins, crypto, and tokenized assets through one consistent system. "As institutions expand into stablecoins and tokenized assets, security across interconnected systems becomes mission critical. We chose Halborn for their deep expertise securing digital asset infrastructure alongside traditional systems. Their work is highly value aligned with what we are doing at Knova, and the flexibility in how they work with institutions truly allows them to address real client needs," said Natalya Thakur, CEO of Knova. "We're thrilled to partner with Knova as their trusted cybersecurity partner. Knova is building critical infrastructure for institutions operating at the intersection of traditional finance and digital assets. At Halborn, we bring deep, hands-on security expertise to help organizations scale tokenized market strategies with the confidence, resilience, and security required for institutional adoption," said Julie Aurand, Head of Strategic Partnerships and Business Development at Halborn. Together, Halborn and Knova aim to help institutions scale tokenized asset strategies with the security and operational resilience required for institutional adoption. Get in touch to find out more. Disclaimer. The information in this blog is for general educational and informational purposes only and does not constitute legal, financial, or professional advice. Halborn makes no representations as to the accuracy or completeness of the content, which may be updated or changed without notice. THIS WEBSITE USES COOKIES Halborn Inc. use cookies to personalise content and ads, to provide social media features and to analyse its traffic. Halborn Inc. also share information about your use of its site with its social media, advertising and analytics partners who may combine it with other information that you've provided to them or that they've collected from your use of their services. You consent to its cookies if you continue to use its website. Learn More.

Decrypt
Mar 13th, 2025
Elon Musk’S X Ddos Accusation Ignores Basics Of Cyber Attacks, Expert Says

Decrypt’s Art, Fashion, and Entertainment Hub. Discover SCENEElon Musk’s claim that the DDoS attack on X (formerly Twitter) originated from Ukraine drew skepticism from cybersecurity experts, who argue that attributing attacks based on IP addresses is unreliable.Attackers frequently use virtual private networks (VPNs) and other methods to obfuscate their origins, making pinpointing a specific geographic source difficult.On Monday, X was the target of a distributed denial-of-service attack that intermittently shut down the popular social media site for users worldwide. The X DDoS attack was linked to Dark Storm Team, a notorious hackivist group known for launching similar large-scale cyber disruptions.Hours after the attack, Musk claimed during an interview with Fox Business that the IP addresses associated with the attack originated in the Ukraine area.Tech-savvy users on X quickly pointed out that IP addresses can be masked or spoofed, making them appear to originate from one region when they actually originate from another.Dear Elon:You can't attribute an attack to any geographic location by IP address alone.See: VPN, location spoofing, etc.Also See: How botnets are controlled remotelyAlso Also See: Ask a cybersecurity person to help you. — MikeTalonNYC (@MikeTalonNYC) March 10, 2025Cybersecurity professionals also cautioned against drawing conclusions based solely on IP address data.“If one were conducting a DDoS attack you wouldn't necessarily see each connection originating from an IP address from a specific nation or netblock,” Scott Renna, Senior Solutions Architect with blockchain security firm Halborn, told Decrypt. “By definition, the attack would have to come from multiple IP addresses.”Renna pointed out that attackers distribute their traffic across numerous locations to avoid detection and mitigation efforts.“From an optics perspective and a blocking and prevention standpoint, it's just not how it's typically done,” he said.While the origins of the X attack remain a mystery, DDoS-as-a-Service websites are popping up to facilitate the launch of large-scale attacks. These websites let customers pay to launch DDoS attacks.There are two main types of DaaS."Stresser" services, which are legitimate tools companies use to test and strengthen their IT infrastructure

PYMNTS
Feb 24th, 2025
Bybit ‘Back To 100%’ After Historic $1.5 Billion Hack

Cryptocurrency exchange Bybit says it has replenished its reserve following a record-breaking $1.5 billion hack. The company announced Monday (Feb. 24) that it had conducted a fresh audit and restored its reserve to a 1:1 ratio within 72 hours of last week’s incident. “Bybit fully backs all customer assets entrusted to our platform, maintaining a dynamic ratio of over 1:1,” Ben Zhou, Bybit’s co-founder and CEO, said in a news release

Recently Posted Jobs

Sign up to get curated job recommendations

There are no jobs for Halborn right now.

Find jobs on Simplify and start your career today

We update Halborn's jobs every few hours, so check again soon! Browse all jobs →