We verify the code that moves value and the authority that can change it. Manual smart-contract review, governance and upgrade analysis, and continuous monitoring of who can change your protocol and how fast, delivered as engineering evidence.
Enter a proxy contract address. Themis resolves the authority chain, detects upgrade constraints, and surfaces control-plane risk. No account required.
Free · No account · Ethereum, Arbitrum, Optimism, Base, Polygon
One discipline
The code that moves value matters, but the authority that can change the code matters just as much. We verify both: the smart contract itself and the control plane around it, governance, upgradeability, the delegation paths that decide how the protocol can change, and the timelocks and multisigs that gate that authority. The same discipline we bring to AI agents.
Most DeFi risk is not in a single line of code. It is in who can change the code, and how fast.
Services
From a point-in-time audit to continuous monitoring, matched to how your protocol ships and changes.
Methodology
A structured engagement with a fixed scope, clear checkpoints, and post-fix verification.
What we analyze
Coverage
Authority graphs, upgrade timelines, and risk classifications mapped across the most widely deployed DeFi protocols. Browse the public Control-Plane Index or scan any proxy contract yourself.
Pricing
Use Themis before audit, before deployment, and after launch to track governance, upgrade, and authority risks for your own protocol.
Each subscription is a workspace for one protocol: a transaction-validated reconstruction of upgrade authority, governance surfaces, and bypass paths, kept up to date as the protocol evolves.
This is not a substitute for a full audit.
Each subscription covers one protocol workspace. Additional protocols require a separate subscription, add-on, or enterprise agreement. Public scanner usage remains subject to rate limits and supported-chain coverage.
Themis scan results are automated security intelligence based on public onchain data and supported metadata sources. They are not a full smart contract audit, legal opinion, investment advice, or endorsement of any protocol.
Themis provides security analysis, audit, and control-plane risk intelligence services only. Themis does not provide crypto exchange, custody, brokerage, payment, investment, or financial services. Service availability and supported-chain coverage may vary by jurisdiction.
Snapshot requests may be queued depending on system load.
The Snapshot identifies structural control-plane risks. The Full Audit validates logic-level privilege controls, upgrade safeguards, and escalation paths in depth.
The Snapshot frequently uncovers governance concentration, timelock bypass paths, or upgrade latency inconsistencies not visible in standard reviews.
Share your repository and protocol overview for an audit, or run a control-plane scan in seconds. We’ll take it from there.