mab.xyz

mab.xyz is a web3 security firm in Stockholm. Our API delivers instant risk assessment for transactions (to be used in wallets or custody services) or for risk assessment for any contract or protocol on Ethereum (to be used by investors).

We've precomputed risk data for 3.4M verified contracts, updated weekly.

Get notified about mab.xyz news!

Track record (selected)

folkfigur (2021): first-ever state commissioned NFT, for the people of Sweden, funded by the Swedish government (site)
x-eth (2021-2023): highly available blockchain nodes, funded by WASP (neth, ChaosETH). Blueprint used by RPC companies.
crystal-clear (2024-2025): smart contract supply chain analysis, funded by Ethereum Foundation (repo)
regblock (2024-2025): suppliers of smart contracts, funded by Vinnova (paper)
versioned-proxy (2025): a secure proxy to protect against malicious upgrade (repo)
vcd (2025): verifiable client diversity, funded by Ethereum Foundation (paper)

API Product: Crystal-Clear API

There are 41 millions smart contracts of Ethereum. How safe is it to interact with any of them? mab.xyz gives you a high quality, high performance API for risk assessment for analyzing smart contracts and dApps.

📊 Endpoints

GET /v1/analysis/{address}/dependencies

Analyze and return the dependency network, aka the supply chain for a contract address, and the risks associated with it.

GET /v1/analysis/{address}/risk

Calculate and return a global risk assessment for a contract address

GET /info/reposcore/{address}

Fetch security scorecard data for a smart contract repository

Data Product: Crystal-Clear Ball

The API is powered by our data product, which is a database of precomputed software supply chain and risk score for 3.4 million verified smart contracts. This is the Crystal-Clear Ball, a huge JSON file. We update the Crystal-Clear Ball weekly.

Enterprise Services

Security audit of supply chain for blockchain infra and offchain code (dApps, frontend, etc)
Security monitoring of offchain code (remember bybit)
Security attestation of compilation and build pipelines

FAQ

What's your vision?
Our vision is that a progammable society will be more transparent, more efficient and more fair. Blockchain is a key technology to achieve this vision.

What's your mission?
Our mission is to contribute to building a safe, progammable society with world-class engineering driven by integrity, passion and commitment.

Who you are?
We are a spin-off of Prof Martin Monperrus' research group at KTH Royal Institute of Technology. We know the hard bits of blockchain and smart contracts (databases, distributed systems, programming languages, compilers, crypto). We have published high impact papers on blockchain and crypto.

What's your values?

Integrity: We build high-integrity software, with high integrity values.
Simplicity: We KISS the systems we design. Less is more.
No bullshit: We prioritize results over rethoric, repos over slides, authentic contributions over vaporware.
Openness: We are proponents of openness, having practiced open collaboration, open innovation and open source for decades.

How to work with you?
Contact us at team@mab.xyz

How to follow you?

[Newsletter] Sign-up to receive only good stuff
[Github] https://github.com/mab-xyz/

Can I work remotely for mab.xyz?
For the type of work we do, remote work is not particularly useful.

Where are you based?
mab.xyz in incorporated in Sweden, truly dedicated to cinamon rolls and European tech excellence.

Credits: this webpage is inspired 🚀 from our colleagues at Lambdaclass, because we share their values 🤝, and because we need to move fast ⚡.