Quantstamp Secures Crypto.com Chain to Drive Faster and Easier Cryptocurrency Payments

Quantstamp Announcements
Share this article:

Quantstamp, a Y-combinator backed smart contract security company, is proud to announce we’ve completed an audit of the Crypto.com Chain. Crypto.com, the team behind the MCO Visa Card, a prepaid Visa card that allows users to spend cryptocurrencies easily and receive rewards such as cashback, airport lounge access, and other benefits as they use the card. Crypto.com has recently announced the Crypto.com Chain, a public blockchain focused on facilitating mobile crypto payments. It allows for fast settlement and provides rewards for merchants and consumers who use it to transact.

Along with the Crypto.com wallet app, a digital and fiat currency mobile wallet, the Crypto.com Chain aims to make cryptocurrencies easier for merchants to accept and for customers to spend. Customers receive purchase incentives while merchants enjoy instant settlement and no transaction fees.

“Crypto.com is a major player in the crypto payments space,” notes Richard Ma, CEO of Quantstamp. “The Crypto.com Wallet and MCO Visa Card make it easier to pay with cryptocurrency. We were happy to audit the Crypto.com Chain smart contracts and help them in their mission of faster, easier online payments with lower fees.”

This full service audit was performed over five days by four experienced security engineers from Quantstamp’s auditing team. Using state of the art automated tools to supplement manual processes, we performed an architectural review, unit and functional testing, computer-aided verification, as well as a manual code review. In case vulnerabilities were found, they were communicated to and addressed with the project team. In the end, Quantstamp’s audit resulted in robust token smart contracts with no serious vulnerabilities.

“With the Crypto.com Chain, we are aiming to drive the next step of cryptocurrency payments and drive adoption, not only by simplifying the payments themselves but also by rewarding both the merchants and consumers to use cryptocurrency for mobile and online payments,” said Kris Marszalek, CEO of Crypto.com. “The thorough audit of our token contracts by Quantstamp’s team of experienced security engineers gave us the confidence to roll out this project which we hope will accelerate the mainstream adoption of cryptocurrency payments.”

Auditing the Crypto.com Chain continues Quantstamp’s track record of helping secure projects aiming to improve mainstream adoption of cryptocurrencies and blockchain technology. For more information about Quantstamp’s smart contract security services and products, visit Quantstamp.com

Back
Quantstamp Announcements

September 2026: The Approval Layer Was Exploited

Crypto lost $742.0M across 33 incidents in September 2026, almost three times August's $255.5M and the biggest month of the year so far. Bitget's $387M hack and Liquid Network's $320M exploit account for about 95% of that, with the other 31 incidents adding up to $35.0M. In August, the prices going into contracts were wrong. In September, attackers went after the systems that approve transactions in the first place. Here's the month in security 👇

Read more
about September 2026: The Approval Layer Was Exploited
Quantstamp Announcements

August 2026: The Price Feed Was Exploited

Crypto lost $255.4M across 46 incidents in August 2026, roughly level with July's $254.4M, with more incidents than any month this year. June and July incidents were largely due to key compromises, but August shifted to price manipulation. Eleven oracle and price-manipulation incidents accounted for $135.87M, or 53% of the month. Two chains stopped producing blocks and rolled back state to undo the damage. Here's the month in security 👇

Read more
about August 2026: The Price Feed Was Exploited
Quantstamp Announcements

July Security Beat: Keys Over Code (Again?)

Crypto lost more than $240 million across 29 incidents in July 2026, up roughly 216% from June's $75.87M, even as the number of attacks fell from 40 to 29. For the second month running, the damage didn't come from clever contract exploits. The same failure class ran through Web2, from a $12.3M rail-industry ransom to a 1TB bank breach that started with one employee's email. Here's the month in security 👇

Read more
about July Security Beat: Keys Over Code (Again?)