Partnering with Toku to Enhance Web3 Security & Payroll Practices

Quantstamp Announcements

Quantstamp is thrilled to announce a strategic partnership with Toku, marking a significant milestone in our commitment to enhancing security and compliance within the web3 ecosystem. Through this partnership, we will bring security audits and compensation tax audits together as part of a bundled service to provide blockchain companies with seamless support to power their businesses.

Web3’s rapid growth has brought its own unique set of challenges, and regulatory tax scrutiny and ever-present security threats both continue to rise. Recognizing this, Quantstamp and Toku decided to join forces to offer tailored support to web3 organizations. This will enhance both security protection and compliance capabilities for companies operating within the blockchain space.

Specifically, this will include a two-step process that includes a comprehensive code review and a tax review for clients at the outset of initial engagements. Unifying these two critical services puts Toku and Quantstamp at the forefront to give companies the tools needed to protect key information, adhere to all relevant regulatory standards, and ultimately adapt to the future of web3.

Toku is the first comprehensive and global solution for token compensation, token grants, and token tax compliance. Their products enable 100% tax compliance on all token-based compensation in over 100 countries globally. They also provide unmatched legal and tax support to grant and administer global team’s tokens. Toku’s customers include Protocol Labs, dYdX Foundation, Mina Foundation, Hedera, Gnosis, Safe, and many more.

Through this strategic partnership, Quantstamp hopes to empower web3 companies with tools and services that will help them succeed at every stage. Stay tuned for more updates on the partnership, and learn more about Toku and its services at toku.com.

Quantstamp Announcements

September 29, 2023

Quantstamp is thrilled to announce a strategic partnership with Toku, marking a significant milestone in our commitment to enhancing security and compliance within the web3 ecosystem. Through this partnership, we will bring security audits and compensation tax audits together as part of a bundled service to provide blockchain companies with seamless support to power their businesses.

Web3’s rapid growth has brought its own unique set of challenges, and regulatory tax scrutiny and ever-present security threats both continue to rise. Recognizing this, Quantstamp and Toku decided to join forces to offer tailored support to web3 organizations. This will enhance both security protection and compliance capabilities for companies operating within the blockchain space.

Specifically, this will include a two-step process that includes a comprehensive code review and a tax review for clients at the outset of initial engagements. Unifying these two critical services puts Toku and Quantstamp at the forefront to give companies the tools needed to protect key information, adhere to all relevant regulatory standards, and ultimately adapt to the future of web3.

Toku is the first comprehensive and global solution for token compensation, token grants, and token tax compliance. Their products enable 100% tax compliance on all token-based compensation in over 100 countries globally. They also provide unmatched legal and tax support to grant and administer global team’s tokens. Toku’s customers include Protocol Labs, dYdX Foundation, Mina Foundation, Hedera, Gnosis, Safe, and many more.

Through this strategic partnership, Quantstamp hopes to empower web3 companies with tools and services that will help them succeed at every stage. Stay tuned for more updates on the partnership, and learn more about Toku and its services at toku.com.

Quantstamp Announcements

June Security Beat: Keys Over Code

$75.32M was lost across 32 crypto incidents in June, up from May's $59.52M. No coordinated campaign carried the month, but one targeted operation did. A targeted social-engineering attack against Humanity Protocol reached the keys behind the $H token and drained $32M, roughly 42% of every dollar lost in June. Quantstamp led the independent investigation and traced the tooling to a phishing campaign previously seen targeting macOS users. Offchain, a fresh npm supply chain wave hit Red Hat's packages on the first day of the month, and a PeopleSoft zero-day was exploited for two weeks before Oracle said a word. Here's the month in security 👇

Quantstamp Announcements

May 2026 Security Beat

$59.52M was lost across 29 crypto incidents, down sharply from April's ~$635M. No single hack carried the month. The bigger story happened off-chain, where a self-propagating npm worm called Mini Shai-Hulud kept resurfacing in new waves through the month, ultimately spanning more than 1,000 malicious package versions across the npm ecosystem.

Quantstamp Announcements

April 2026 Security Beat: Same Actors, New Targets

April was undoubtedly a rocky month in security. $635M was lost across 28 crypto incidents. The Axios npm package was compromised on day one, exposing an estimated 600,000 installs in three hours. Vercel was breached through a third party. Three major CVEs under active exploitation. Here's the month in security 👇

Follow