Accretion was founded in January 2025 by Robert Reith (r0bre), who had spent the previous two and a half years auditing Solana programs, including as a lead auditor. He started Accretion to go all-in on Solana auditing, at a moment when most audit firms were doing the opposite: generalizing across ecosystems and drifting toward traditional security work.
The thesis is narrow on purpose: we audit Solana programs, and nothing else. Not because we don’t respect EVM work, but because the runtime is different enough that we don’t believe a firm can be top-of-class on both. Solana programs share almost nothing with the Ethereum mental model, no implicit sender, no automatic storage, no per-contract state. Every protection is one you wrote, every check is one we have to verify. That posture takes years to learn well, and we’d rather be the firm that’s spent those years.
We hire researchers, not consultants. Everyone on the team has either ranked on a bug-bounty leaderboard, played CTF seriously, or shipped non-trivial security tooling. Most clients reach us by referral or by reading our research. The engagement experience is engineers talking to engineers.
We’re small and intend to stay that way. The thing we’re selling is the attention of senior researchers, once that attention is rationed across too many concurrent engagements, the value collapses. So we cap our calendar, ship what we promised, and turn down work when the queue is full.
