Tweag I/O: Five years of Cardano smart-contract audits: a retrospective

Planet Haskell · Jul 23, 2026

At Tweag, we have been auditing Cardano smart contracts since 2021. We started out reviewing contracts mostly by hand, but it did not take long before we began building tooling to make our audits more efficient and systematic — most notably cooked-validators, which we have maintained and improved ever since. In its earliest form it could only handle one transaction at a time and was built on top of plutus-apps — a library that has been archived for a good while now. From this early reliance on a now deprecated dependency, it grew over the years into the powerful framework it is today. At its…