Company News

Kann Audits Joins the Circle Alliance Program as an Official Security Partner for Arc

Kann Audits is now a Certified Member of the Circle Alliance Program and a security partner for Arc, offering free Kann AI security scans to Arc builders.

CertifiedCircle Alliance Program memberSecurity category
ArcSupported networkListed on our Circle profile
FreeKann AI security scansFor every protocol building on Arc
Sep 16, 2026Arc public mainnetCircle announcement

Membership, category, supported networks, and the Arc commitment are listed on the Kann Audits profile in the Circle Alliance Directory.

Arc and Kann Audits logos: Kann Audits is a Circle Alliance Program security partner

Kann Audits is now a Certified Member of the Circle Alliance Program, listed as a security partner in Circle's Alliance Directory with support for Arc. As part of that commitment, every protocol building on Arc can receive free AI security scans through Kann AI.

Kann Audits Is Now a Certified Member of the Circle Alliance Program

We are proud to share that Kann Audits is now a Certified Member of the Circle Alliance Program. Kann Audits is listed in the Security category of the Circle Alliance Directory, where teams building with Circle find the partners they need, and Arc is among the networks we support.

Circle issues USDC and EURC and now operates Arc, its Layer 1 blockchain for stablecoin finance. Joining the Alliance as a security partner connects Kann Audits with the teams building on that platform, from the first line of code through launch and beyond.

Certified Member of the Circle Alliance Program badge
Kann Audits is a Certified Member of the Circle Alliance Program. View our profile in the Circle Alliance Directory

What the Circle Alliance Program Is

Circle describes the Alliance Program as a global ecosystem of businesses building with Circle. Members are companies with a live solution built on Circle's platform, companies that support USDC or EURC, and service providers for the stablecoin ecosystem.

Members are organized by function across payments, currency access, trading services, and professional services, which include security. The Member Directory helps teams that are actively looking for solutions find the right providers, which is where Arc and USDC builders can now find Kann Audits.

Free AI Security Scans for Every Arc Builder

We are committed to helping projects building on Arc launch securely. To support Arc builders, every protocol building on Arc will receive free AI security scans through Kann AI, providing an additional layer of security throughout development and launch.

Kann AI is our proprietary AI security model, built specifically for identifying vulnerabilities and security risks in Web3 codebases. It builds an understanding of the codebase, analyzes contract behavior and security-sensitive logic, and returns findings your team can review and validate. You can learn more about it on our AI Security Scan page.

An AI scan is a fast, early layer of feedback, not a replacement for a full review. Protocols that will hold significant value on Arc should still complete Expert Security Audits before mainnet, and Kann Audits supports both.

01Share your Arc project
02Kann AI scans the codebase
03Review and validate findings
04Fix during development
05Expert audit before launch

Arc: Circle's Layer 1 for Stablecoin Finance

Arc is an open Layer 1 blockchain purpose-built for financial markets, real-time money movement, and agentic economic activity. Circle launched the Arc public mainnet on September 16, 2026, with a founding validator cohort that includes BlackRock, DTCC, Galaxy, ICE, Mastercard, MoneyGram, SBI Group, Standard Chartered, Sumitomo Corporation, Visa, and Worldpay, and more than 100 institutional and ecosystem builders on day one.

Arc's design choices are aimed at financial applications: gas is paid in USDC rather than a volatile native token, transactions reach deterministic finality in under a second, confidential transactions are available through opt-in privacy, and the execution environment is fully EVM-compatible. According to Circle, the testnet processed more than 700 million transactions before mainnet.

How Arc is built, from Arc's documentation
01 Consensus: Malachite Tendermint-based ordering and deterministic finality
02 Execution: Reth EVM execution with an Osaka baseline
03 Native gas: USDC Stable, dollar-denominated fees
04 Opt-in privacy Confidential execution alongside the public EVM
05 Settlement Final in under one second, no confirmation wait

What Changes When You Build on Arc

Arc runs standard Solidity and works with Foundry, Hardhat, and common wallets, so most contracts deploy unchanged. Arc's own documentation is clear, however, that several runtime behaviors differ from Ethereum. These are the differences we check first when reviewing contracts for Arc.

Arc's documentation notes that a pool pairing native USDC against the ERC-20 USDC interface is meaningless, because they are the same asset.

One asset, two decimal systems

USDC is Arc's native token. It has a native interface with 18 decimals and an ERC-20 interface with 6 decimals, and both share a single balance. Arc's documentation warns against mixing msg.value with USDC.balanceOf() in pool or loan-to-value math, because the raw values differ by a factor of 10^12, and against recording balances at the 6-decimal boundary, because truncation records less than was transferred.

Keep native USDC accounting in native unitsSolidity
// On Arc, msg.value is native USDC with 18 decimals.
// USDC.balanceOf() reports the same balance with 6 decimals.
deposits[msg.sender] += msg.value;      // record in native units, no truncation
uint256 displayUsdc = msg.value / 1e12; // 6-decimal view for display only

Native transfers can revert even with enough balance

Because the native token is USDC, value transfers to the zero address, burns, and transfers involving blocklisted addresses revert, and a reverted blocklist check still consumes gas. Sending native value to a contract is therefore not guaranteed to succeed, which breaks a common DeFi assumption. Pull-based withdrawals and explicit failure handling keep one failed transfer from blocking everyone else.

No onchain randomness, different SELFDESTRUCT semantics

PREVRANDAO always returns 0 on Arc, so any logic that derives randomness from block data must use an oracle or a verifiable random function instead. SELFDESTRUCT moves a contract's native USDC to the beneficiary, and a value-bearing call to an account that self-destructed earlier in the same transaction reverts.

Test against Arc, not a generic EVM

Local tools that simulate a standard EVM cannot reproduce Arc-specific behavior. Arc provides Arc Foundry, with arc-forge, arc-cast, and arc-anvil, for exactly this reason. Tests, fuzzing, and audits for Arc deployments should run against Arc semantics, and porting an existing contract should follow Arc's porting checklist.

How Kann Audits Supports Circle and Arc Builders

Kann Audits is a Web3 security company helping DeFi protocols, blockchain networks, and infrastructure teams build securely at every stage, from development to launch and beyond. We have already helped secure over $2B in TVL, and we are bringing that same level of security to the next generation of protocols on Arc and across the Circle ecosystem.

During development

  • Security consultations
  • Continuous security support
  • Kann AI security scans

Pre-launch

  • Expert Security Audits
  • Formal verification
  • Kann AI security scans

Post-launch

  • Incident response
  • Ongoing security support
  • Review of upgrades

“Arc gives builders a chain designed for real financial applications. Our job is to make sure what they deploy on it is secure.”

Questions About Kann Audits, Circle, and Arc

Short answers about our Circle Alliance Program membership and our support for Arc builders.

Is Kann Audits an official Circle partner?

Yes. Kann Audits is a Certified Member of the Circle Alliance Program and is listed in the Security category of the Circle Alliance Directory, with Arc among its supported networks.

How can teams building on Arc get a free AI security scan?

Every protocol building on Arc receives free AI security scans through Kann AI. Contact Kann Audits through the website or on Telegram with your Arc project and repository to get started.

Does a free AI security scan replace a smart contract audit?

No. A Kann AI scan adds an automated layer of analysis during development and before launch, and its findings are meant to be reviewed and validated. Protocols that will hold significant value should still complete an expert-led security audit before mainnet.

What is Arc?

Arc is Circle's open Layer 1 blockchain, purpose-built for financial markets, real-time money movement, and agentic economic activity. It uses USDC as its gas token, offers sub-second deterministic finality and opt-in privacy, and is fully EVM-compatible. Its public mainnet launched on September 16, 2026.

Can Kann Audits audit Solidity contracts deployed on Arc?

Yes. Arc is EVM-compatible, so Solidity contracts and standard tooling work on it. A review for Arc also accounts for its protocol-level differences, such as USDC as the native gas token with 18 native decimals, value transfer rules that can revert, and the absence of onchain randomness.

Which services does Kann Audits offer to Circle ecosystem builders?

Security consultations and continuous security support during development, Expert Security Audits, Formal Verification, and Kann AI Security Scans before launch, and Incident Response with ongoing security support after launch.

Primary references

Sources and further reading

A note on scope: Security reviews reduce uncertainty within a defined code and architecture scope. They do not guarantee that every vulnerability has been found or cover changes made after review.

Back to all research

Building on Arc?

Claim your free Kann AI security scan

Every protocol building on Arc receives free AI security scans through Kann AI. Share your project and repository to get started.