Overview
Tweag is a software consultancy that lends specialist engineers to teams working on hard technical problems. Its work centers on correctness: compilers and functional programming, build systems for very large codebases, reproducible infrastructure, and formal methods, the practice of proving that a system behaves the way its specification says1.
Cardano is one of Tweag's long-running practice areas, and the client work also reaches into automotive and embedded systems, fintech, pharmaceuticals, and developer tooling2. Part of Modus Create and trading as Tweag by Modus Create, it runs an internal group called High Assurance Software that reviews Cardano smart contracts, the programs that move funds on a blockchain without a bank or broker in the middle3. Tweag engineers also work on Cardano's core protocol alongside Input Output4.
Key Features
- Security reviews for Cardano smart contracts. The High Assurance Software group checks contract code for design and logic errors before it goes live, and keeps a public register naming each product reviewed, with the commissioning organization named on some entries3.
- Audit reports published for some audits. A public repository holds PDF reports for some of the audits on Tweag's public register, including Minswap, Djed, and Marlowe, so readers can see the findings themselves rather than rely on a summary5.
- Attack testing built into the review. Alongside reading the specification and the contract code, Tweag runs cooked-validators, a Haskell library it wrote that assembles test transactions and then deliberately alters them to check whether a contract rejects the attack6.
- Work on Cardano's core protocol. Tweag led Cardano's consensus and ledger teams, implemented the Ouroboros Genesis protocol, and contributed to the design of Ouroboros Peras, an upgrade meant to shorten the wait before a transaction is settled for good4.
- Open-source tools beyond blockchain. Tweag maintains Nickel, a configuration language with opt-in static typing and contracts that validate data against a schema, and Topiary, a formatter that tidies up source code across many languages7.
What to Expect
The homepage is a pitch page: four practice areas with a short summary of each, and a wall of client logos whose names run well outside crypto1.
The about page explains how an engagement runs. Tweag describes three stages. It explores the problem, its architecture and its risks. It builds the system. Then it transfers the knowledge and tools the client team needs to keep improving after the engagement. The same page lists the engineering roster by name and role2.
Anyone checking the Cardano record should open the audit register. Each entry names the audited product and the languages the contracts were written in. About half also name the organization that commissioned the review, and a link to the published report appears where one exists3. Developers will also find an engineering blog with a Cardano tag, and a register of published papers and manuscripts from programming-language venues, many of them linked to an open preprint8.
There is no documentation site and no product to sign up for. Tweag sells services, so the site is built to explain the work and to hire engineers, not to onboard users.
