CertiK published a technical analysis exploring how Tolk addresses common FunC engineering pain points, new security boundaries around lazy loading, unions, nullable values, bounce handling, and commit behavior, and why authorization, replay protection, asynchronous state, accounting, and upgrade governance remain critical audit concerns.

CertiK is the largest Web3 security services provider, founded in December 2017 in New York by two professors from Yale and Columbia University. CertiK offers a wide range of products and services to support the Web3 industry, project teams, and users alike. CertiK's products and services span the entire lifecycle of project development, from incubation and early stages, to growth and maturity. CertiK is one of the most globally recognized companies in the Web3 industry, serving users across 150 countries/regions. To date, CertiK has worked with more than 5,000 enterprise clients, secured over $600 billion worth of digital assets, and detected more than 180,000 vulnerabilities in blockchain code. CertiK's clients include industry-leading projects such as Aptos, Ripple, Sandbox, Polygon, BNB Chain, and TON. ​​Since its inception, CertiK has secured investments from 12 top-tier funds, including Sequoia, Coatue, Goldman Sachs, Shunwei Capital and Insight Partners, with a valuation of more than $2 billion. With a highly skilled technical team, CertiK stands out for its expertise in formal verification technology, artificial intelligence, and academia. CertiK's leaders also collaborate closely with global government bodies to develop supportive Web3 compliance and regulatory frameworks.