Siemens AG Issues €330M Tokenised Bond on Blockchain — Audited by Softstack
Softstack audited the smart contracts for Siemens AG’s €330M tokenised bond, settled via central bank money on institutional blockchain rails.
MiCA Compliance Security for CASPs and Issuers
Why Choose Softstack?
Everyone can talk. We prefer to let our work and our clients speak for us. Get to know us and see the difference.
In-house Team
All of our team members are full-time employees — no freelancers, no outsourcing, no uncontrolled risks.
Clear and Fair Pricing
No hidden fees or vague estimates. We mostly work on fixed-price projects and deliver what we promise, without excuses.
Proven Experience
Since 2017, we have been building cutting-edge solutions in Web3, AI, and enterprise-grade digital solutions.
Made in Germany
Headquartered and operating fully in Germany, ensuring high standards, data protection, and reliability.
Fast and Reliable
Clear updates, short response times, and full transparency throughout the project.
Lean Team
You work directly with our leadership. The CEO is personally involved, and we operate with a lean, effective scrum-based approach for speed and clarity.
Rated by clients on
Service includes
You'll find the following service aspects in our offer.
- MiCA product and CASP activity scoping
- Smart contract audits for tokens, EMT/ART, and related contracts
- Custody, wallet, and key-management security review
- CASP ICT and application penetration testing
- Digital asset risk assessment for issuers and operators
- Pre-authorisation and pre-launch security evidence packs
- Remediation tracking for counsel and competent authorities
- Handoff to DORA ICT testing where MiCA and DORA overlap
Our MiCA Security Process
1
MiCA activity and product mapping
Clarify whether you are a CASP, ART/EMT issuer, or other crypto-asset project. Map token design, custody model, smart contracts, and ICT systems that need security evidence for authorisation or ongoing supervision.
2
Technical gap analysis
Assess smart contracts, wallets, APIs, and operational ICT against MiCA-relevant security expectations and common competent-authority due diligence questions.
3
Targeted security testing
Run smart contract audits, dApp reviews, penetration tests, and digital asset risk assessments scoped to your MiCA product and critical functions.
4
Stablecoin and reserve-linked controls
For ART/EMT and other reserve-backed tokens, focus on mint/burn paths, access control, upgradeability, oracle/inputs, and operational controls that affect redeemability and integrity.
5
Authorisation-ready evidence pack
Deliver findings, remediation status, and artefacts counsel and compliance teams can attach to MiCA filings, reviews, and ongoing supervisory dialogue. Pair with our MiCA consulting when you need regulatory strategy too.
Clients think we're pretty awesome
...but don't take our word for it
FAQ
MiCA (Markets in Crypto-Assets Regulation) is the EU framework for crypto-asset issuers and crypto-asset service providers (CASPs). Authorisation and ongoing supervision expect sound ICT, governance, and asset-protection controls. Independent smart contract audits, pentests, and risk assessments produce the technical evidence those processes typically require.
Our Digital Asset Regulation Consulting service covers regulatory strategy, gap analysis, and filing support. This MiCA compliance security page covers the technical work: contract audits, offensive testing, custody reviews, and evidence packs. Many clients use both together.
For ART/EMT and other on-chain issuance models, competent authorities, banks, and partners usually expect independent review of mint/burn, roles, upgrade paths, and related contracts. Softstack has delivered security work for MiCAR-oriented stablecoin programmes, including AllUnity.
Many in-scope crypto entities also face DORA ICT risk and resilience testing duties. MiCA focuses on crypto-asset markets and CASP authorisation. DORA focuses on digital operational resilience. We align scopes so you do not duplicate work unnecessarily.
Before authorisation filing, before a major product or contract upgrade, and on a recurring cycle once live. Early technical gap analysis shortens remediation time and reduces surprises in supervisory review.