Lambda

We build software that is fast and provably correct.

We use Lean 4, Rust, and Erlang/Elixir to build systems where bugs are not acceptable. We work across blockchain infrastructure, AI, finance, aerospace, and automotive. We build verified compilers, proof systems, distributed systems, and safety-critical software. Billions of dollars flow through code we've written.

Founded by Federico Carrone. 100+ engineers specializing in formal verification, cryptography, distributed systems, and high-performance software. Part of Ergodic Group. Teams in Buenos Aires, Montevideo, and Barcelona. Since 2014.

hello@lambdaclass.com

Links:


What we believe

Most software is built on faith. Faith that tests covered the right cases, that the reviewer caught the edge case, that the system behaves correctly under conditions nobody anticipated. We don't think that's good enough for infrastructure that people depend on.

Meanwhile, AI is generating more code than ever. That's great for speed, but it makes the correctness problem worse. More code, written faster, with less human review. The need for mathematical guarantees about software behavior is growing, not shrinking.

Rust proved you can make software safer without sacrificing performance. Formal verification is the next step: not just memory safety, but proving your logic is right. Tools like Lean 4 make this practical today in ways it wasn't five years ago. Mathematical proof is not perfectionism. It's the only honest answer to the question: does this work?

We write software where the machine checks the reasoning, the code is public by default, and correctness is a property of the system, not a hope. We discovered and responsibly disclosed a critical exploit in Succinct's SP1 zkVM. We could have exploited it. Instead we reported it, published our findings, and moved on. That's what integrity looks like when it's not a bullet point on a careers page.

What we do

Verified Optimization
We prove optimizations correct in Lean 4, then generate production code from those proofs. The math says it's right, and the machine checks the math.

Verifiable Computation
Zero-knowledge proof systems and verifiable execution environments. You can verify a computation happened correctly without re-running it.

High-Performance Systems
Rust, RISC-V, GPU-optimized code, Erlang/Elixir for high-throughput backends with strict latency requirements. Execution clients, proof infrastructure, custom VMs.

Safety-Critical Software
Aerospace, automotive, finance. Industries where a bug can kill people or lose millions. We write software with machine-checked proofs that it does what it's supposed to.

AI
We build AI infrastructure. Training pipelines, inference systems, and the high-performance backends that support them.

Post-Quantum Cryptography
Quantum computers will break current cryptographic schemes. We're already building post-quantum clients and signature systems. When the transition happens, our software will be ready.

Our Engagement Model
We don't work hourly. We don't do staff augmentation.

We come in, fix the technical problems, rebuild the team if needed, and stay as long-term partners. In many cases we become the entire tech team. We've done this multiple times over the last decade. If correctness is a nice-to-have rather than a requirement, we're not the right partner.

Selected work

Some of the clients we work with and can share. Many we can't.

We work closely with other Ergodic portfolio companies that are experts in theoretical cryptography and hacking: FuzzingLabs (security research and fuzzing) and 3MI Labs (one of the best theoretical cryptography companies in the world).

Industries

From our blog

More at blog.lambdaclass.com

Work with us

We're looking for people who work on formal verification, compilers, systems programming, cryptography, and AI. If you care about getting things right, actually right, not just passing tests, talk to us.

We believe in transparency: both our selection process and the foundational year are demanding. They're designed to challenge you and help you grow.

60% of applicants do not complete the selection process. 50% of those who join do not continue after the first year due to cultural, technical, or methodological differences. We're selecting for people who can navigate ambiguity, exercise judgment on hard problems, and thrive in an environment where the answer isn't always clear.

Current openings:

Read more about our culture:
https://github.com/lambdaclass/lambdaclass_hacking_learning_path

Interested? hello@lambdaclass.com.

Note: For the type of work we do, we think remote work is not particularly effective.

Our Technology

Blockchain Infrastructure

Verification

Compilers & Languages

Finance

Why Formal Verification

Testing tells you "I tried 10,000 inputs and it didn't break." Formal verification tells you "it can't break. Here's the proof."

Tests cover cases you think of. Proofs cover all of them. That's the difference between hoping your software works and knowing it does.

We use Lean 4 for this. A proof assistant that doubles as a programming language. The proofs are readable by humans and checkable by machines.

Why Rust

Most systems languages make you choose between speed and safety. Rust doesn't. Its ownership model catches memory bugs, data races, and use-after-free errors at compile time. No garbage collector, no runtime overhead.

For the kind of software we build (execution clients, proof systems, VMs), Rust gives us C-level performance with guarantees that C can't provide. It's not perfect, but it's the best tool that exists right now for writing fast software that doesn't crash.

Why Erlang/Elixir

Some systems need to stay up no matter what. Telecom switches, messaging backends, financial systems that can't go down for maintenance. Erlang was built for this. It's been doing it since the 80s.

The BEAM VM gives you lightweight processes, fault isolation, and hot code upgrades. If one process crashes, the rest keep running. Elixir brings modern syntax and tooling to the same runtime.

When we need high-throughput backends that handle millions of concurrent connections with low latency and near-zero downtime, Erlang/Elixir is what we reach for.

Patronage

The tools and institutions we depend on need sustained investment, not just usage. We put money into the things we believe matter.

Get In Touch

If you have a problem where the software has to be right, not just "probably right," we should talk.

hello@lambdaclass.com