01
New projects
A paragraph about the problem is enough to start. We reply within two working days, usually with questions rather than a quote.
Blockchain · Service Smart contract security review
A line-by-line adversarial review of Solidity and Rust contracts by two independent reviewers, with a ranked findings report, fixes, and a re-review included.
In short
A smart contract security review (often called an audit) is a line-by-line examination of contract code by engineers looking for ways to steal funds, freeze them, or break the contract's rules. Two of our reviewers read the code independently, combine their findings, and deliver a report that ranks each issue and explains how to fix it. A second review after your fixes is included.
- How to engage
- Security review
- Practice
- Blockchain
Signs this is the right service
- A contract is close to deployment and will hold user funds.
- You are about to pay for a full external audit and want the obvious issues gone first.
- A contract is being upgraded and the change touches funds or permissions.
- You inherited deployed contracts and need to know what you are responsible for.
What you get
Manual review
Every line read by two reviewers working separately, focused on logic errors that tools cannot find.
Automated analysis
Static analysis and fuzzing run alongside the manual work, with the output triaged rather than pasted into the report.
Economic and integration risks
Oracle dependence, flash-loan exposure, reentrancy across contracts, and assumptions about tokens the contract interacts with.
Access control and upgrade paths
Who can change what, with which keys, after what delay — and what happens if a key is lost or stolen.
Findings report and re-review
Each finding with severity, a reproduction and a recommended fix; then a re-review of your changes.
The process
- 01
Freeze a commit
We review one fixed version, with the specification and any known concerns.
- 02
Independent passes
Two reviewers work without seeing each other's notes.
- 03
Reconcile and report
Findings are merged, disputed points are tested, and the report is written.
- 04
Re-review
After fixes, we check each finding is resolved and that the fix introduced nothing new.
SolidityRustFoundrySlitherEchidnaManual review
Smart contract security review: common questions
Does a review guarantee the contract is safe?
- No. A review lowers risk; it cannot prove the absence of bugs. Anyone who promises otherwise should not be trusted with your code. We state clearly what was in scope and what was not.
How is this different from a full external audit?
- The method is the same. For contracts holding significant value we recommend a second, separate audit firm as well, because independent teams find different things.
What do you need from us?
- A frozen commit, the specification or a description of intended behaviour, the test suite, and someone who can answer design questions during the review.
How is the price set?
- A fixed fee based on the amount and complexity of code in scope, agreed before work starts, with the re-review included.
06 / Let’s build
Bring us the difficult problem.
02
Careers
Engineers, designers and researchers who like systems that are hard to get right. Send something you built and what you would change about it now.
03
Studio
Based in India and working remotely, with overlap hours agreed up front so your team always has a time to reach us.
04
Read
Guides on AI agents, RAG, MCP, tokenization and chain abstraction, written by the engineers who build them.