Smart contract audit services
We review your smart contract line by line, run it through static analysis tools and give you a formal audit report: every finding, how serious it is and how to fix it. Most audits take 1–2 weeks, and you can start with a free review.
A report your holders can read
Each audit ends with a formal report you can publish for your community or share with exchanges and partners.
Security status
A clear verdict on the contract, with the compiler version, network, address and explorer link for the exact code we reviewed.
Function-by-function review
Every function in the contract listed with its type, what we observed and whether it passed.
Token risk analysis
The checks holders care about: buy and sell fees, fee caps, blacklists, minting after launch, proxies, hidden owners and self-destruct.
Findings by severity
Each issue rated critical, high, medium, low or informational, with its status: unresolved, acknowledged or resolved.
Owner powers
A list of what the contract owner can do, what could go wrong if that key were compromised, and how to reduce the risk.
Tool results and call graphs
Output from Slither, Solidity static analysis and Solhint, plus a call graph showing how the contract's functions connect.
See a real audit before you ask for one
This is the full 21-page report we delivered for the Royal (RYL) token on BNB Chain: contract details, function review, token risk analysis, findings, owner powers and tool logs.
- Critical: can lead to lost funds or tokens
- High: will cause problems and must be fixed
- Medium: likely to cause problems; fixing is recommended
- Low: no problems now, but worth improving
- Informational: doesn't affect how the contract works
Manual review first, tools second
Tools catch known patterns. Many serious bugs are logic mistakes that tools miss, so every audit starts with a manual review.
- Access control: who can call what
- Math and rounding, including division order and decimals
- External calls and reentrancy
- Signatures: replay, expiry and the signer check
- Token settings: fees, limits, minting and trading switches
- Slither for known vulnerability patterns
- Solidity static analysis in Remix
- Solhint for code quality and best practices
- Surya for call graphs and function maps
Launching soon? Our pre-launch smart contract checklist covers the 40 things worth checking before you send code for audit.
How long a smart contract audit takes
Most audits
From receiving the final code to delivering the report. The exact time depends on how much code there is and how complex it is.
Review first
A quick look at your contract before you commit. We point out the riskiest areas and quote the full audit.
How a smart contract audit runs
Free review and quote
Send your code or a verified contract address. We look it over and quote the audit.
Scope
We agree on the exact files and code version to audit, so the report matches what you deploy.
Audit
Manual review and automated analysis, with questions to your team as they come up.
Report
You receive the formal report with every finding, its severity and a recommended fix.
Fixes
Your team fixes the issues, and the report shows which findings were resolved or acknowledged.
Smart contract audit FAQ
What is a smart contract audit?
A smart contract audit is a security review of your contract's code before it goes live. We check every function for bugs, missing access control and ways funds could be lost, then give you a report with each finding, how serious it is and how to fix it.
How long does a smart contract audit take?
Most audits take 1–2 weeks from when we receive the final code. It depends on how much code there is and how complex it is.
How much does a smart contract audit cost?
It depends on the size and complexity of the code, so we quote each audit after a free review.
What do I need to send you?
Your source code, either a repository with the exact commit or a verified contract address, plus any docs that explain what the contract is meant to do.
What's the difference between the free review and a full audit?
The free review is a quick look at the riskiest parts of your contract, so you know where you stand. The full audit is a line-by-line review with automated analysis and a formal report.
What's in the audit report?
Contract details, a function-by-function review, a token risk analysis, findings by severity with fixes, the owner's powers and the results from our analysis tools. Download a sample report to see one.
Can we publish the report?
Yes. The report is yours to share with your community, partners and exchanges.
Do you audit contracts you didn't write?
Yes. We audit contracts written by any team, as well as our own.
Does an audit guarantee the contract is safe?
No audit can guarantee that. It finds and reports issues in the code we reviewed, as it was when we reviewed it. Changes made after the audit need another review.
Want your contract checked before launch?
Send us your code or contract address. We'll review it for free and quote the full audit.