Smart contract audit company

Introductory Client Consultation for Requirement Gathering

• Preliminary consultation with clients before initiating the audit process.
• Understanding functional requirements and business logic.
• Going through the project’s White Paper and Yellow Paper.
• Collecting the code design patterns to know the intended behaviour of smart contracts.

Static & Dynamic Code Analysis

Executing various analysis processes and performing code reviews using automated tools having more than 150 vulnerability detectors, to identify:

• Potential errors
• Malicious code
• Compilation issues

Conditional Code Testing

• Deploying and testing smart contracts on a local sandbox environment.
• Verifying gas limits and preventing unnecessary consumption of gas.

Manual Code Verification

Performing a line-by-line inspection of the smart contract to find threats such as:

• Timestamp dependence
• External calls
• Denial of service attacks

Business Logic Verification

We leverage audit tools to verify if the system is architectured as per the Business logic. This process involves:

• Verifying smart contracts flow graph as per business logic (using audit tools such as Surya)
• Executing functional test/end scenarios as per the business requirements
• Identifying the centralization and various other risks associated with the business logic and suggesting the possible solutions.

Initial Audit Report Submission and Bug Fixing

• Sharing initial draft of the audit report with clients highlighting risks and steps followed during the process.
• Providing possible solutions to fix the identified bugs.
• Three free follow up audits once bug fixes are completed from the client’s end.

Final Audit Report Creation & Delivery

• After the go ahead from the client following all the bug fixes, creating a detailed final audit report comprising all recorded risks and vulnerability details and their status.
• Delivering the complete report with vulnerability guidance and methods for continuous verification.