17.5.2021
SMART CONTRACT AUDIT
Let us know if you need any help with securing your Ethereum / EOS smart contract. Our specialists will analyse your code to make sure it's safe both from security and investor's perspective.
SMART CONTRACT AUDITS SERVICES
ICO SMART CONTRACT AUDIT
We can help you protect your funds from hacking incidents by conducting smart contract audit for your ICO. This will ensure that your investors’ funds are well-protected against all possible malicious activities and logic errors. In case you create a custom system, we can help you ensure your blockchain security and avoid code-related breaches.
ERC20 SMART CONTRACT AUDIT
ERC-20 is a standard for tokens running on Ethereum. Although this is one of the most popular blockchains to-date, it is still susceptible to numerous errors in the code. Apply for our security audit services to eliminate them.
SMART CONTRACT SECURITY AUDIT
Launching blockchain applications? Get an expert’s review of your smart contract to avoid costly errors and ensure the integrity and the security of the code. When conducting smart contracts’ audit we rely on our own library of well-known bugs and combine manual code verification with automated tools.
DEFI SMART CONTRACT AUDIT
DeFi applications imply that users have to entrust their funds not to a central bank or server, but to the code. A bug in this code may lead to hackers attacks and negatively impact your reputation. With our DeFi smart contract audit services you can be sure that your users’ confidence will never get undermined.
ETHEREUM SMART CONTRACT AUDIT
Apart from ERC-20, Ethereum allows creating a number of other token standards. If you run an application that involves using non-fungible tokens (ERC-721) or any other variations (ERC-777), the smart contract audit would also be useful. Help your users protect their unique crypto possessions by improving the security of your app.
EOS SMART CONTRACT AUDIT
Although EOS relies on a well-known programming language C++ which is more familiar to developers than Ethereum’s Solidity, it may still contain some crucial security bugs. We can conduct a comprehensive smart contract audit for your EOS-based application to reduce your risks of getting hacked.
HYPERLEDGER SMART CONTRACT
Hyperledger is another platform where we have a high level of proficiency. In case it is the blockchain of your choice, we can conduct a smart contract audit to minimize the risks. Send us your code and all available documentation so that we could eliminate its complexity and highlight potential loopholes.
HOW DO WE CONDUCT SMART CONTRACT (SECURITY) AUDITS?
SECURING THE SMART CONTRACT
While testing smart contracts we mostly focus on the application logic and penetration testing. Since communication layer and basic functionalities are delivered by nodes (blockchain clients), we can fully focus on testing the security of contract itself. Usually vulnerabilities fall into well-known categories although there are some original types of bugs that we haven’t seen ever before.
TESTING DIFFERENT ATTACK VECTORS
Our team consists of people with different competences, every of which is engaged in the audit of your project. We therefore test the software from different angles, conducting penetration tests, checking cryptographic algorithms and simulating the application on test networks with different attack vectors.
CONTINUOUS COMMUNICATION
We are in continuous contact with your team, using communication tools of your choice (Slack, Discord, WebTalk, you name it!) for quicker information flow. We inform you about the bugs and vulnerabilities found on the spot and suggest possible fixes. Once the fix is applied, we check it again for no additional costs!
GAS OPTIMISATION
We also analyse the business logic and gas usage if needed. Since many ICOs / STOs are fully based on smart contracts, we can focus on those factors paricularly to make your investors feel aware and safe regarding the internal mechanisms of your contract.
OUR COMPETENCES
We have experience in auditing Ethereum, EOS and Hyperledger smart contracts
We check contracts for both well-known bugs (race conditions, under / overflows, library dependencies, etc.) as well as not discovered ones
If needed, we also conduct business logic analysis for owners and potential investors
While testing smart contracts we use both manul verification and automated tools
Verification of ERC20, ERC721, ERC777 and ERC223 standards
Our team can optimise contract processes in order to save gas and operation costs of your code
IN AN ETHEREUM SMART CONTRACT PROJECT WE HAVE FOUND A VARIABLE SHADOWING ISSUE WHICH WOULDN’T ALLOW THE VESTING MECHANISM TO RELEASE TOKENS. THESE TOKENS WORTH MORE THAN $1 000 000 WOULD BE FROZEN FOREVER
IN DISPATCH LABS BLOCKHAIN PROJECT WE HAVE DISCOVERED A DDOS OPPORTUNITY WHICH WOULD CAUSE THE WHOLE NETWORK TO BE COMPLETELY BLOCKED AND INOPERABLE WITHIN MINUTES. RESTARTING THE NETWORK COULD TAKE UP TO A FEW DAYS
IN A BLOCKCHAIN PROJECT CONDUCTED FOR OUR ANONYMOUS CLIENT, WE FORTUNATELY MANAGED TO FIND AN EXPLOIT THAT WOULD ALLOW TO ARRANGE A SPLIT NETWORK ATTACK. THE FIX HAS ALLOWED THE CLIENT TO SAVE THE PROJECT WORTH MORE THAN $10 000 000.
THE AUDIT PROCESS
1
PREPARATION
Supply our team with audit-ready code and additional materials (white or yellow-paper).
2
COMMUNICATION
We set up a real-time communication tool of your choice or communicate with e-mails.
3
AUDIT
We conduct the audit, suggesting fixes to all the vulnerabilities we find.
4
FIXES
Your development team applies fixes while consulting with our auditors on their safety.
5
