Our Process
Smart Contract Auditing Process
Specification Gathering
This is the most crucial stage because the detail is key for a successful smart contract Security audit. Here we will gather the specifications from you to know the intended behavior of smart contract.
Manual Review
- Verify that every detail in the specification is implemented in smart contract.
- Verify that the contract does not have any behavior that is not specified in specifications.
- Verify that contract does not violate original intended behavior of specifications.
Manual Testing
- Smart contract will be manually deployed on any of the test network (Ropsten/Rinkeby) using remix IDE.
- All the transaction hashes will be recorded.
- Gas consumptions and behavior of functions also noted.
Functional Testing
- The smart contract will be manually deployed in a sandbox environment like testnet/mainnet forks, hardhat, ganache, etc
- Smart contract functions will be tested on multiple parameters and under multiple conditions to ensure that all paths of functions are functioning as intended.
- In this phase, the intended behavior of the smart contract is verified.
Testing with Automated Tools
Testing with automated tools is important to catch those bugs that humans miss.
Initial Audit Report
At the end, we would provide you a comprehensive report along with details of audit and steps to cover up with the vulnerabilities if we found any in your contracts.