No mystery box: the checklist, the timeline, the report and the fix-verification loop.
Every audit starts from the money: who can move value, under what checks, and what happens when those checks are raced, replayed or fed hostile input. On that path we hunt:
Scope is frozen first: commit hash, chains, in-scope contracts, admin roles. Then a manual line-by-line review of every value-moving function, plus static and symbolic tooling for the rest. Every critical candidate gets a working proof-of-concept — a reproduction, not a screenshot. Findings are ranked by impact and walked through with your team.
A single contract or token takes 1–2 weeks. A full protocol — core, periphery, scripts and deploy config — takes 3–5 weeks. Timeline and price scale with code size, mechanism novelty and integrations. You get a fixed quote before work starts; scope changes are re-quoted, never billed silently.
After your team ships fixes, we re-scan the changed code free of charge and confirm each remediation in an updated report — so the final PDF reflects the code you actually deploy. Every audit includes 30 days of support.
A partial review of a frozen branch helps, but a final report needs a commit hash that will not move.
Only if you choose to. Many teams publish it for listing and investor trust — timing is yours.
We walk through the PoC with your engineers. If the issue is by-design or unreachable, we record the reasoning and adjust severity — in writing.