Auditing9 min read
How Much Does a Smart Contract Audit Cost?
Real market rates for independent auditors, boutique firms, and top-tier firms — and the variables that actually move the number.
Smart contract security, written down
Long-form notes on auditing DeFi and GameFi protocols: what breaks, why it breaks, and how to catch it before your users do.
Best Practices11 min read
The Pre-Launch Smart Contract Security Checklist
The checklist I run against a codebase before an audit begins — access control, accounting, oracles, upgrades, and the questions to answer before you hand anything over.
Auditing8 min read
How to Read a Smart Contract Audit Report
Scope sections, severity ratings, and why 'acknowledged' means the bug is still there. How to judge an audit report instead of skimming the summary table.
Security10 min read
How On-Chain Randomness Actually Gets Broken
Why block variables are not random, the revert-on-loss attack that beats good entropy, and where the bugs hide in a Chainlink VRF integration.
Security10 min read
Key Steps for Gambling dApp Security
Essential security measures and best practices for building and auditing gambling decentralized applications.
Best Practices8 min read
What It Means to Work with a Good Auditor
The qualities, practices, and red flags to look for when choosing a smart contract security auditor.
Auditing6 min read
Why External Audits Matter in Web3
Why external security audits are critical for protocol success and investor confidence.
Reading is cheaper than an incident report
If any of this sounds like your codebase, get a fixed quote for an independent review before launch.
No obligation, and a full refund if the review finds nothing above informational severity. If your scope is outside what I cover, I will say so on the call.