Solidity audits, end to end.
Senior manual review of your Solidity codebase across Ethereum and every major EVM chain. Foundry invariants, Slither, Aderyn, Krait — applied alongside two pairs of human eyes.
Solidity is mature. The bugs aren't.
Every year, the patterns that cause losses shift — from reentrancy to oracle manipulation, to signature handling, to upgrade misconfigurations, to cross-chain messaging trust failures. The language is stable; the threat model isn't. A serious Solidity audit covers what's breaking now, not just what broke in 2018.
What’s in the audit.
Common Solidity vulnerability classes
Slither, Foundry, Aderyn, Krait
Ethereum, L2s, and alt-EVMs
Recent Solidity engagements.
Lido Community Staking Module
Permissionless staking module review with deep focus on validator key flows, accounting, and bond escrow mechanics.
Dripster Leveraged Prediction Vault
14-state leveraged vault with EIP-712 signature-gated state transitions and Polymarket integration.
BadgerDAO Staked eBTC
Bitcoin-pegged staking vault audit, focused on accounting invariants and the deposit/withdraw flow.
Scoped to your codebase.
Solidity audits are sized to lines of code, complexity, integration surface, and timeline. No fixed packages. Talk to us for a scope and quote.
Questions.
Yes. UUPS, transparent proxies, beacon proxies, and diamond patterns. Storage layout, initialization, and upgrade authorization are first-class scope items.
Yes. We audit the contract once and verify deployment parity across chains — including chain-specific quirks like opcode differences, gas pricing models, and L1/L2 sequencer trust assumptions.
We review the integration: trust assumptions on the messenger, replay protection, message authentication, and what happens when the messenger pauses or behaves adversarially.
Yes. We write protocol-specific Foundry invariants targeting the properties that matter for your design (accounting balance, supply caps, role separation, etc.). Tests are delivered alongside the report.
Two to five weeks of focused review by two senior auditors, plus a fix-verification pass. Exact duration depends on code size, complexity, and your test coverage going in.
By default, yes. Every Solidity audit gets published on zealynx.io with findings, severity rationale, and recommendations. NDA arrangements available on request.
Go deeper.
Need something else?
Ready to audit?
Send us your repo and a target date. We’ll come back with a scope and a quote within 24 hours.