Research

To accomplish the successful audit of smart contracts, our team needs to understand the business logic and requirements that should to be met. Also, research of smart contract helps to reach a better understating of a project. In order to start working with smart contract code, our team goes through all goals that need to be reached by implementing exact Ethereum smart contract. Research helps to improve the overall level of smart contract audit. At this point, project owner or responsible persons will contact our team to answer all requested questions. The best way to start smart contract audit is to provide us specification document (Describe the features & behavior of the project.) if any exist. It is possible that our team will create specification document, but that has to be specified with our team separately.

Analysis

Manual analysis of smart contracts. The analysis includes manual testing of the system. The system will be tested for work, bugs, stability issues. To start with, we will need to make sure that your smart contracts are working and can be launched and deployed successfully on the live network.

Recourse planing

One of the key steps during analysis stage is resource planning. The project code will be carried out a thorough check of methods and variables for the amount of each resource it's using.

Validation of the code

Validation will check code for meeting standards and recommendations. By meeting those recommendations code will be clearly readable and easily understandable.

Code Analysis and Debugging

Analysis and debugging will help to understand the level of quality, stability and security. Level of the development team can be seen by analyzing their written code as well as their experience. Using this method, we will be able to tell the project owner if the choice he has made was correct.

Contract deployment

Deployment of the Ethereum smart contract at the test network will help to diagnose misconceptions and other issues that cannot be seen by simply inspecting the code, also load that is being created by smart contract initializing is clearly visible at that stage.

Advice

Recommendations, based on bugs, misconceptions or other issues, that will help the smart contract owner to understand what needs to be made, covered and fixed. By using these recommendations the project owner will be able to understand the risks, problems and others issues that has to be repaired or developed for successful project launch.

Testing

“Unit” tests will check every individual unit of source code for meeting system requirements, it can be data handling procedure or storing or any other procedure that is being used in source code.

We're using the Truffle development framework, which helps with smart contract creation, compiling, migration and testing.

As well as simple testing we are testing for most important “Use-case” scenarios. Those scenarios start from buying or reserving tokens at Pre ICO period and finish with the withdrawal of tokens. These scenarios are very important because if something doesn’t work after project deployment it cannot be repaired. That means that if any issues or troubles will be found that will not be repaired.

Vulnerability

Smart Contract security auditing cannot cover all existing vulnerabilities and even in projects at which no vulnerabilities were found is not a guarantee for a secure smart contract in the future. In most cases, the smart contracts will be protected from a certain type of attack. We will perform extensive smart contracts auditing to discover as many vulnerabilities as possible. Most known and dangerous vulnerabilities are shown down below:

• Reentrancy
• Timestamp Dependence
• Gas Limits and Loops
• DoS with Block Gas Limit
• Transaction-Ordering Dependence
• Exception disorder
• Gasless send
• And more...

PROCESS OVERVIEW

Report document will be created for providing oversight to the project in that way, so the report will include identified, documented issues and other problems that occur during an audit process. Using this section as a checklist, the project owner can find developers team to prepare the smart contract for the successful launch, or it’s possible to get an offer from www.smartaudit24.com team to perform that job.

At the report, the section will be shown overall quality, completion and other scores that our team rated for the smart contract. Smart contract audit document will contain all founded problems, breakpoints and other issues that can hurt quality and reliability of the project, clients trust and system stability in the future.