Audit Disclaimer
An audit is not a guarantee of security
SMC Audits focuses on practical, thorough security reviews for blockchain projects, smart contracts, protocols, and the systems that support them. Our approach combines manual security research, established security tooling, structured review methodologies, and verification techniques to help teams identify vulnerabilities, understand their potential impact, and address security risks before and after deployment.
We look beyond automated findings and checklist-based assessments to understand how a system actually works, including its architecture, trust assumptions, access controls, business logic, external dependencies, privileged functions, upgrade mechanisms, and critical user flows. Our auditors investigate potential vulnerabilities in context, validate findings, distinguish genuine risks from false positives, and assess how identified issues could affect the security and integrity of the project.
Every engagement is documented with a clear scope, methodology, named auditors, findings, severity classifications, technical evidence, and remediation guidance. Our reports are designed to be useful not only to the teams responsible for fixing vulnerabilities, but also to developers, users, investors, and other stakeholders who want to understand the security work that was performed.
Security does not end when an audit report is published. Where remediation is performed, SMC Audits can verify reported fixes and document the outcome, creating a clearer record of what was identified, what was changed, and what was subsequently reviewed. This helps distinguish between simply claiming that a vulnerability has been addressed and providing evidence that the issue was actually reviewed after remediation.