- Smart contract bugs are permanent — once deployed on-chain, flawed code cannot be patched like traditional software, making pre-deployment audits non-negotiable.
- Quantstamp has audited over 200 projects and secured billions in digital assets, making their audit methodology one of the most battle-tested in Web3 security.
- Most audit failures start before the audit begins — poor test coverage, missing documentation, and unfrozen codebases are the top reasons audits take longer and cost more.
- A clean audit report is not a security guarantee — post-deployment monitoring and continuous security practices are just as critical as the audit itself.
- There are specific checklist items auditors look for first — and knowing them in advance can dramatically improve your audit outcome and reduce remediation time.
One undetected bug in a smart contract can drain millions in minutes — and it has, repeatedly.
DeFi protocols lost hundreds of millions of dollars to exploits between 2020 and 2023. Many of those attacks targeted vulnerabilities that a thorough security audit would have flagged before a single dollar was at risk. Quantstamp, one of the most recognized names in blockchain security, has spent years building an audit methodology that directly addresses the gaps where developers tend to get burned.
This checklist breaks down exactly what Quantstamp-style smart contract audits examine, what you need to prepare, and how to give your project the best possible chance of passing with minimal critical findings.
$26 Million Lost in DeFi Hacks That Testing Could Have Prevented
The DeFi boom of 2020 came with a brutal lesson. In a matter of months, several high-profile protocols were exploited for tens of millions of dollars — not because hackers had superhuman abilities, but because the underlying smart contracts had not been tested or audited with enough rigor.
Why bZx, Uniswap, dForce, and Hegic Got Exploited
The bZx protocol was hit twice in February 2020, losing nearly $1 million in back-to-back flash loan attacks that manipulated price oracles and exploited reentrancy-adjacent logic. dForce lost $25 million in April 2020 to an ERC-777 reentrancy attack — a known vulnerability class that had already been publicly documented before the exploit occurred. Hegic lost $48,000 due to a simple typo in a contract address. These were not sophisticated zero-day exploits. They were known, catalogued vulnerability patterns.
What connected all of them was the absence of comprehensive pre-deployment security review. The bZx team had conducted an audit, but the specific attack vectors used were outside the original audit scope. dForce was using a token standard with well-known reentrancy risks. The Hegic bug would have been caught by even a basic test suite. The cost of skipping or rushing security review, in every case, far exceeded what a proper audit would have cost.
What Quantstamp’s 200+ Audits Revealed About Developer Blind Spots
Quantstamp has noted consistently across hundreds of audits that developers underestimate the importance of test suites. Projects often arrive at audit with low code coverage, minimal edge case testing, and no formal documentation of intended contract behavior. This forces auditors to spend more time reverse-engineering developer intent — time that could otherwise be spent finding deep logic flaws. The result is longer audit timelines, higher costs, and findings that could have been caught internally weeks earlier.
What a Smart Contract Security Audit Actually Covers
A smart contract audit is a structured, expert-led review of your contract code to identify security vulnerabilities, logic errors, and deviations from intended behavior. It is not a rubber stamp. It is a detailed technical investigation that combines automated tooling with manual analysis from engineers who understand both blockchain architecture and adversarial attack patterns.
Manual Code Review vs. Automated Analysis
Automated tools like Slither, MythX, and Echidna can scan for known vulnerability patterns at speed — things like integer overflows, unchecked return values, and known reentrancy signatures. They are fast, consistent, and excellent at catching the obvious. But automated tools cannot understand business logic. They cannot tell whether a token distribution mechanism is economically exploitable, or whether an access control pattern breaks under a specific sequence of governance actions.
Manual review fills that gap. Quantstamp engineers read the code the way an attacker would — looking for assumptions the developer made that an adversary could violate. This includes analyzing contract interactions, state transitions, trust boundaries between contracts, and economic incentive structures. The most critical findings in DeFi audits almost always come from manual review, not automated scans.
- Slither — static analysis for Solidity, catches common vulnerability patterns and bad coding practices
- MythX — cloud-based security analysis using symbolic execution and fuzzing
- Echidna — property-based fuzzer that tests contract invariants with randomized inputs
- Manticore — symbolic execution engine for deeper vulnerability discovery
- Hardhat/Foundry test suites — developer-written tests that auditors review for coverage and edge case handling
On-Chain vs. Off-Chain Security Considerations
Many developers think of audits as covering only the Solidity or Vyper code. But production DeFi systems rely on off-chain components too — oracle feeds, keeper bots, admin multisigs, deployment scripts, and front-end interfaces. Quantstamp’s audit scope increasingly includes infrastructure-level review to address risks that live outside the contract bytecode itself.
An attacker who cannot break the contract directly may still manipulate the oracle feeding it price data, or exploit a privileged admin key stored insecurely. Smart contract security does not end at the contract boundary.
How Audit Scope Is Defined Before Work Begins
Scope definition is one of the most important steps in the entire audit process. Before any code is reviewed, the development team and auditors agree on exactly which contracts, versions, and interactions are in scope. This prevents the bZx problem — where an attack succeeds through a vector that was adjacent to, but technically outside, the reviewed scope.
A well-defined scope document includes the specific commit hash of the codebase being audited, all contracts included, external dependencies and integrations, known areas of concern flagged by the development team, and any contracts explicitly excluded from review. For more insights on crypto investment strategies, explore the Singapore MAS regulated crypto investment clubs.
Locking scope to a specific commit hash is critical. Code that changes mid-audit invalidates earlier findings and forces auditors to restart portions of their review — inflating costs and delaying the report.
The Quantstamp Smart Contract Security Audit Checklist
What follows is the core checklist of security areas that a Quantstamp-standard smart contract audit covers. Developers who address these areas before submitting for audit will consistently see faster turnaround, fewer critical findings, and cleaner final reports.
1. Test Suite Coverage and Quality
Test coverage is the first thing auditors evaluate. A project arriving with less than 80% line coverage signals immediately that large portions of contract behavior have never been formally verified. Quantstamp’s experience across 200+ projects makes clear that low test coverage correlates directly with higher numbers of audit findings. Coverage percentage matters, but so does the quality of the tests themselves — tests that only verify the happy path, without checking failure modes, reversions, and edge cases, provide a false sense of security.
2. Reentrancy Vulnerability Checks
Reentrancy remains one of the most dangerous and commonly found vulnerability classes in Solidity contracts. It occurs when an external call is made to another contract before the calling contract has finished updating its own state — allowing the external contract to call back in and manipulate state that was expected to be settled.
The DAO hack of 2016, which triggered Ethereum’s hard fork, was a reentrancy attack. The dForce exploit in 2020 was a reentrancy attack. Despite being a known and documented risk for nearly a decade, reentrancy vulnerabilities still appear in production code regularly.
Reentrancy Protection Checklist:
✓ Apply the Checks-Effects-Interactions pattern — update all state variables before making any external calls.
✓ Use OpenZeppelin’sReentrancyGuardmodifier on all functions that transfer ETH or interact with external contracts.
✓ Audit ERC-777 and ERC-1155 token integrations specifically — their callback hooks create non-obvious reentrancy surfaces.
✓ Review allcall(),delegatecall(), andtransfer()usages for unchecked return values.
✓ Test reentrancy scenarios explicitly in your test suite with mock malicious contracts.
3. Access Control and Permission Logic
Broken access control is consistently in the top three vulnerability categories across all smart contract audits. Privileged functions — those that can mint tokens, pause the protocol, upgrade contracts, or drain funds — must be protected by airtight permission logic. Common failures include functions that should be onlyOwner but are left public, multisig requirements that can be bypassed through a governance shortcut, and role-based access control implementations that assign the DEFAULT_ADMIN_ROLE incorrectly during deployment.
4. Integer Overflow and Underflow Protection
Before Solidity 0.8.0, integer overflow and underflow were silent killers. A uint256 variable at zero, decremented by one, would wrap around to the maximum possible value — 2256 minus one. No error thrown. No revert. Just corrupted state that an attacker could exploit to mint unlimited tokens or bypass balance checks. The BeautyChain (BEC) token exploit in 2018 used exactly this mechanism to generate an astronomically large token value from nothing, crashing the token’s market to near zero.
Contracts compiled with Solidity 0.8.0 and above have overflow and underflow protection built in by default — arithmetic operations revert automatically on overflow. However, contracts using the unchecked block to optimize gas, or older contracts still running on pre-0.8 compiler versions, remain exposed. Auditors check every unchecked block individually to confirm that the developer’s assumptions about value ranges are actually valid under all possible inputs.
5. Oracle Manipulation and Flash Loan Attack Vectors
Oracle manipulation is the defining attack vector of modern DeFi exploits. Smart contracts that rely on on-chain price feeds — particularly those derived from spot prices in AMM liquidity pools — can be manipulated within a single transaction using flash loans. An attacker borrows a massive amount of assets with no collateral, moves the price in a pool, exploits a contract that trusts that price, and repays the loan — all in one atomic transaction. For more insights into smart contract security, you can explore the importance of quality testing in DeFi projects.
The bZx attacks of 2020 demonstrated this pattern clearly. The attacker used a flash loan from dYdX to borrow ETH, manipulated the WBTC/ETH price on Uniswap v1, exploited bZx’s reliance on that manipulated price to take out an undercollateralized loan, and walked away with nearly $600,000 in profit. The entire sequence happened in a single transaction block.
- Avoid spot price oracles — never use AMM pool reserves directly as a price source for collateral valuation or liquidation logic
- Use time-weighted average prices (TWAPs) — Uniswap v3 TWAPs require sustained manipulation across multiple blocks, making attacks significantly more expensive
- Integrate Chainlink price feeds — decentralized oracle networks aggregate from multiple sources and are far more resistant to single-block manipulation
- Add circuit breakers — implement maximum price deviation checks that pause protocol functions if a price moves beyond a defined threshold in a single block
- Test oracle failure scenarios — write explicit tests for stale price data, oracle downtime, and extreme price movements
Flash loan attack surfaces extend beyond oracle manipulation. Any function that assumes a user’s token balance, voting power, or collateral position cannot change within a single transaction is potentially vulnerable. Governance systems that use snapshot-based voting without flash loan protections have been exploited to pass malicious proposals with borrowed voting power.
6. Gas Optimization and Denial-of-Service Risks
Gas-related denial-of-service vulnerabilities are easy to overlook because they do not look like security bugs — they look like efficiency issues. But a function that iterates over an unbounded array, or one that can be forced to consume more gas than a block allows, can permanently brick core protocol functionality. If a withdrawal function loops through all creditors to distribute funds and the creditor list grows large enough, the function will eventually fail to execute within block gas limits — locking funds permanently. For more insights on smart contract security, check out Quantstamp’s guide.
Auditors specifically check for unbounded loops over dynamic arrays, external calls inside loops where a single failing call blocks the entire loop, and push-based payment patterns that can be exploited by a malicious contract refusing to accept ETH. The fix is almost always architectural — replacing push-based payments with pull-based patterns where each recipient claims their own funds independently, eliminating the loop entirely.
7. Upgrade Proxy Pattern Safety
Upgradeable contracts via proxy patterns — particularly OpenZeppelin’s Transparent Proxy and UUPS patterns — introduce a category of vulnerabilities that non-upgradeable contracts simply do not have. Storage collision between the proxy and implementation contract can corrupt critical state variables. Uninitialized implementation contracts can be taken over by an attacker calling initialize() directly on the logic contract. The delegatecall mechanism that makes proxies work also means that a malicious or buggy implementation upgrade can irreversibly destroy the proxy’s storage. Every upgradeable contract should be reviewed specifically for storage layout consistency across upgrades, proper initialization guards, and access control on the upgrade function itself.
The Biggest Mistake DeFi Developers Make Before an Audit
Submitting code for audit before it is actually ready is the single most expensive mistake a DeFi development team can make. It is not a minor inefficiency — it directly inflates audit cost, extends timelines, and results in reports cluttered with findings that should never have reached an external reviewer in the first place. Quantstamp’s auditors have seen it consistently: projects arrive with placeholder logic, commented-out sections, TODOs embedded in critical functions, and test suites that cover only the deployment script.
The audit clock starts when the engagement begins. If auditors are spending hours understanding incomplete code or re-reviewing sections that changed mid-audit, that time is not being spent finding the subtle, high-severity logic flaws that actually matter. Audit readiness is not optional preparation — it is a direct multiplier on the value you get from the engagement.
Why Low Test Coverage Gets Flagged Immediately
When an auditor opens a codebase and runs coverage analysis, sub-80% line coverage is an immediate red flag — not because coverage is the only metric that matters, but because it signals that the development team has not fully thought through their contract’s behavior. Tests are executable documentation. They communicate to the auditor what the developer intended each function to do, what inputs are valid, and what outputs are expected. Without them, the auditor must infer intent from code alone, which introduces ambiguity into every finding.
More practically, low coverage means bugs are hiding in untested code paths. Auditors will find them — but they should not have to. Every bug caught internally before an audit is a critical finding that does not appear in your public report, does not require a remediation round, and does not delay your launch timeline. For more insights on decentralized finance, explore the concept of DeFi-native DAO investment clubs.
How to Write Tests That Actually Catch Bugs
The difference between a test suite that creates confidence and one that just inflates coverage numbers is specificity. Tests that only verify that a function does not revert on valid input are not security tests — they are sanity checks. Effective security-oriented tests explicitly probe boundary conditions, invalid inputs, unexpected call sequences, and adversarial scenarios.
For every privileged function, write a test that confirms it reverts when called by an unauthorized address. For every arithmetic operation, test the boundary values — zero, one, maximum valid input, and one above maximum. For every state transition, test that the state cannot be reached through an unexpected path. Foundry’s fuzzing capabilities make this significantly easier — property-based fuzz tests can generate thousands of randomized inputs automatically, finding edge cases that handwritten tests miss.
How to Prepare Your Codebase for a Quantstamp Audit
Audit preparation is not about making your code look good — it is about making it possible for expert engineers to understand, verify, and attack your system as efficiently as possible. The more context and structure you provide upfront, the deeper the analysis you get back.
Documentation Auditors Expect to See
At minimum, auditors need a written specification of intended contract behavior. This means a README or technical document that describes what each contract does, how they interact with each other, what the trust model is — meaning which addresses are trusted to call which functions — and what economic invariants should always hold. Invariants are particularly valuable: statements like “the total supply of tokens should never exceed X” or “the sum of all user balances should always equal the contract’s token holdings” give auditors a concrete target to verify and attack.
NatSpec comments embedded in the contract code itself also matter. Functions with clear @param, @return, and @notice documentation allow auditors to immediately identify discrepancies between stated intent and actual implementation — one of the most reliable ways to surface logic bugs quickly.
Code Freeze Timing and Version Control Best Practices
The codebase must be frozen at a specific Git commit before the audit begins. This is non-negotiable. Changes made during an active audit invalidate completed review work and force partial restarts, directly wasting audit budget.
- Tag the exact commit hash being audited and communicate it to the Quantstamp team before kickoff
- Complete all planned refactors and feature additions before the freeze — not during the audit
- If a critical bug is discovered internally during the audit window, communicate it immediately rather than silently patching it
- Maintain a separate branch for post-audit remediation work so changes are tracked and reviewable
- Document all external dependencies with their own version locks — imported library versions matter as much as your own code
The only exception to mid-audit code changes is a critical security fix discovered by the auditors themselves. In that case, Quantstamp’s process involves flagging the issue formally, pausing review of affected areas, and resuming once the fix is implemented and confirmed — not silently continuing against a moving target. For those interested in the broader implications of security in decentralized finance, exploring DeFi native DAO investment clubs can provide valuable insights.
Version control discipline also extends to your deployment scripts and configuration files. Auditors who can see exactly how contracts will be deployed, initialized, and configured can identify setup vulnerabilities that would not be visible from the contract code alone.
Internal Pre-Audit Review Steps
Before submitting to Quantstamp, run your codebase through at least one automated analysis tool independently. Slither is free, fast, and catches a significant number of low-to-medium severity issues that should be resolved before an auditor ever sees them. Submitting a codebase with 40 open Slither warnings signals that internal review was skipped — and those 40 findings will appear in your audit report, consuming space that could otherwise document deeper, more interesting vulnerabilities.
Beyond automated tooling, conduct a structured internal review using this checklist as a guide. Have a team member who did not write a specific contract review it with fresh eyes. Check every external contract interaction for trust assumptions. Verify that every privileged function has the correct access modifier. Confirm that your deployment sequence initializes contracts in the correct order with no window for front-running during setup. The goal is to arrive at your Quantstamp audit with zero obvious findings — so the audit budget goes entirely toward finding the non-obvious ones.
What Happens After the Audit Report Is Delivered
Receiving the audit report is not the finish line — it is the starting point for the most critical phase of the security process. The report documents every finding the auditors identified, ranked by severity, with detailed descriptions of the vulnerability, its potential impact, and recommended remediation steps. What you do with that report in the days and weeks that follow determines whether your protocol actually launches securely, especially in the context of DeFi native DAO investment clubs.
How Findings Are Classified by Severity
Quantstamp classifies audit findings across five severity levels, each carrying different remediation urgency. Understanding what each level means helps development teams prioritize their response correctly rather than treating all findings as equally urgent — or equally dismissible. For more insights on securing your project, visit the Quantstamp blog.
| Severity Level | Description | Example | Required Action |
|---|---|---|---|
| Critical | Direct loss of funds or complete protocol takeover is possible | Reentrancy in withdrawal function | Must fix before deployment |
| High | Significant financial loss or severe functionality breakage under realistic conditions | Unrestricted access to privileged mint function | Must fix before deployment |
| Medium | Partial loss of funds or functionality under specific conditions | Oracle using spot price without TWAP | Strongly recommended to fix |
| Low | Minor risk with low probability or limited impact | Missing event emission on state change | Recommended to fix |
| Informational | Code quality, best practice deviations, or gas inefficiencies | Unused variable, suboptimal loop structure | Consider fixing in next version |
Every finding in the report includes not just the severity classification but the specific file, line number, and a technical explanation of why the auditor flagged it. Findings marked as acknowledged but not fixed — meaning the development team accepted the risk rather than remediating — will appear in the final published report exactly as-is. That transparency is intentional. Users and investors reading the report can see every finding and every response.
Remediating Critical and High-Severity Issues
Critical and high-severity findings require complete remediation before deployment — no exceptions. The remediation process involves implementing the fix, writing new tests that specifically verify the vulnerability no longer exists, and submitting the updated code back to Quantstamp for a verification review. This verification pass confirms that the fix was implemented correctly and did not introduce new vulnerabilities in adjacent code. It is not a full re-audit, but it is a targeted re-review of the changed areas. Skipping the verification step and self-certifying a fix is a pattern that has preceded real-world exploits — the fix looked correct to the team that wrote the original bug, because they made the same underlying assumption the second time.
Post-Audit Monitoring and Continuous Security
A point-in-time audit covers the code at one specific moment. The moment your protocol goes live, the threat landscape shifts — new attack vectors are discovered, your protocol integrates with new external systems, and the total value locked in your contracts grows, making it a more attractive target. Quantstamp’s managed security services address this through continuous monitoring solutions that watch on-chain activity for anomalous patterns and alert teams in real time when something looks wrong. For high-value protocols, post-deployment security infrastructure is not optional — it is the difference between catching an exploit in its first transaction and reading about it in a post-mortem the next morning.
A Clean Audit Report Does Not Mean Zero Risk
This is the most important caveat in all of smart contract security: no audit guarantees that a contract is bug-free. An audit is a time-boxed review by a finite number of engineers working against a specific codebase version. It dramatically reduces risk — but it cannot eliminate it. Quantstamp’s own published reports have included findings that were missed in initial review and surfaced later. The Ethereum ecosystem has seen protocols with multiple audits from reputable firms still fall to creative attacks that no auditor anticipated. A published audit report builds justified confidence — but it should never be used as a reason to skip monitoring, reduce bug bounty incentives, or dismiss community-reported concerns after launch. Security is a continuous process, not a certificate.
Frequently Asked Questions
These are the questions development teams most commonly ask when approaching a Quantstamp smart contract audit for the first time.
How Long Does a Quantstamp Smart Contract Audit Take?
Audit duration depends directly on codebase size, complexity, and preparation quality. A focused protocol with fewer than 500 lines of Solidity and a clean, well-documented codebase can be completed in as little as one to two weeks. A complex DeFi system with multiple interacting contracts, custom token mechanics, governance modules, and upgrade proxies spanning several thousand lines of code may require four to six weeks or more.
The single most controllable variable in audit timeline is codebase readiness. Projects that arrive with comprehensive test coverage, complete documentation, a frozen codebase at a specific commit, and pre-run automated analysis consistently complete faster than projects that require auditors to spend time reconstructing intent or waiting for code changes to settle. If your launch timeline is fixed, audit preparation time is the lever you can actually pull.
What Programming Languages and Blockchains Does Quantstamp Audit?
Quantstamp’s primary focus is Solidity-based contracts on EVM-compatible networks, which covers Ethereum mainnet, Polygon, Arbitrum, Optimism, BNB Chain, Avalanche, and other EVM chains. This encompasses the vast majority of DeFi protocol deployments by total value locked.
Beyond EVM chains, Quantstamp has conducted audits on non-EVM ecosystems including Solana (Rust-based programs), and has experience with Vyper contracts on Ethereum. Their infrastructure audit capability extends to off-chain components including node configurations, key management systems, and cross-chain bridge infrastructure — a category of audit that has become increasingly critical as bridge exploits have accounted for some of the largest losses in crypto history, including the $625 million Ronin bridge hack in 2022.
How Much Does a Smart Contract Security Audit Cost?
Quantstamp does not publish fixed pricing publicly, as audit cost is scoped individually based on codebase complexity, lines of code, number of contracts, audit depth required, and timeline. Industry-standard smart contract audit pricing from top-tier firms generally ranges from $15,000 for small, straightforward contracts to $100,000 or more for large, complex DeFi systems requiring extended engagement. The relevant benchmark is not the audit cost in isolation — it is the audit cost relative to the total value your protocol will hold. A $50,000 audit protecting $50 million in user funds represents a 0.1% security budget, which is far below what most institutional finance operations would consider acceptable for equivalent risk exposure.
Can a Smart Contract Be Audited After It Has Already Been Deployed?
Yes — and for protocols that launched without a prior audit, a post-deployment audit is still significantly better than no audit. Post-deployment audits follow the same review methodology as pre-deployment audits, identifying vulnerabilities in the live contract code. The critical difference is that findings cannot be patched in the same way. If a deployed contract is not upgradeable, critical findings may require migrating to a new contract, which involves user communication, liquidity migration, and significant operational complexity. If the contract uses an upgradeable proxy pattern, fixes can be deployed — but the upgrade process itself carries risk and requires careful execution. Pre-deployment audits remain strongly preferable precisely because all remediation options are open.
What Is the Difference Between an Audit and a Bug Bounty Program?
A smart contract audit is a proactive, structured, time-boxed security review conducted by a defined team of engineers before or after deployment. You pay a fixed engagement fee for a comprehensive review delivered as a formal report. The scope, methodology, and timeline are all agreed upon in advance.
A bug bounty program is a continuous, incentive-based crowdsourced security mechanism where independent researchers compete to find vulnerabilities in exchange for rewards paid only when valid bugs are submitted. Platforms like Immunefi host DeFi bug bounty programs with rewards ranging from a few thousand dollars for low-severity findings to $1 million or more for critical vulnerabilities in high-value protocols.
The two mechanisms are complementary, not competitive. An audit provides systematic coverage before launch — ensuring known vulnerability classes have been checked methodically. A bug bounty extends security coverage post-launch with the combined attention of the global security research community. Running both together is the approach taken by the most security-conscious DeFi protocols. The audit gives you confidence at launch; the bug bounty gives you continuous coverage as the threat landscape evolves around your live, value-bearing contracts.
