(929) 590-5818 [email protected]
en
en

Smart Contract Audit of a Web3 Company

Client:
Web3 Developer
 
Industry:
Blockchain
Focus:
Security audit of smart contracts before token launch
Main challenge:
Ensure a secure product release and successful certification while minimizing the risk of losses.
Market:
International segment
Services provided:
Smart contract audit (White-box source code analysis)
Key Takeaways
  • The product was prepared for a secure market launch.
  • The risk was reduced from high to minimal.
  • Compliance with blockchain security standards was ensured.
  • 2 contracts were audited and 40 vulnerabilities were found.
  • A report with recommendations for improving the project’s security was provided.
    • 2
    Contracts audited
    40
    Vulnerabilities found
    1
    Month - audit duration
    Smart Contract Audit of a Web3 Company
    Upd: 26.05.2026 14 min
    Even a single vulnerability in a smart contract can cost the company everything. In blockchain, once released, the code cannot be changed to eliminate risks. Therefore, a security audit before launch is critically necessary. This case is about a comprehensive audit of two smart contracts, during which 40 vulnerabilities were discovered, 2 of them critical.

    The client is an international Web3 development company that created its own smart contract with AI and the ERC-20 standard and was preparing for its launch.

    Since the platform works with confidential payment data and interacts with exchanges, the lack of proper cybersecurity could have led to asset losses, blocked access to the product, and even a complete business shutdown.

    Tasks and challenges
    The client turned to Datami for a full security audit of their product before the token launch. It was necessary to audit the NDAFactory and NDAReciver smart contracts using the White-Box source code analysis method.

    Main goal: identify all vulnerabilities before release and obtain a report for certification and secure entry to exchanges.
     
    • Collect information about the project specification and functionality.
    • Perform manual code analysis to detect logical errors.
    • Conduct automated testing and develop custom tests.
    icon
    Automated verification
    Review of smart contract logic and behavior by multiple auditors
    icon
    Manual testing
    White-box code analysis using specialized tools
    icon
    Report and recommendations
    Final report with identified issues and ways to resolve them
    Datami methodology

    Our approach

    For this project, Datami applied a White-box approach with full access to the source code and comprehensive security testing. The smart contract audit combined static code analysis and dynamic testing of contract behavior.

    The team used automated tools (Slither, solcgraph, Mythril) and manual review by multiple auditors. For deeper analysis, custom fuzz tests were created with Echidna, which revealed logical errors and atypical scenarios.

    White-box

    White-box

    Audit strategy with full access to the source code for in-depth smart contract security testing.
    Key stages of work and solutions

    The uniqueness of the process lay in the step-by-step application of classical tools together with Datami’s own solutions. First, a manual code audit was carried out, then automated scanners were applied. Next, fuzzing was launched and custom tests were created to check atypical scenarios.

    Finally, all results were analyzed and documented - the client received a detailed report.

    • Preparation
      Collecting information about the project specification and its functionality.
    • Code audit
      Manual review by multiple auditors and automated scanning.
    • Final report
      Preparing a report on the identified issues and recommendations for their resolution.
    Cybersecurity starts with action
    How we can help you?

    Every cybersecurity case study we solve involves deep analysis, tailored solutions, and measurable results.
    Datami has already helped over 600 companies strengthen their digital defenses — and we can do the same for your business.
    Ready to take action?

    Let’s start with a free consultation!
    Results and recommendations

    Results and recommendations

    The audit of two smart contracts was completed on schedule. Thanks to this project, the risk level was reduced from high to minimal – the client’s product was prepared for certification and entry into exchanges.

    During testing, the Datami team discovered 2 critical vulnerabilities, 5 medium, 8 low, and 25 informational. Among the main threats were:

    • vulnerability to reentrancy attack (high),

    • AI query injection through proposal metadata (medium),

    • detailed error messages (low),

    • use of outdated library versions (informational).

    The client was provided with two interim reports and, upon completion, a final document with the audit results and recommendations for strengthening security.

    CONFIRMED EXPERTISE OF DATAMI

    Our certificates

    Datami is a cybersecurity firm whose qualifications are confirmed by 26 certifications and international standards. This allows us to perform tasks of varying complexity while complying with security, confidentiality, and ethical practice requirements.
    Key project results

    In the world of blockchain, code cannot be fixed after launch, so any vulnerability can become fatal: leading to significant financial or reputational losses, or even a complete product shutdown. That’s why verifying the security of Web3 solutions before release is critically important.

    And this case confirms it: thanks to a comprehensive audit of smart contracts, the client eliminated 40 threats in advance – confirmed the security of the code, and prepared the product for certification and a safe entry into exchanges.

    Category
    Before the project
    After implementation
    Security level
    Low
    High
    Threat level
    High
    Minimal, risks eliminated before release
    Vulnerabilities
    Unknown
    40 identified, including 2 critical, fixed pre-launch
    Compliance with modern security standards
    Low
    Full, the system meets requirements
    More success stories with Datami
    Browse other project case studies
    Cloudflare Zero Trust & SIEM for SaaS
    Cloudflare Zero Trust & SIEM for SaaS
    • MTTD reduced to 1–2 hours
    • False positives reduced by 50–65%
    Services:
    Cloudflare Zero Trust and Wazuh SIEM implementation
    Aug 4, 2026
    WordPress Website Recovery After a Hack
    WordPress Website Recovery After a Hack
    • Backdoor infections and web shells were completely removed.
    • 9 unauthorized admin accounts were removed.
    Services:
    WordPress Security Audit (White-box)
    Aug 4, 2026
    SIEM Wazuh Implementation for a Financial Company
    SIEM Wazuh Implementation for a Financial Company
    • PCI DSS & ISO 27001 audit-ready
    • Reduced false positives by 60–70%
    Services:
    SIEM Implementation (Wazuh)
    Jul 1, 2026
    Back to home page
    Security image
    Ready to assess your project's security?
    Contact Datami — we’ll help you identify risks, strengthen your cybersecurity, and confidently pass certification.
    Datami articles
    Why AI Tokens Introduce a New Class of Smart Contract Risks Oleksandr Filipov
    Oleksandr Filipov
    Why AI Tokens Introduce a New Class of Smart Contract Risks

    A smart contract can pass a Solidity audit without a remark and still be exploitable - if part of the decision-making sits with a model. What a real audit with 40 findings reveals, and what to check before listing.

    4 min Aug 4, 2026
    When AI Meets Smart Contracts: How Prompt Injection Creates a New Web3 Attack Surface Oleksandr Filipov
    Oleksandr Filipov
    When AI Meets Smart Contracts: How Prompt Injection Creates a New Web3 Attack Surface

    A smart contract can pass the most rigorous audit and the product around it can still be exposed. All it takes is an AI reading on-chain text as a command. A new class of Web3 risk, from a real Datami finding.

    3 min Aug 3, 2026
    Cybersecurity Risk Self-Assessment: 6 Gaps Fintech Companies Notice Last Oleksandr Filipov
    Oleksandr Filipov
    Cybersecurity Risk Self-Assessment: 6 Gaps Fintech Companies Notice Last

    Most companies learn about their weak spots not from their own team, but from a due diligence partner or an attacker. We explain which gaps in fintech remain unnoticed the longest and why.

    4 min Jul 27, 2026
    Show all articles
    Order a consultation
    By submitting this form, I confirm that I have read and agree to the Privacy policy
    We value your privacy
    We use cookies to enhance your browsing experience, serve personalized ads or content, and analyze our traffic. By clicking "Accept All", you consent to our use of cookies. Cookie policy