Web3 Project Random Walk: Smart Contract Audit

Client:

Random Walk - Web3 developer creating original design projects

Industry:

Blockchain, Betting, NFT

Focus:

Smart contract security verification before launch on Polygon mainnet

Main challenge:

Full audit of 4 smart contracts - independent code review within 5 days

Market:

International

Services provided:

Smart contract audit (White-Box source code analysis)

Key Takeaways

Secure launch on Polygon mainnet ensured within 5 days

Risk level reduced from medium to minimal

Project protected from 99% of known vulnerabilities

4 smart contracts audited and 9 threats identified

Retesting conducted after vulnerabilities were fixed

Smart contracts audited

Vulnerabilities identified

Days — audit duration

Web3 Project Random Walk: Smart Contract Audit

Sep 2, 2025

14 min

With only 5 days left before the project release, there was still no full confidence in the code’s security. Therefore, Random Walk, the smart contract developer, requested a comprehensive audit of the contracts from independent experts. Datami quickly reviewed the code, processes, and transactions and, as this case study shows, identified 9 vulnerabilities.

Random Walk is an independent Web3 developer who creates smart contracts for generating unique NFT images with an engaging art style for players placing bets in cryptocurrency.

Although the business operates in an unregulated sector, its specifics require heightened attention to security: once launched on the blockchain, vulnerabilities can no longer be fixed, and even minor weaknesses in the code can lead to financial and reputational losses.

Objectives and challenges

The client approached Datami to conduct an independent audit of smart contracts: within the shortest possible time - 5 days - it was necessary to identify all vulnerabilities and perform a full review of the code, processes, and transactions before the project’s scheduled launch date.

The client also expected to receive a report with results and recommendations, required for deployment on the Polygon mainnet.

Verify the security of 4 smart contracts within tight deadlines
Identify and document all potential vulnerabilities
Propose solutions to eliminate threats and perform retesting

Manual udit

Review of documentation, code, and contract logic to identify errors and vulnerabilities.

Automated analysis

White-Box testing using specialized tools and transaction simulations.

Reporting and control

Final report on identified issues and recommendations for their resolution. Retesting after fixes.

Datami methodology

Oup approach

For the Random Walk smart contract audit, the Datami team applied a White-box approach. We combined dynamic on-chain testing with static code analysis in a simulated environment, which allowed us to detect both common and hidden vulnerabilities in advance.

During the project, we used tools such as MythX, Manticore, Oyente, Slither, SolHint, Cloc, Remix, Ropsten testnet, as well as manual line-by-line code review to achieve maximum accuracy.

White-box

Audit strategy with full access to source code for in-depth smart contract security analysis

Key project stages

The work on the Random Walk project consisted of several key stages. We prepared a testing environment, performed a full code review using different methods, and after fixes conducted a retest to ensure that vulnerabilities were eliminated and security was confirmed before launch on the Polygon mainnet.

Thanks to well-organized processes, the audit was carried out as quickly as possible while maintaining quality standards.

Preparation for audit

Analysis of documentation and specifications, creation of test versions of smart contracts in the Remix environment, and deployment on Ropsten.
Smart contract audit

Combination of dynamic analysis in testnet, static automated code scanning, and manual line-by-line review of source code.
Final report and retest

Preparation of a report with results and recommendations for eliminating vulnerabilities. Retesting after issues were fixed.

Smart contract audit results

Within 5 days, the Datami team audited and prepared for release an NFT generator smart contract, a marketplace smart contract for token trading, a betting contract, and an ERC20 token smart contract.

As a result, 1 medium, 3 low, and 5 informational vulnerabilities were found. In particular, the audit revealed the absence of double-checking the recipient address status for crypto assets and the possibility of withdrawing rewards bypassing the smart contract rules. These issues were fixed within 3 days.

After implementing the recommended changes, the retest confirmed that the Web3 solutions met security standards. The client received:

a report on the results of the work performed;
a clear picture of smart contract security;
recommendations for improving code security;
risk reduction from medium to minimal level;
protection against 99% of known vulnerabilities.

All project goals were achieved, and the Random Walk developer successfully launched its solutions on Polygon Mainnet.

Key project results

Blockchain does not forgive mistakes. Sometimes a single vulnerability is enough for attackers to deprive the owner of all assets and destroy user trust not only in the new smart contract but also in the developer’s other projects.

This case study demonstrates the importance of an independent smart contract audit before launch: thanks to the early detection of 9 vulnerabilities, Random Walk successfully fixed the code before release and left hackers with no chance of success.

Mobile App Security Outstaff Audit

Identified dangerous configurations and data leaks
Strengthened security before product launch

Services:

Mobile application pentesting, AWS pentesting, code security audit

Nov 20, 2025

Security Policy Audit for a Fintech Company

Seven key cybersecurity policies were reviewed and assessed
Regulations aligned with ISO 27001, DORA, GDPR, and NBG

Services:

Security policy and compliance audit

Nov 20, 2025

Security Testing of the DonorUA Medical Platform

A report with recommendations for strengthening security was provided.
No critical security threats were confirmed.

Services:

Web application pentest (Black-box)

Nov 18, 2025

Back to all cases

Datami articles

Modern Phishing Campaigns Use PDF Files for Attacks

Datami Newsroom

Modern Phishing Campaigns Use PDF Files for Attacks

Next-generation phishing campaigns disguise themselves as well-known brands and use artificial intelligence to mislead users. In 2025, companies face a wave of sophisticated attacks that are changing cybersecurity rules.

Nov 24, 2025 3 min

Datami Newsroom

KillSec Ransomware Attacks Healthcare

The hacker group KillSec has recently been actively attacking the IT systems of the healthcare sector in Latin America and other countries — the attackers have already stolen dozens of gigabytes and nearly 95,000 files.

Nov 18, 2025

Datami Newsroom

Datami at MERGE Madrid and EBC 25

The Datami team attended MERGE Madrid and the European Blockchain Convention 2025 to share their expertise and witness how Web3 is evolving. This year, the focus shifted toward real-world solutions – security, auditing, and transparent standards.

Nov 13, 2025 3 min

Show all articles

On this page you will learn what cookies are and how and when we use them. Definition of the term Cookies Cookies are pieces of data that a web server generates and that a website stores on your user device (computer, smartphone, tablet, etc.). Each website or third-party service sends cookies to the browser installed on your device only if your browser allows it. This is possible if you have not set any restrictions in your browser settings to save cookies. Browsers are a very well thought out technology. They protect personal data and allow websites to access only cookies that were previously sent to them. Cookies are divided into: session cookies. They are stored in the memory of the browser only during your session, after leaving the site immediately removed. permanent. They are stored in the memory of the browser for a long time. Definition of the term “browser” A browser is an application for browsing websites. The most popular browsers are Chrome, Internet Explorer, Firefox and Safari. All listed browsers are safe. In the settings of these browsers, cookies can be easily disabled, as well as change the settings of their work. You can: accept all cookies; ask the browser to notify when cookies are used; do not accept cookies. Cookies on ak1-3.com.ua and how we use them We use cookies to: our site is more functional; to understand how you navigate on the site, what content you consume better, to develop the content strategy of the site; understand how many visits to the site were per day, month, year. Analyze the geographical identity of users of the site, the number of repeated visits and other data. Cookies that we use on our site. Third-party cookies. The buttons of social networks, videos and some other services of our site are the property of other companies. These companies may also use cookies on your device if you have used them on our site or have been previously registered with them. The privacy policy of the use of personal data by these services can be found on the websites of these services. Blocking cookies All browsers allow simple actions to disable cookies. To disable them, you must go to your browser settings and find cookies in them. But we must remember that blocking cookies can have a negative impact on the performance of many websites. How to delete files You can also always delete cookies that are stored on your computer. To do this, follow the instructions of your browser Again, deleting cookies can have a negative effect on the performance of many websites.