Smart Contract Audit for a Blockchain Solution

Client:

Qube – a Web3 and Blockchain solutions developer

Industry:

FinTech (financial technologies)

Focus:

Smart contract security verification before mainnet launch

Main challenge:

Full audit within a short timeframe to protect investors’ assets and prevent loss of control over contracts

Market:

International

Services provided:

Smart contract audit (White-box)

Key Takeaways

Eliminated up to 99% of known threats at the time of the audit

Provided an audit report for exchange certification

Reviewed 4 smart contracts, identified 16 non-critical vulnerabilities

Recorded outdated functionality and compiler version

Formulated recommendations for contract code optimization

smart contracts audited

vulnerabilities identified

99%

resilience to threats ensured

Smart Contract Audit for a Blockchain Solution

Aug 11, 2025

14 min

How important is it in blockchain for smart contract code to comply with modern security requirements? Without exaggeration - extremely. Even a single vulnerability can cause the complete collapse of a project. The comprehensive audit conducted by Datami revealed 16 issues in the source code and ensured the contracts’ resilience to 99% of known threats.

Qube operates in the international market and develops solutions in the field of Web3, Blockchain, and smart contracts. The main project is an ERC20 token for investments and transactions.

In the blockchain sphere, security is of critical importance, as even a single vulnerability can lead to the collapse of a business. At risk of financial losses are not only the system owners but also the users.

Tasks and challenges

Before the project release, the client needed to ensure the absence of vulnerabilities in the source code of the smart contracts in order to obtain permission for operations on Web3 exchanges.

Datami was tasked with auditing all processes of 4 blockchain contracts within 2 weeks (the time remaining before the mainnet launch):

Test the written smart contract code.
Check for vulnerabilities and non-compliance with standards.
Provide recommendations for eliminating the identified issues.

White-box code audit

Dynamic and static analysis using automated and manual tools

Documentation review

Review of specifications, compilation (build) of contracts, and deployment in test environments

Report and recommendations

Detailed report with results and advice on code modernization and optimization

Blockchain security verification

Our approach

In this case, we applied a White-box approach to smart contract auditing, which consisted of dynamic on-chain analysis and static code review. A manual line-by-line check of the code for vulnerability patterns was also performed.

To detect errors and vulnerabilities in the code and to verify compliance with coding standards, Datami specialists used audit tools Slither, Cloc, Oyente, SolHint. Testing was carried out in Remix, Ropsten testnet, MythX, and Manticore environments.

White-Box

An audit strategy with full access to the source code, which allows for a detailed logic check and the identification of hidden risks.

Key stages of work and solutions

The project was carried out in a well-thought-out sequence. At the initial meeting with the client, all project details were agreed upon, after which the Datami team focused on a detailed smart contract audit.

After a complete review of all processes, the client received a detailed report with results, explanations, and recommendations.

Preparation

Study of documentation and specifications, analysis of potential threats and vulnerabilities, agreement with the client on audit methods.
Comprehensive audit

Conducting dynamic analysis of transactions in a test on-chain environment, static review, and manual line-by-line code revision.
Final report

Summary of results and providing recommendations for the optimization and modernization of smart contracts to meet cybersecurity requirements.

Results and recommendations

Datami verified the quality and security of the smart contract code before the mainnet launch: tested 4 contracts, conducted dynamic and static analysis, and performed a manual line-by-line code review.

We discovered a number of minor errors and ensured the absence of critical ones that could have caused the system to collapse immediately after launch due to the loss of investors’ assets and control over the contracts themselves.

As a result of the work, we prepared a detailed report with findings - the client received recommendations and answers to all key questions.

During the audit, the Datami team:

identified 16 non-critical vulnerabilities;
recorded outdated functionality and compiler version;
provided recommendations for quick issue resolution;
reduced the threat level to unlikely;
ensured contract resilience to 99% of known vulnerabilities.

All assigned tasks were completed. The client followed our recommendations and was fully satisfied with the result.

Key project results

In the blockchain sphere, there is no half-protection: either the system works flawlessly and the attack does not occur, or a single vulnerability leads to total losses. That is why an audit before launch is of critical importance.

As this case study demonstrates, thanks to the comprehensive smart contract audit, it was possible to eliminate potential threats to the blockchain solution. The client received confirmation of the code’s security and the system’s readiness for mainnet launch. Eliminating the identified issues became an important step for obtaining certification and releasing the project.

Direction

Before the project

After implementation

Security level

Low

High, protection against 99% of known threats

Threat level

Medium

Low, threats unlikely

Risks

Loss of assets and control over the smart contract

Minimized

Vulnerabilities

Unknown

16 non-critical issues found

Exchange standards compliance

Yes

Preparing a smart contract for release on Web3

The code was prepared for certification.
The project was secured against 99% of known threats.

Services:

Smart contract audit (White-box source code review)

Sep 16, 2025

Web3 Project Random Walk: Smart Contract Audit

Secure launch on Polygon mainnet ensured within 5 days
Risk level reduced from medium to minimal

Services:

Smart contract audit (White-Box source code analysis)

Sep 2, 2025

Smart Contract Audit of a Web3 Company

The product was prepared for a secure market launch.
The risk was reduced from high to minimal.

Services:

Smart contract audit (White-box source code analysis)

Aug 20, 2025

Back to all cases

Datami articles

Datami Newsroom

Datami Took Part in CV Summit 2025

CV Summit 2025 brought together leaders in fintech, blockchain, and artificial intelligence in Switzerland. The Datami team participated in the global dialogue on how technology is shaping the new financial landscape.

Oct 10, 2025 3 min

Web Applications Penetration Testing: A Pentest Guide

Oleksandr Filipov: Security engineer at Datami, author of articles

Web Applications Penetration Testing: A Pentest Guide

Web applications are targeted by attacks every day - from simple scanners to deliberate breaches. To understand how vulnerable a web application is and how to protect it from hackers’ actions, a special assessment is conducted - penetration testing (pente

Oct 1, 2025

Microsoft enables email bombing protection

Datami Newsroom

Microsoft enables email bombing protection

Microsoft announced a new update to Defender for Office 365 that automatically detects and blocks email bombing attacks. The rollout started in June, and most users will receive the feature by mid-July 2025.

Sep 12, 2025 3 min

Show all articles

On this page you will learn what cookies are and how and when we use them. Definition of the term Cookies Cookies are pieces of data that a web server generates and that a website stores on your user device (computer, smartphone, tablet, etc.). Each website or third-party service sends cookies to the browser installed on your device only if your browser allows it. This is possible if you have not set any restrictions in your browser settings to save cookies. Browsers are a very well thought out technology. They protect personal data and allow websites to access only cookies that were previously sent to them. Cookies are divided into: session cookies. They are stored in the memory of the browser only during your session, after leaving the site immediately removed. permanent. They are stored in the memory of the browser for a long time. Definition of the term “browser” A browser is an application for browsing websites. The most popular browsers are Chrome, Internet Explorer, Firefox and Safari. All listed browsers are safe. In the settings of these browsers, cookies can be easily disabled, as well as change the settings of their work. You can: accept all cookies; ask the browser to notify when cookies are used; do not accept cookies. Cookies on ak1-3.com.ua and how we use them We use cookies to: our site is more functional; to understand how you navigate on the site, what content you consume better, to develop the content strategy of the site; understand how many visits to the site were per day, month, year. Analyze the geographical identity of users of the site, the number of repeated visits and other data. Cookies that we use on our site. Third-party cookies. The buttons of social networks, videos and some other services of our site are the property of other companies. These companies may also use cookies on your device if you have used them on our site or have been previously registered with them. The privacy policy of the use of personal data by these services can be found on the websites of these services. Blocking cookies All browsers allow simple actions to disable cookies. To disable them, you must go to your browser settings and find cookies in them. But we must remember that blocking cookies can have a negative impact on the performance of many websites. How to delete files You can also always delete cookies that are stored on your computer. To do this, follow the instructions of your browser Again, deleting cookies can have a negative effect on the performance of many websites.