Cearsi Security Lab
Crypto auditing and Web3 security analysis
Build it. Audit it. Secure it. Cearsi reviews your token, contract, program, application or full project, shows you what it found, and gives you a verifiable report you can share with exchanges, investors and your community.
Already paid for an audit? Open My audits to view your report, or look up any report by reference at cearsi.dev/verify.
1. Scope detection
You submit a token or contract address, a repository, a web app URL or source files. Cearsi detects the network, framework, language, number of programs, lines of code and dependencies, then shows you exactly what will be audited.
2. Transparent quote
Pricing comes from a published rate card — a base price per audit type plus the size and complexity of your project. You see the price and accept it before any work begins. Nothing is charged upfront.
3. The audit
Independent analyzers run in sequence: static analysis, dependency review, chain-specific checks (authority and mint controls on Solana, issuer flags on XRPL, reentrancy and upgrade patterns on EVM), configuration review, and attack-vector testing. AI correlates the results; it is not the whole engine.
4. Locked results
When the audit finishes you see how many Critical, High, Medium, Low and Informational issues were found. The details stay secured until payment is confirmed on-chain in SOL, USDC or XRP — verified by our servers, never by your browser.
5. Fix with Cearsi
Each finding comes with the affected code, the impact, a recommended fix and a proposed change you can approve or reject. Cearsi never changes your code without your explicit approval, and re-tests after a fix is applied.
6. Verifiable report
Every paid audit produces a full PDF with scope, methodology, findings, evidence, remediation and limitations, plus a SHA-256 hash and a public verification page so anyone can confirm which code version was audited — without seeing your findings.
What happens during an audit
- Source analyzed
- Dependencies checked
- Web3 application reviewed
- Authority controls checked
- Vulnerability analysis completed
- Attack vectors tested
- Findings classified
- Recommendations generated
- Audit report generated
What each audit covers
Token Security Scan
Mint and freeze authority, supply controls, holder concentration, liquidity and metadata.
Smart Contract Audit
Access control, arithmetic, state handling, external calls and privilege escalation.
Solana Program Audit
Account validation, signer and owner checks, PDA derivation, CPI safety, rent handling.
XRPL Project Audit
Issuer settings, trust lines, flags, freeze and clawback configuration, payment paths.
EVM / Solidity Audit
Reentrancy, upgrade patterns, oracle trust, gas griefing, admin key risk.
Web3 Application Analysis
Signing flows, transaction construction, RPC trust and phishing resistance.
API / Backend Security
Authentication, authorization, rate limits, secret handling and data exposure.
Full Project Security Audit
Contracts, backend, front end and infrastructure reviewed together.
Pricing
Starting prices are shown in USD. Your final quote depends on size and complexity and is shown before the audit begins. If you pay with cryptocurrency, the required amount is calculated from the live market rate at checkout.
Report levels
- Cearsi Automated Security Assessment — produced by the analysis engine.
- Cearsi Human-Reviewed Security Audit — a Cearsi security engineer reviews and signs the report.
- Cearsi Enterprise Security Audit — extended manual testing, remediation support and re-testing.
An automated assessment is never presented as human reviewed. An audit reduces risk; it can never guarantee that code is safe.