• Stars
    star
    335
  • Rank 125,904 (Top 3 %)
  • Language
  • Created almost 6 years ago
  • Updated 2 months ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

QuillAudits Smart Contracts, deFi, NFT, tokens,Dao , Dex and DApps Audit Reports

Audit Reports

alt text

Smart Contracts, Blockchain , DApps Audit Reports

Through our Automated and Manual analysis we provide complete solution to identify and determine vulnerabilities and violations of logic in the smart contract. QuillAudits considers the following distinct and crucial facets of the smart contract code: Whether the code is secure. Whether the code corresponds to the documentation (including whitepaper). Whether the code meets best practices in efficient use of gas, code readability, etc.

Summary

QuillAudits is a secure smart contract audits platform designed by QuillHash Technologies. It is a fully automated platform to verify smart contracts to check for security vulnerabilities through it's superior manual review and automated tools. We conduct both smart contract audits and penetration tests to find potential security vulnerabilities which might harm the platform's integrity.

Why is Security Audit Necessary?

Not all smart contracts are as โ€œsmartโ€ as we think they are. Security is a critical issue in the case of smart contracts. Recent hacks of smart contracts escalated the matter. An audit from trustful third party is the most ingenuous way to identify bugs, vulnerabilities and security flaws in smart contracts which might have remained unnoticed at production level and if your smart contract is ready to deploy this will be the last chance to save your project from becoming another victim of crypto hacks because of irreversible nature of smart contracts.

Some common bugs in smart contracts that got funds worth millions of dollars stolen :

Reentrancy attack ( DAO Fiasco )

Ownership of the deployed contract (Oyster pearl attack, parity attack)

Overflow and underflow Conditions ( 2^256+1 = 0, 0-1 = 2^256 )

External Calls โ€” Every external contract call is a risk(make sure all the internal work(state condition)is complete before calling external functions)

Timestamp Dependence

(If the contract function can tolerate a 15-second drift in time, it is safe to use block.timestamp)

Storage injection vulnerability in NEO Smart Contracts (which allows anyone to change the tokenโ€™s total supply limit by transferring their own tokens to an unspecified address.)

Why Us ?

We at QuillAudits are a team of experienced Blockchain architects, developers and auditors following best in class security standards to secure your smart contracts. To deliver this level of service to our clients, we follow a rigorous process by not only find security risk or vulnerability in your smart contract, but also suggesting the best solution to overcome from those issues, individually deduced by our highly skilled auditors.

- Highly Experienced Blockchain Development & Security team.

- Intelligent In-house static analyser and formal verification Tools.

- Customized audit report with in-depth representation of each identified vulnerability.

- Bug Bounty Campaign.

- Long term Affiliation models.

- Free Consultancy to improve architecture and save gas usage with free Re-evaluation after initial bug fixing.

- Best in class pricing models.

More Repositories

1

QuillAudit_Auditor_Roadmap

This repository contains a mindmap and stepwise resource to get started with Smart Contract Auditing. If you find anything missing or want to update existing resources, feel free to create a pull request.
472
star
2

Solidity-Attack-Vectors

This Repository contains list of Common Solidity SmartContract Attack Vectors. If you find any attack vectors missing, you can create a pull request and be a contributor of the project.
405
star
3

Web3-Security-Tools

This repository contains a list of the most popular and widely used tools in web3 security. If you find any tools missing, you can create a pull request and be a contribute the project.
381
star
4

NFT-Attack-Vectors

This Repository contains list of Common NFT Attack Vectors. If you find any attack vectors missing, you can create a pull request and be a contributor of the project.
256
star
5

DeFi-Attack-Vectors

This Repository contains list of Common DeFi threat and Attack Vectors. If you find any attack vectors missing, you can create a pull request and be a contributor of the project.
212
star
6

Zero-Knowledge-Mastery

This repository contains list of resources to aid your journey of mastering Zero Knowledge Proofs. If you find any resource missing, you can create a pull request and be a contributor of the project.
203
star
7

EVM-Mastery

This repository contains list of resources to aid your journey of mastering Ethereum Virtual Machine. If you find any resource missing, you can create a pull request and be a contributor of the project.
201
star
8

Smart-contract-Auditing-Methodology-mindmap

This repository contains a mindmap on smart contract auditing methodology and different steps in how to audit a smart contract.
179
star
9

Smart-Contract-Developer-Roadmap

Here is the best roadmap for you to become a Smart Contract Developer! If you find anything missing or want to update existing resources, you can create a pull request and contribute to the project.
70
star
10

Quill-CTFs

Quill CTF is a game in which you hack Ethereum smart contracts to learn about security. The game is designed to educate players on how to identify and fix security issues in Ethereum smart contracts.
Solidity
56
star
11

Real-World-Assets

This repository comprises the theoretical and technical aspects of tokenisation of real world assets.
Solidity
34
star
12

DeFi-anti-hack-checklist

This repo contains anti-hack checklists, which will help projects to build and develop secure DeFi applications. If you find anything missing or want to update existing resources, you can create a pull request and contribute to the project.
31
star
13

upradeableToken

Smart contracts upgrade , delegateProxy
JavaScript
22
star
14

dNFTs

Distributed ownership of NFT assets on EOS
21
star
15

Blockchain-Attack-vectors

This Repository contains list of Common Blockchain threats and Attack Vectors. If you find any attack vectors missing, you call create a pull request and be a contributor of the project.
20
star
16

NFT-anti-hack-checklist

In this repository, we have created a checklist for developers as well as for users to prevent these hacks/scams and stay safe from these hackers/scammers. If you find anything missing or want to update existing resources, you can create a pull request and contribute to the project.
16
star
17

BEP20Token

binance chain BEP-20 token
Solidity
12
star
18

Proxies-Security

This repository comprises of everything you need to know about Solidity proxies, upgradeable smart contracts and their security.
6
star
19

ConsensysIndiaHack

credit scores on blockchain
CSS
5
star
20

Crowdsale_EOS

Basic Crowdsale smart contract in EOS
C++
3
star
21

MetaTransactiosn_UniversalLogins_Proxy

Blockchain better UX , onboarding Registry (Meta transactions , Universal Logins)
3
star
22

hyperledger-composer-supplychain

hyperledger fabric supply chain
2
star
23

Quill.Capital

Security Tokens Issuance Platform
JavaScript
2
star
24

forwards-checks

Forwards Contracts Trading on R3ย CORDA
Kotlin
2
star
25

infiniverse-community-audit

A community audit for the Infiniverse EOS smart contracts
Python
1
star
26

EOS-Crowdsale

A decentralized crowdsale smart contract built on EOS.
C++
1
star
27

stellar-hyperledger-telemedicine

electronic health records on blockchain (hyperledger, stellar)
TypeScript
1
star
28

MultiInserter

Script to insert thousands of records in smart contract mapping.
JavaScript
1
star
29

quillTrace

QuillTrace , supply chain smart contracts
1
star
30

eosio-token

Standard EOSIO token contracts with test cases in python created using eos factory
C++
1
star