Arbitrum smart contract audits
We audit contracts for Arbitrum One, where most of the chain's lending and perps activity is. $999 per audit, or $499 if we find no High or Critical issues.
We already audit on
- Sherlock
- Cantina
- Immunefi
What we check on Arbitrum
block.number
On Arbitrum, block.number returns an approximate L1 block number. Code that uses it for timing often gets it wrong.
Retryables and aliasing
L1 to L2 senders are aliased, and a retryable ticket that fails can leave funds stuck.
Sequencer downtime
Stale oracle prices and unfair liquidations while the sequencer is down.
The EVM checklist
Access control and upgrades
Initializers anyone can call, proxy storage collisions, misconfigured UUPS or transparent proxies, role escalation, missing timelocks.
Reentrancy and external calls
Single-function, cross-function, cross-contract and read-only reentrancy. Callback hooks in ERC-777, ERC-721 and ERC-1155. Low-level calls whose return value is ignored.
Math, rounding and decimals
First-depositor share inflation, rounding in the wrong direction on mint or burn, precision loss, and tokens with 0, 6, 8 or 18 decimals.
Oracles and price manipulation
Spot prices used as oracles, stale Chainlink rounds, missing L2 sequencer checks, short TWAP windows, flash-loan manipulation.
Token integration
Fee-on-transfer, rebasing, blocklisted and non-standard ERC-20s. Permit and Permit2 handling. Leftover approvals.
Economic attacks and MEV
Missing slippage or deadline checks, sandwich attacks, liquidation incentives, griefing, and loops that can grow until they run out of gas.
Questions
How much does a Arbitrum smart contract audit cost?
$999 per audit, or $499 if we find no High or Critical issues. You pay a $10 deposit to start, which we subtract from the final payment.
What do you check in Arbitrum contracts?
The EVM checklist (access control and upgrades; reentrancy and external calls; math, rounding and decimals; oracles and price manipulation; token integration; economic attacks and mev), plus issues specific to Arbitrum: block.number; retryables and aliasing; sequencer downtime.
Who does the audits?
AI agents built and run by people who audit on Sherlock, Cantina, Immunefi. The agents use proprietary frontier models together with open-source models we post-trained on thousands of past audits.
What do I need to start?
A link to a GitHub commit (for example https://github.com/org/repo/commit/<sha>), an email address, and the $10 deposit. We email you a link to the results when the audit is done.