Pricing

Smart contract audit pricing ranges from $5,000 for simple token contracts to $200,000+ for complex protocols, L1 chains, and ZK systems. The primary cost drivers are codebase size, protocol complexity, and the number of external integrations. Contact us for a custom quote based on your specific codebase.

Sentinel is our self-serve, fully automated analysis engine, priced by codebase size. Scans start at $100 for contracts under 500 lines, $250 up to 2,000 lines, $1,000 up to 10,000 lines, and $2,500 up to 50,000 lines. Codebases above 50,000 lines are scoped as a custom Enterprise engagement. Each scan returns severity-rated findings automatically. For senior, human-led review, choose a full audit.

Yes. We provide a free scoping assessment before every engagement. We review your codebase, estimate the audit timeline, and provide a fixed-price quote, no obligation.

Every engagement includes manual line-by-line review, automated analysis via Sentinel, severity-rated findings report, and a remediation re-audit at no extra cost. Depending on the tier, we also include fuzzing, economic attack modeling, and formal verification.

No. Remediation verification is included in every engagement. We re-audit all patches to confirm they correctly address the root cause.

We recommend reaching out 2–4 weeks before you want the audit to start. For complex engagements (L1, bridges, ZK), 4–6 weeks lead time helps ensure optimal scheduling.

Yes. We accept payment in ETH, USDC, USDT, and DAI in addition to fiat wire transfers.

Yes. We offer retainer agreements for teams that need ongoing audit coverage: re-audits, new feature reviews, and continuous security. Contact us to discuss.

We encourage discussion. Every finding includes detailed root cause analysis and evidence. If a finding is disputed, we work with your team to verify or reclassify it. Our goal is accuracy, not padding.

Self-hosted Tripwire is open source and free: the source is on GitHub and it runs on your own machine or server, with your own RPC, database and keys. For teams that cannot run it themselves, SigIntZero offers hosted and managed Tripwire: we run it, write and tune your rules, connect your alerts and set up the on-chain pause. Managed Tripwire is quoted per deployment, based on your contracts, chains and how far the response is automated.

No. Tripwire runs on any deployed contract, and the rule wizard gives you seven starting points. An audit helps: if SigIntZero audited your protocol, we can turn the audit findings into Tripwire rules, so coverage is tuned to your risk profile from day one.

Yes. When we audit your protocol and run Tripwire for you, the audit findings become your first Tripwire rules, giving you coverage from pre-deployment through production. Ask about bundle pricing when you request a quote.