Written by Pablo Gómez
Founder & CEO at Metlabs · Reviewed on October 11, 2026
An audit scope identifies the repository, version, contracts and assumptions reviewed. Methods may include manual analysis, static tools, fuzzing and invariant checks. Formal verification evaluates stated properties under a specific model.
Findings are classified and assessed against remediation. Follow-up review may check fixes without automatically extending coverage to new features or dependencies.
The report must be read alongside deployed code and permissions. Administrative keys, oracles and interfaces can introduce out-of-scope risks. An audit records a review process rather than certifying invulnerability.
Also known as
- Smart contract audit
