Frequently Asked Questions

Certification means the contract was assessed under SentaTrust’s documented verification standards, and that the result is published rather than asserted. Every certified audit records its findings, their severity classification, and a SentaScore — the letter grade summarising the assessed security of the reviewed code. The certificate, the score and the findings are published on a public verification page anyone can check independently. Certification is a documented, independently verifiable assessment — not a guarantee that a contract is free of all vulnerabilities — and it applies only to the code version reviewed.

Grades are based on the severity and resolution status of all findings. The grading system considers the number and severity of vulnerabilities found, their resolution status, and the overall security posture of the contract. Higher grades indicate fewer and less severe issues, with all critical and major vulnerabilities resolved.

Certifications remain valid for the version of the contract audited; any redeployment or upgrade requires re-certification. If the contract code is modified after certification, the original certification no longer applies to the new version.

Enter the certificate ID, contract address, or project name in the verification portal. Each certificate has a unique ID (e.g., SENTA-2025-0001) and includes a SHA256 verification hash for cryptographic validation.

If a critical finding is identified, the audit is paused and you are contacted privately before any result is published. We provide remediation guidance and work directly with your development team. The audit report and certificate document the findings, their severity classification, and the resulting SentaScore.

Timelines vary by package: Essential Audit takes 24 hours, Professional Audit takes 7 business days, and Multi-Contract Audit takes 10 business days. Enterprise audits are custom-scoped, with timelines agreed for each audit.

Our verification framework combines industry-standard analysis tooling, SentaTrust classification methods, and structured interpretation by SentaLabs. This combination is designed to document code-level and behavioral risk without treating tool output as a final conclusion.

Yes, we support audits for contracts deployed on testnets. Testnet audits are valuable for identifying issues before mainnet deployment. However, final certification is typically issued for mainnet deployments.

**Essential Audit ($990)** covers a single smart contract and its direct dependencies. **Professional Audit ($2,900)** covers one integrated product system — several contracts that ship together, such as a presale, staking and rewards stack, along with their supporting modules. **Multi-Contract Audit ($7,500)** covers up to three separate product systems in one audit, where each system could reasonably stand alone as its own audit. All three deliver the same SentaShield audit report, the same Certification Seal, and the same public verification record. They differ in scope and turnaround, not in the depth of the assessment.

Yes. If you start with an Essential Audit, you can apply its cost toward a Professional Audit or Multi-Contract Audit. Contact our team to discuss upgrade options.

Refund policies vary by package and circumstances. Please review our Refund & Cancellation Policy for detailed information. Generally, refunds may be available if the audit has not yet begun.

Payments can be made directly through our secure checkout using crypto (BNB, USDT) or credit card. Invoices are issued after successful payment and can be downloaded via the client dashboard. For Enterprise Audits, invoicing is arranged directly.

We support major blockchain networks including Ethereum, BNB Smart Chain, Polygon, Arbitrum, Optimism, Avalanche, and Solana. Additional networks can be supported on request for custom audits.

Yes, we specifically audit upgradeable contracts and proxy patterns. Our process includes EIP-1967 compliance checks, validation of upgrade mechanisms, and initializer security analysis to prevent unauthorized upgrades.

We accept Solidity source files (.sol), contract bytecode, and can work with GitHub repositories. For best results, provide complete source code with all dependencies and deployment configurations.

Yes. All submitted code and documentation are treated as strictly confidential. SentaLabs operates under NDA-level privacy standards. No source code or sensitive project data is ever shared publicly or stored beyond the verification process.