Frequently Asked Questions

Vericode is an AI-powered smart contract security platform that delivers professional-grade audits in minutes instead of weeks. Our multi-stage pipeline combines industry-standard static analysis tools with multiple AI reasoning models and a curated knowledge base of 483,000+ real findings from leading audit firms including Trail of Bits, OpenZeppelin, PeckShield, Cyfrin, and SpearBit.

For the vast majority of projects, Vericode provides coverage comparable to professional auditors at a fraction of the cost and time. However, for protocols managing hundreds of millions in TVL, we recommend using Vericode as a first line of defense alongside a traditional audit. Vericode catches the same classes of vulnerabilities in minutes, allowing you to fix issues before the expensive manual review even begins — saving time and money on both sides.

Most AI audit tools are simple wrappers around a single language model — they send your code to ChatGPT or Claude and return the response. Vericode is fundamentally different:

• Multi-stage pipeline — multiple specialized AI models analyze your code independently, then cross-verify each other's findings
• Static analysis foundation — Slither, Mythril, and Aderyn run in parallel as the ground truth layer before AI analysis
• Protocol-aware invariant checking — our system knows the specific invariants that should hold for lending protocols, AMMs, vaults, staking, and other DeFi patterns
• Quality gate — an advanced verification layer traces each finding through the actual code path, dramatically reducing false positives
• RAG knowledge base — 483K+ real findings from top firms provide context that no single model has

This architecture cannot be replicated by prompting a single AI model, regardless of how sophisticated the prompt is.

There are three ways to submit a contract:

1. Paste an Etherscan/Blockscout URL — we automatically fetch the verified source code from any supported block explorer
2. Paste a GitHub link — we pull the Solidity files directly from your repository
3. Upload .sol files — drag and drop or select files from your computer

Enterprise users can also submit multiple contracts for cross-contract protocol analysis, including automatic proxy detection (ERC-1967).

A typical single-contract audit completes in 3–10 minutes, depending on contract complexity. Multi-contract protocol audits (Enterprise) may take slightly longer. You can track real-time progress in your dashboard, including queue position and current analysis stage.

Every audit report includes:

• Vulnerability findings with severity ratings (Critical, High, Medium, Low, Informational)
• Detailed descriptions of each issue with affected code locations
• Fix recommendations with suggested code changes
• References to similar vulnerabilities from real-world audits
• Executive summary with overall risk assessment

Reports are available in both PDF and Markdown formats for easy sharing with your team and stakeholders.

Vericode detects a wide range of vulnerability types across multiple categories:

Vericode supports all EVM-compatible chains. You can submit contracts deployed on Ethereum, Polygon, Arbitrum, Optimism, Base, BNB Chain, Avalanche, and any other chain with Etherscan-compatible or Blockscout block explorers. Since we analyze Solidity source code, any EVM chain is supported.

Vericode offers two types of monitoring for Pro and Enterprise users:

Yes. When a monitored contract triggers new findings, you'll see them flagged in your dashboard. Email notifications can be configured for critical and high-severity issues. Each finding is tracked individually, so you can see which issues are new, which persist, and which have been resolved.

Each audit runs a heavy compute pipeline: three static analysis tools in parallel, multiple frontier AI reasoning models running independently, cross-model verification, protocol-aware invariant checking, and a quality gate that traces each finding through the code. This infrastructure has a real per-scan cost that we can't absorb at scale.

Our Starter plan at $39 for a single audit keeps the price accessible — orders of magnitude cheaper than traditional auditors — while covering the compute cost of a thorough, professional-grade analysis. You get the same multi-model pipeline and quality gate as Enterprise users.

We accept two payment methods:

• Credit/debit cards — processed securely via Stripe
• Cryptocurrency — USDC, USDT, and native tokens (ETH, BNB, POL, AVAX) on 7 networks: Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, and Avalanche

When you sign up with email, Google, or Apple, Privy automatically creates an embedded wallet for you. This wallet is used for crypto payments, but it starts with a zero balance.

To fund your embedded wallet and pay with crypto:

1. Find your wallet address — go to your Dashboard and look for your wallet address in the payment/profile section
2. Send funds from an external wallet or exchange — transfer USDC, USDT, or native tokens (ETH, BNB, POL, AVAX) to your embedded wallet address on any of our 7 supported networks
3. Choose crypto at checkout — once funded, select the crypto payment option when purchasing a plan

Tip: Base and Polygon have the lowest gas fees (under $0.01). If you prefer not to deal with crypto, you can always pay with a credit or debit card instead.

Yes. You can upgrade your plan at any time from your dashboard. When upgrading, you'll get immediate access to the new plan's features. To downgrade or cancel, contact us at [email protected].

We offer a 14-day money-back guarantee for card payments. If you're not satisfied, contact us within 14 days for a full refund. Cryptocurrency payments are non-reversible due to the nature of blockchain transactions, but we'll work with you to resolve any issues.

If you reach your monthly audit limit (4 for Pro), you can either wait for the next billing cycle or upgrade to Enterprise for unlimited audits. Monitoring scans don't count toward your audit limit.

Absolutely. Your source code is processed in an isolated environment and automatically purged within 24 hours of report generation. We never share, sell, or provide your code to third parties. Only the generated reports remain accessible in your dashboard. See our Privacy Policy for full details.

We collect only what's necessary: email address, wallet address (for Web3 login), and the smart contract code you submit. We never collect private keys, seed phrases, wallet balances, or transaction histories. Analytics data is anonymized and used only to improve the platform.

No. Your submitted code is used solely for the purpose of generating your security report. It is not used for model training, fine-tuning, or any other purpose. Our AI knowledge base is built exclusively from publicly available audit reports and security research.

Yes. Enterprise users get full REST API access, allowing you to trigger audits automatically on every commit, pull request, or deployment. This means security checks run alongside your tests — no manual steps required.

Yes. Pro and Enterprise users can upload supplementary documentation (technical specs, architecture diagrams, protocol descriptions) alongside their contracts. Our AI analyzes these documents for additional context, leading to more accurate and relevant findings.