Web3 engineering & security pricing
Smart contract development and security audits for teams shipping on EVM networks. Start with a free technical scope review, then receive a fixed quote with deliverables, timeline, and assumptions in writing.
Engagements
These prices cover common, well-defined scopes. The final fee depends on protocol risk, code complexity, integrations, and schedule—not just raw lines of code.
Build
For focused Solidity modules, token launches, staking contracts, NFT systems, and protocol upgrades.
Typical delivery: 1–3 weeks
Audit
For audit-ready EVM repositories with a defined scope and standard protocol complexity.
Typical delivery: 1–2 weeks
Build + secure
For staking, vaults, AMMs, lending, or multi-contract systems that need security-led engineering.
Typical delivery: 2–6 weeks
Ongoing
For teams shipping upgrades regularly and wanting a security reviewer embedded in the release cycle.
Monthly, scoped by release cadence
Starting prices are indicative, quoted in USD, and exclude applicable taxes. Bridge, cross-chain, zero-knowledge, non-EVM, and emergency work are scoped separately.
How pricing works
Security quotes should reflect the thinking required to understand your system. We review four areas before committing to a fee.
Value flows, accounting, privileges, upgradeability, and economic assumptions.
External calls, oracles, bridges, integrations, and off-chain dependencies.
Documentation, tests, deployment scripts, code quality, and frozen commit.
Target date, reviewer coverage, reporting needs, and remediation window.
Simple process
Send the repository, target chain, documentation, and launch timeline.
Receive an agreed scope, exclusions, fixed fee, and delivery plan.
We execute the engagement and communicate material issues as they emerge.
We review fixes and deliver the final security report or engineering handover.
Pricing FAQ
Need a number for budgeting? Send the repository and we will confirm whether a listed starting price fits.
PandaSecurity audits start at $7,500 for a focused, audit-ready EVM codebase. DeFi protocols, unusual economic logic, cross-chain systems, rushed timelines, or large repositories require a custom fixed quote after scope review.
The main factors are logic complexity, in-scope code size, privileged roles, external protocols and oracles, chain coverage, test quality, documentation, and delivery timeline. We confirm the scope and fixed fee before work begins.
Yes. Every full smart contract audit includes one verification round for fixes submitted within the agreed remediation window, plus an updated final report.
We can provide security-led development and an internal launch-readiness review. For contracts that custody significant value, we also recommend a separate independent audit before mainnet and can help prepare the repository for it.
Our core focus is Solidity and EVM-compatible networks. Share your target chain and repository during scoping so we can confirm fit, availability, and any specialist requirements.
Ready when your scope is
Tell us what you are building. We will reply with the details needed to estimate cost and timeline.
