NEAR security review
NEAR is a sharded blockchain that runs contracts in WebAssembly, with human-readable accounts and per-key permissions. Hackerbane audits the Rust and JavaScript contracts you deploy there and the access keys that control them.
What we review
NEAR access keys can be full or limited to specific function calls, and implicit accounts are derived from public keys. The critical bugs are usually authorization mistakes, such as the wrong key being added, rather than the reentrancy patterns Ethereum auditors expect. Our review is built for that model.
- Access-key policy, including function-call keys that can still move funds.
- Cross-contract calls and callbacks that trust a promise result.
- Storage staking and which account pays for it.
- Automation that provisions or adds keys through your UI or backend.
Built for NEAR
We review NEAR contracts against NEAR's runtime, account model, and asynchronous call semantics, not an Ethereum checklist adapted after the fact. Findings reference the actual key and promise flows in your code.
Next step
Request an audit
Share your crates or JS packages, scope, and timeline – we'll propose an audit plan and estimate. Include how accounts are created and who can add keys.