Polkadot security review
Polkadot is a network of parachains that share security and move value and instructions through XCM. Hackerbane audits parachain runtimes, ink! smart contracts, and the cross-chain messages that can mint or burn on another chain.
What we review
Polkadot work is usually the runtime, not a Solidity file. XCM is how value and instructions move, and a filter one version behind can mint on the wrong chain. ink! contracts have their own call model. We review each layer against its own rules.
- Runtime pallets that hold balances or change validator sets.
- XCM filters, fee handling, and destination assumptions.
- ink! constructors and payable messages.
- Services that submit XCM or runtime calls.
Runtime and contract expertise
A parachain runtime is a different artifact from a smart contract, and we review it as one. Whether your repo is a pallet, an ink! contract, or both, the audit plan matches the code you ship.
Next step
Request an audit
Share your runtime or ink! repo, the parachain it targets, and your timeline – we'll propose an audit plan and estimate.