Audit Company

HashEx

HashEx is a well-known auditing company that’s been active since its founding in 2017. In the following years, the company developed multiple technical tools and solutions for DeFi security while delivering a consistent stream of audit reports and engaging in many educational efforts in order to achieve security for the decentralized space.
DSA presents a unique series of reports on the smart contract and blockchain app auditor market. This report is published for the first time and is not affiliated with any specific vendor. The DSA expert team has performed an in-depth analysis of the blockchain security providers in the market. For that, a methodology was developed, and specific criteria were selected. The data provided in the report are actual for February 2023.
Contents
The main criteria for auditor review
1
Trustworthiness
At this point, we analyze the team, key players, as well as the experience of the company in the field.
2
Media Presence
In this paragraph, we analyze the social networks of the project, the engagement rate, and media publications.
3
Speed and service
In this paragraph, we analyze the speed of the audit as well as the speed of the team's response to the request.
4
Expertise
At this point, we analyze the company's experience with different networks, technological advancements, as well as additional services.
5
Price
In this paragraph, we analyze prices and additional services (We send the same sample contract to every auditor), sales, promo offers, bonuses, discounts, and legal transparency.
6
Quality
In this paragraph, we analyze audit quality, report analysis, and user experience.
Categories and sub-categories
6 categories are present in the review and each may be divided into sub-categories. Each category is evaluated to receive from 1 to 10 points. The same rule applies to each sub-category and the arithmetic mean value of the sub-categories will become a result of the main category. The main result will be calculated in the same manner.
Trustworthiness
  • Team members' separate experiences in the field
  • Current team’s experience in the field
  • Company experience (years of service, date of the first audit)
Media Presence
  • Social media (engagement rate, further – ER)
  • Media publications
Speed
  • Audit speed
  • First response speed (from a real person)
  • Follow-up response speed
Expertise
  • What blockchains does the company audit (rare chains and language get an additional point)
  • Technological advancements (developments, tools, automated tools)
  • Services (KYC, Incident research, marketing)
Price
  • Prices and additional services (We send the same sample contract to every auditor)
  • Sales, promo offers, bonuses, discounts
  • Legal transparency
Quality
  • Audit quality, report analysis
  • User experience

Detailed analysis

6 categories are present in the review and each may be divided into sub-categories. Each category is evaluated to receive from 1 to 10 points. Same rule applies to each sub-category and the arithmetic mean value of the sub-categories will become a result of the main category. The main result will be calculated in the same manner.

Trustworthiness

Average score 9/10

1

Team members' separate experiences in the field

The leadership team consists of 5 people:
Dmitry Mishunin - Co-Founder, CEO
Gleb Zykov - Co-Founder, CTO
Alexey Belozertsev - Co-Founder, Technical Lead
Ksenia Borodulina - COO
Olga Ortega - Sr. Product Manager


Each member of the team possesses considerable experience of over 6 years in their respective fields as well as experience working for companies such as Google, Facebook, Veeam Software, etc.
2
Current team’s experience in the field
Aside from the key members of the team, the company’s LinkedIn page contains a list of 24 team members. However, the company’s description lists 35 employees. The staff includes technical specialists, hr specialists, hiring and marketing experts. The technical team won several hackathons (among them are dsxt, cryptohack)

3
Company experience (years of service, date of the first audit)
According to the company’s LinkedIn page, HashEx was created in 2017. This seems to also be the date of the first audit. According to the information on the website, the company has audited over 1200. The audit reports are available at the company’s GitHub page, and a list of audited projects is available on the website with links to the reports. The list is updated regularly.

Media presence

Average score 9/10

1

Social Media

The company’s Twitter page has a high engagement rating compared to other similar projects. The posts are added regularly and contain quality information (news of performed audits with projects’ descriptions, new partnerships, news about attacks on other projects, and articles about security and DeFi.)
The account is followed by well-known big projects such as Trader Joe, Pontem Network, etc.

The Telegram chat is not very active. Users rarely communicate with each other or the admins. The administration responds quickly and provides quality insightful information to its users. Specific precedents such as hacker attacks and crypto security news are often discussed in the chat.

The LinkedIn page has a large number of subscribers compared to similar companies. The page is updated with company news, partnership announcements, and events.

The company’s Medium page has a large number of subscribers, compared to the similar pages. Detailed audit reports are added regularly, as well as articles about the company’s work, reports of the team’s participation in various blockchain events, and detailed descriptions of their developments.

2
Media publications
Articles from the company’s team are regularly published and the project is mentioned in the top online media. Among other media, HashEx is frequently present in Forbes, Coincodex, Benzinga, Coindesk, Cointelegraph, BeInCrypto, etc. There’s a useful block Media on the website, that lists all the articles, interviews, podcasts, etc.

Speed

Average score 9/10

1

Audit Speed

An audit takes approximately 7 weekdays which is relatively long compared to similar companies. During the communication with the manager, it was stated that the company offers a faster option, however, it will cost twice as much as the regular one.
2
First response speed
We've contacted the manager through Telegram and received a response within 15 minutes.
3
Follow-up response speed
After providing the manager with the information about the project, we received a response within an hour.

Expertise

Average score 10/10

1

What blockchains does the company audit

The company officially works in the following networks:
  • Binance Smart Chain
  • Polygon
  • Avalanche
  • Solana
  • Aurora
  • Fantom
  • Gnosis Chain
  • Terra
  • TON
  • NEAR
  • Hedera
  • Ethereum
  • Neon
  • Shardeum

As we can see from this impressive list, the team audits EVM projects as well as Solana, Near, L1 and L2 solutions.
The company often invests in studying new networks and widens its tech stack if a promising network appears.

2
Technological advancements
The company offers a list of different tools for blockchain analytics and providing safety to smart contracts:

AnalytEx - provides insights based on terabytes of real-time data from Ethereum blockchains.

CryptEx - is a tool that secures Liquidity Pool tokens for a specific period, allowing their protection from rug pulls, team exploits, or other forms of attack.

ABI encoder - A free online service for encoding your Solidity contract functions and constructor arguments.

Paper Wallet - is the safest way to store your seed phrase and private keys. Our solution allows to split your seed phrase into several pages which you can print out and keep separately. You can lose one page and still be able to recover your seed

Forkchecker - Find out if the contract is a fork using its address or .file

CheckMyTokenBot - Telegram bot to quickly check smart contracts tokens.. Lets you quickly determine token credibility.

AMM plugin for margin trading (In developing) - dAapp that allows to wrap any AMM for margin trades with any pair.

Multi-convertor (swap all in one) (In developing) - Unwrap LP tokens and swap them along with other tokens in your wallet with one click.
3
Services
Aside from auditing smart contracts, the company offers the following services:

Smart Contract Development
Security Subscription
Blockchain Consulting
Blockchain Risk Analysis
Blockchain Integration
Blockchain Developer
NFT Marketplace Development
Penetration Testing
Incident Response
HR Services
Marketing Services

Prices and additional services

Average score 9/10

1

Audit prices, affordability

The price for the test project is $4 000. This is an average price on the market compared to other similar companies. The price is affordable for the majority of projects.
2
Sales, promo offers, bonuses, discounts
While communicating with the manager, we were offered a Delayed Delivery Audit service: if your project is in its first stages of development and the audit will be required later, you can receive it with a 10-20% discount. If a client orders an audit of more than one smart contract, there’s a 10% discount on the rest of the audits.


In addition to the audit report, clients receive:
- A report published on the company’s social media (Twitter, Telegram, Medium)
- The project receives a separate page on the auditor’s website.
- A free recheck of the code and developer support within 2 weeks after the report is finalized.
- For an additional price clients can purchase Promotional Marketing Services - bundles that include promotional articles, banner advertisements, Twitter ad campaigns, and many more options.

3
Legal transparency
The company provides a legal agreement. The payments can be sent through a bank transaction, invoice, fiat, etc. on demand.

Quality

Average score 10/10

1

Audit quality, report analysis

  • Issue description (thoroughness, code examples): YES

  • Project description and contracts (what do they do): YES

  • Conclusions (automatically generated vs written by specialists): YES

  • Recommendations: YES

  • Manual audits (a large number of automatically generated audits is a disadvantage): YES

2
User Experience
Prices can be requested through a contact form on the website or directly from the manager on Telegram.
Approaching the manager directly is a convenient option for potential clients who want to ask questions without any obligations.
The contact form on the website is also a convenient option. It doesn’t require any unnecessary fields that can prevent communication with project owners.

Final Score

Considering the results presented in every category, the following points have been assigned:
  • 9/10 Trustworthiness
  • 9/10 Media presence
  • 9/10 Speed
  • 10/10 Expertise
  • 9/10 Prices and additional services
  • 10/10 Quality
The Final Score:
9,33/10
This is the analytic report in a series of reports on the smart contract and blockchain apps auditor market. Presented to you by DSA, it’s guaranteed impartial and factual information on the most well-known, new, and obscure players.
Follow us on Twitter and be the first to know about new reports
Haсken Analysis Report
Hacken Defi Security company was founded in 2017 in Kyiv, Ukraine by security specialists and hackers to deliver cybersecurity solutions to companies and individuals, making histories of success.
RugFreeCoins Analysis Report
A company that conducts smart contract security audits and provides token listing and other related services.