Deploy to mainnet with confidence
Deployment Audit for EVM- and Solana-based Smart Contracts. Hacken reviews the scripts, configuration, and final on-chain state so audited code reaches production as intended.
- Development
- QA
- Smart Contract Audit
- Deployment Audit
- Production
- 9+ years
- of securing code on 100+ EVM chains
- 2,157
- smart contract audits
- 60+
- security engineers
- ISO 27001
- certified operations
What is a deployment audit?
A deployment audit examines the path from a codebase to its production configuration. It identifies deployment and configuration risks that a smart contract audit may not cover.
Deployment scripts
Review the scripts, automation and transaction order used to deploy the system.
Initialisation
Check constructor arguments and initialiser calldata against the approved configuration.
Proxy & upgrade controls
Check proxy addresses and upgrade rights for Transparent, UUPS, Beacon, Diamond proxies.
Roles and permissions
Review admin roles, multisig signers, timelocks and emergency authorities.
External dependencies
Confirm oracle, token, bridge and contract addresses for the target chain.
Environment handling
Review deployment configuration and secret-handling practices in scope.
Bytecode and reproducibility
Check deployed bytecode against the source and build.
Final on-chain state
Verify the live on-chain configuration and contract state before the protocol is activated.
How is this different from a smart contract audit?
A smart contract audit examines code logic before deployment: access control, state changes, economic assumptions and known vulnerability classes.
A deployment audit examines whether the intended code, configuration and permissions reached production as planned.
From scope to verified deployment
Scope the deployment
Share the target chain, architecture, deployment plan, and release window.
Review the release artefacts
Hacken reviews the deployment scripts, configuration, permissions, and dependencies before deployment.
Verify the deployed state
After deployment, Hacken compares the deployed contracts, bytecode, roles and configured addresses with the approved release plan.
Resolve findings
Your team receives remediation guidance and a window to submit fixes for verification.
Deliverables
Deployment Audit Report
A report covering the reviewed deployment configuration, on-chain verification results and findings by severity, with remediation guidance where needed. It can support internal release controls and external technical due diligence.
Remediation verification
A two-week window to submit fixes for verification. Hacken updates the findings status after reviewing the changes and issues a final status report.
Deployment audit fits
DeFi protocols
For launches using proxies, oracle integrations, timelocks, and emergency controls. We review the addresses and permissions that determine who can upgrade, pause or operate the protocol.
Exchanges and custodians
For deposit, withdrawal and custody contracts that must be correctly configured before they accept user assets. We review roles, multisig arrangements and operational controls in scope.
Tokenisation and RWA platforms
For teams that need a reproducible deployment record and clear technical evidence of the live configuration. The review can support your internal control and diligence processes.
Cross-chain systems
For teams deploying across multiple EVM and Solana chains. We check that each chain uses the intended addresses, parameters and permissions.
DAOs, governance systems and upgrades
For deployments and upgrades controlled by multisigs or timelocks. We review the execution path, signer roles and permissions that remain after completion.
Why Choose Hacken for Deployment Audits?
Standalone or complementary service: works independently or as an add-on to existing smart contract audits
Up to 1 week, depending on complexity: fast-track production readiness
Automated and manual verification: combines tooling with senior engineer review
Ready to deploy on mainnet?
Tell us what you’re deploying and when. We’ll help you plan the review.
