codespect-primary-sources-2026-05-07

CODESPECT primary-source snapshot

Fetched: 2026-05-07 UTC

1) Official web3-security page

Source: https://www.codespect.net/web3-security

Selected excerpts from the official site:

Smart contract audits and protocol security reviews at CODESPECT follow a four-phase, SEAL-aligned methodology: static analysis, dynamic analysis, manual review, and formal verification.

Engagements typically span one to five weeks depending on codebase size.

Primary coverage is EVM chains (Solidity), Solana (Rust / Anchor), and Starknet (Cairo), with additional Canton/Daml, Fuel, and Sui support.

Additional signals from the source:

• The official service page is unusually explicit about review process, timeline bands, deliverables, and chain coverage
• SEAL alignment and named formal-verification tools suggest a methodology-driven positioning rather than generic audit marketing

2) GitHub organization profile / profile README

Source: https://raw.githubusercontent.com/CODESPECT-security/.github/main/profile/README.md

Selected excerpts from the official source:

Welcome to CODESPECT – your trusted partner in blockchain security. We specialise in providing comprehensive smart contract audits and infrastructure penetration testing to ensure the robustness of your decentralised applications.

We specialise in … Ethereum … Starknet … Solana … Sui … Solidity … Rust … Cairo … Move

Finished Reviews

Additional signals from the source:

• The profile README doubles as a public audit ledger, listing many completed reviews and linking a meaningful subset to public PDF reports
• The report table spans several execution environments and protocol types, which supports cataloging CODESPECT as multi-VM security infrastructure rather than as a single-ecosystem boutique
• The same org-level source also frames the firm as offering architecture consultancy and broader cybersecurity support beyond line-by-line contract review

3) Public audit-preparation-guidelines repository

Source: https://raw.githubusercontent.com/CODESPECT-security/audit-preparation-guidelines/main/README.md

Selected excerpts from the official source:

Auditors should spend their time finding vulnerabilities, not understanding your protocol.

This guide helps you prepare. Properly prepared protocols spend significantly less time on auditor orientation and significantly more time on what matters: finding and fixing security issues before deployment.

For chain-specific preparation details, jump to the EVM Guide or the Solana Guide.

Additional signals from the source:

• This repo is a strong indicator that CODESPECT is packaging reusable pre-audit process, not just selling one-off review engagements
• The README makes a clear distinction between protocol understanding work and vulnerability finding, which helps explain the firm’s emphasis on audit-readiness infrastructure

4) General pre-audit checklist

Source: https://raw.githubusercontent.com/CODESPECT-security/audit-preparation-guidelines/main/CHECKLIST.md

Selected excerpts from the official source:

Code compiles without errors or warnings

SECURITY.md created documenting trust assumptions, privileged roles, centralization risks, and known risks

End-to-end flow tests cover all primary user journeys

Additional signals from the source:

• The checklist is concrete enough to function as a reusable standards artifact for external teams, not merely a marketing page
• Documentation and operational-readiness requirements are treated as first-class audit inputs, reinforcing the view that CODESPECT is building around the audit workflow itself

Notes

• CODESPECT appears best cataloged as security-review and audit-readiness infrastructure / public audit-report corpus / multi-VM smart-contract and protocol security firm.
• The most revealing primary sources were the SEAL-aligned methodology page, the GitHub org profile with its finished-reviews table, and the public audit-preparation-guidelines repository.
• No canonical standalone CODESPECT whitepaper or litepaper surfaced in this pass.