What do I get for $200?

One audit of one repository at one commit. The report lists each finding's severity, verdict and code location, and usually arrives in 2 to 10 hours, depending on code size. A re-audit of a new commit costs the same $200, and there is no subscription.

Can you trust an AI smart contract auditor?

Trust the evidence: on EVMBench Guardix found 104 of 117 known issues. Each finding links to code, so you can verify it yourself.

How long does an automated smart contract audit take?

Usually 2 to 10 hours, depending on code size.

Is an AI audit enough before launch?

It's enough to catch what a machine can prove, before launch and after every change. For a high-value mainnet launch, combine it with a manual review.

What if the run fails?

You get a re-run or full credit.

Smart contract audit

AI smart contract audit for $200

For Solidity teams before launch, and for developers not ready for a manual audit yet. A full report with a verdict on every finding, in 2 to 10 hours depending on code size.

Run an audit for $200 See a sample report

LEN-1

isolateLiquidate pays NFT to caller instead of auction winner (lastBidder)

security bugIsolateLogic.sol

Confirmed

LEN-55

Lido submit() share return mixed with balanceOf pooled-ETH accounting

security bugYieldEthStakingLido.sol

Confirmed

LEN-69

Yield repay tops up shortfall from nftOwner without balance-delta guard before pool yieldRepayERC20 pull

security bugYieldStakingBase.sol

Rejected

LEN-91

External interest rate model is a single point of failure per asset group

by designInterestLogic.sol

By design

Properties

Review: Open
Component: IsolateLogic
Class: Front Running Attack

security bugConfirmed

isolateLiquidate pays NFT to caller instead of auction winner (lastBidder)

src/libraries/logic/IsolateLogic.sol:471-478+2

Fix in Cursor

After an isolate auction ends, executeIsolateLiquidate transfers the liquidated ERC721 to params.msgSender without comparing the caller to loanData.lastBidder. Any account can front-run the winning bidder's settlement transaction and capture the NFT while the winner's escrowed bid is consumed to repay pool debt.

Impact

The highest isolate-auction bidder can lose 100% of their escrowed bid value plus the NFT: bid tokens are applied to debt repayment (and any excess goes to the borrower), while an arbitrary frontrunner receives the collateral NFT worth the winning bid.

Attack scenario

Alice wins a post-auction isolate loan with a 50 WETH bid. After auctionDuration elapses, Bob monitors the mempool and calls isolateLiquidate before Alice. Bob receives the BAYC NFT; Alice's 50 WETH bid is debited from totalBidAmout to cover debt and any surplus is sent to the borrower, leaving Alice with no NFT and no refund.

Source

src/libraries/logic/IsolateLogic.sol:471-478executeIsolateLiquidate()

470

471 // transfer erc721 to bidder

472 if (params.supplyAsCollateral) {

473 VaultLogic.erc721TransferIsolateSupplyOnLiquidate(nftAssetData, params.msgSender, params.nftTokenIds);

474 } else {

475 VaultLogic.erc721DecreaseIsolateSupplyOnLiquidate(nftAssetData, params.nftTokenIds);

476

477 VaultLogic.erc721TransferOutLiquidity(nftAssetData, params.msgSender, params.nftTokenIds);

478 }

Activity

No activity on this sample finding.

AI vs manual

AI vs manual smart contract audit

Run Guardix first and on every fix. Spend the manual budget where a human is still needed.

Full comparison

Guardix AI audit compared with a manual audit firm
	Guardix	Manual audit firm
Time	2 to 10 hours, by code size	Weeks, plus a waiting list
Price	$200 per repo and commit	Often many times more
Re-audit after fixes	Same $200	Usually a new quote
What it finds	Known vulnerability classes, logic, access-control and accounting bugs	The same, plus deep protocol-specific design review

Proof

104/117

On EVMBench, Guardix found 104 of 117 known vulnerabilities (88.9%) across all 40 official audits. See the EVMBench benchmark.

Manual audit

When you still need a manual audit

Launching with large TVL, novel tokenomics or cross-protocol integrations? Get a human audit too. Run a pre-audit first, so the paid time goes to the hard parts. For lending, AMM and vault code, see the DeFi audit checklist Guardix runs.

FAQ

Questions

What do I get for $200?: One audit of one repository at one commit. The report lists each finding's severity, verdict and code location, and usually arrives in 2 to 10 hours, depending on code size. A re-audit of a new commit costs the same $200, and there is no subscription. To compare with manual audit firms, see smart contract audit cost.
Can you trust an AI smart contract auditor?: Trust the evidence: on EVMBench Guardix found 104 of 117 known issues. Each finding links to code, so you can verify it yourself.
How long does an automated smart contract audit take?: Usually 2 to 10 hours, depending on code size.
Is an AI audit enough before launch?: It's enough to catch what a machine can prove, before launch and after every change. For a high-value mainnet launch, combine it with a manual review.
What if the run fails?: You get a re-run or full credit.