Security · Review
ActivexAudits Review 2026: Solidity and Rust Security Audits
xAudits is a smart-contract security firm that reviews Solidity and Rust code, including DeFi protocols, and publishes audit reports. Its stated process includes remediation checks, but fees, auditor credentials and details about its own security are not published.
By the DappsAtlas editorial team · Updated
DappsAtlas score
6.8/10
Good
Our verdict on Xaudits
6.8/10xAudits may suit teams that need a Solidity or Rust smart-contract review and want a documented process for findings and remediation. Its clearest strengths are its coverage of both contract-level and protocol-level risks, plus published reports that prospective clients can inspect. The main caveats are that pricing, timelines and auditor credentials are not published, and an audit cannot guarantee a protocol is secure. Teams should confirm the proposed scope and review the report’s findings and fix status before treating it as evidence of reduced risk.
Score breakdown
How Xaudits scores
- Security
- n/a
- Ease of use
- 7.0/10
- Fees
- n/a
- Features
- 7.0/10
Scores run from 0 to 10 and are based only on facts we could verify. Where information was missing we mark the score n/a rather than guess.
What is Xaudits?
xAudits is a smart-contract security firm offering audits of Solidity and Rust code. It describes work on individual contracts and broader protocol logic, including DEX, lending and staking systems. Its stated ecosystem expertise covers EVM, Solana and MultiversX.
The firm says its process combines manual code review with targeted analysis, then reports prioritized findings and recommendations. It also offers to review fixes within the agreed scope. Its homepage lists 18 published audit reports, with examples covering Ethereum, Base, Solana and MultiversX projects.
Audit fees, timelines and auditor credentials are not published on the homepage. The company is identified there as MGStaking S.R.L.; further details about its team and internal security practices are not provided.
How Xaudits works
xAudits describes a four-stage process. First, the team maps the project architecture, agrees on what is in scope and clarifies how the protocol is meant to work. It then conducts manual code review and targeted analysis to look for implementation flaws, risky assumptions and potential attack paths.
The firm says it delivers prioritized findings with explanations and practical recommendations. After the project team makes fixes, xAudits reviews them within the agreed scope and documents the outcome in the final report. An audit is a point-in-time review of specified code, not a guarantee that every vulnerability has been found or that later changes are safe.
5 features
Key features
01
Solidity and Rust audits
The firm says it audits code written in Solidity and Rust, from individual contracts to interconnected protocols.
02
Protocol security reviews
Reviews can examine protocol logic and interactions, with examples of focus areas including DEXs, lending and staking.
03
Multi-ecosystem experience
Its stated ecosystem experience includes EVM networks, Solana and MultiversX.
04
Published reports
The homepage lists 18 published audit reports and showcases work across several projects and networks.
05
Remediation review
The process includes prioritizing findings, recommending fixes and reviewing remediation within the agreed scope.
Pros and cons
What we like
- The stated audit scope covers both Solidity and Rust.
- It considers protocol logic and interactions in addition to individual contracts.
- The firm describes a process for reviewing remediation, not just issuing findings.
- It publishes audit reports that prospective clients can examine.
Watch out for
- Audit fees and timelines are not published.
- The homepage does not identify the auditors or explain their qualifications.
- Audit reports can only assess the code and scope reviewed; they do not guarantee that a protocol is secure.
- xAudits does not publish information about audits of its own business or internal security practices.
Xaudits fees
Audit fees are not published. The cost is likely to depend on the code and scope being reviewed, but xAudits does not state a pricing method; teams need to contact the firm for a quote.
Is Xaudits safe?
A smart-contract audit can help identify vulnerabilities in the code and scope reviewed, but it cannot establish that a protocol is risk-free. Risks may remain in components outside the review, integrations, operational controls or code changed after the audit. Review the scope, findings and remediation status of any report before relying on it.
xAudits describes its own review process but does not publish an audit of its business, auditor credentials or details of its internal security practices. Its homepage does not state a regulatory status. No specific security incidents are disclosed there.
5 steps
How to get started with Xaudits
- 1
Contact xAudits to describe the project and request an audit discussion.
- 2
Agree on the review scope and help the team understand the protocol architecture and intended behavior.
- 3
Provide the code and relevant project details for review.
- 4
Review the audit report, prioritized findings and suggested remediation.
- 5
Arrange for fixes to be checked within the agreed scope and review the documented outcome.
Who Xaudits is for
xAudits is aimed at teams building smart contracts or protocols in Solidity or Rust, particularly projects that need an external review of code, DeFi logic or interactions between contracts. It may also suit teams that want a documented findings process and a follow-up review of fixes. Prospective clients should confirm the auditor, scope, timeline and price directly before engaging.
Xaudits FAQs
What does xAudits do?
xAudits says it reviews Solidity and Rust smart contracts, including DeFi and protocol systems. Its listed ecosystem expertise includes EVM, Solana and MultiversX.
How does an xAudits smart-contract audit work?
The firm describes a process that starts with agreeing on scope and understanding the project, followed by manual code review and targeted analysis. It then reports prioritized findings and reviews fixes within the agreed scope.
Does an xAudits audit guarantee a smart contract is safe?
No. An audit is an assessment of specified code and scope, not a guarantee that a contract or protocol is free of vulnerabilities. Risk can remain in unaudited components, integrations, later code changes or issues that were not found during review.
How much does an xAudits audit cost?
xAudits does not publish its audit pricing on its homepage. Teams need to contact the firm to discuss their project and scope.
Which blockchains and programming languages does xAudits support?
The homepage lists published work involving Ethereum, Base, Solana and MultiversX, and names experience across Ethereum, Solana, Polygon and BNB Chain. Contact xAudits to confirm whether a particular language, chain or project scope is covered.
Compare
Xaudits alternatives
Sherlock is a Web3 security firm offering audits, contests, AI review and bug bounties for onchain teams, formerly known for DeFi coverage.
Hats.V2 is a permissionless onchain marketplace for bug bounties and audit competitions, aimed at projects, security researchers and liquidity providers.
A token-scanning tool that simulates trades and checks contracts to flag honeypots and high taxes before you buy.
Quick Intel is an AI-assisted smart contract and token scanner aimed at crypto users checking for scams before trading.
Project Mimir is self-hosted osquery endpoint visibility software for security teams managing and investigating device fleets.
BICScan screens blockchain addresses, dApp domains, and EVM token contracts for users seeking an extra risk check before interacting.
Same category
More Security dApps
Hawk Finance provides AI-powered AML, screening, fraud detection, and investigation software for banks, payment firms, and fintechs.
NixGuard is a compliance preparation and endpoint monitoring platform for organizations working toward audits.
Forta is an on-chain monitoring and security network for developers, security teams and FORT holders considering staking.
Quantstamp provides audits and operational security services for Web3 teams seeking help assessing blockchain code and infrastructure.
SecureDApp offers blockchain security audits, threat monitoring, forensics, compliance, and development services for Web3 teams.
Cyberscan is a cybersecurity service for organizations that want domain scans, ongoing monitoring, and risk reports.
Same chain
More on Ethereum
Lido is a liquid staking protocol where users stake ETH and receive stETH, a reward-earning token usable across DeFi, governed by LDO holders.
Aave V3 is a non-custodial DeFi lending protocol on 21 chains where users earn interest on deposits or borrow against collateral.
Uniswap V4 is the latest Uniswap DEX version with hooks and concentrated liquidity, running on 22 chains for self-custody token swaps and liquidity provision.
Uniswap V3 is a non-custodial decentralized exchange protocol for token swaps and concentrated liquidity provision across 40+ chains.
DeFi Saver is a non-custodial tool for managing and automating leveraged lending positions across major DeFi protocols on Ethereum and layer-2 networks.
OKX is a major centralized crypto exchange for spot and derivatives trading, earn products and a Web3 wallet, with its own OKB token.
How we checked
Sources
No public sources were recorded for this review.
Last updated . Spotted an error? Tell us and we will correct it.