🛡️ Instant Smart Contract Audit

Q: How much does a smart contract audit cost?

minia2a's static pre-check is $2 and the AI deep audit is $20 — results in minutes, vs formal audits at $5,000-$50,000 that take weeks.

Q: What does the static audit check?

Reentrancy (including checks-effects-interactions violations), access-control gaps, integer overflow, and unvalidated external calls.

Q: Which chains are supported?

Solidity (EVM/Base/Arbitrum/etc.), Rust (Solana/Anchor), and Move (Sui/Aptos). Payment settles on Base.

Get your smart contract checked before you deploy — in minutes, not weeks. No $5k invoices, no audit-firm waitlists. Pay per audit with USDC on Base.

💰 Audits start at just $2 — your first one is free per signed wallet — run a static pre-check for the price of a coffee, then upgrade to the $20 AI deep audit if you want full business-logic coverage. No $5k invoices, no waitlists. The free first audit draws on a shared pool of 20 audits per day across all callers: while it has room your first call returns results with no payment, and once the day's pool is spent every wallet gets a 402 saying the cap was reached. Available, not guaranteed.

🧩 The pre-deploy bundle: $2 static + $20 AI deep = $22. Run the $2 scan to catch the classic exploit classes, then the $20 deep audit for business-logic and economic-model coverage. Two endpoints, one complete first-pass audit before you ship.

🛡️ Verified & live — real USDC settlement on Base. Both tiers are pay-per-call endpoints that settle real USDC on-chain (first audit free per signed wallet — capped at a shared 20/day platform-wide, so available, not guaranteed; no registration, no off-chain credit ledger): /x402/smart-contract-audit ($2) and /x402/ai-audit ($20) return HTTP 402, and every payment lands as a verifiable Base transaction.

Audit options

Service	Price	Covers	Time
Static pre-check `x402/smart-contract-audit`	$2	Reentrancy · access control · integer overflow · unvalidated calls	< 30s
AI deep audit `x402/ai-audit`	$20	Business-logic & economic-model analysis — what static scanners miss · Solidity / Rust / Move	~2 min
Full protocol report PoC-verified	$200–$1,000	Complete report per module — attack paths, code evidence, fixes, with reproducible forge PoC for verified findings	by arrangement

What you get

✓ Deterministic static analysis ($2) — catches the classic exploit classes (reentrancy, CEI violations, access-control gaps)
✓ AI deep review ($20) — business-logic and economic-model vulnerabilities, across Solidity (EVM), Rust (Solana/Anchor), Move (Sui/Aptos)
✓ Severity-ranked findings — critical / high / medium / low, with location and explanation
✓ On-chain payment — pay with USDC, transaction verifiable on Base

How it works

Submit your contract source to the service (source, code, or base64 via source_b64)
Pay with USDC (x402 micropayment — the gateway gives you a 402 challenge, you send payment, get the result)
Receive a severity-ranked findings report in minutes

🔧 SDK note: the @x402 SDK caps automatic payments at $1 by default. For the $2 and $20 audits, set spendControls: false (or raise maxAmountPerPayment) in your client.

Audit your contract →
or call x402/ai-audit for the deep review

📬 Questions about your contract? Email [email protected].

FAQ

How much does a smart contract audit cost?

Formal audits run $5,000–$50,000 and take weeks. minia2a's static pre-check is $2 and the AI deep audit is $20 — results in minutes. It's a fast pre-launch check, not a substitute for a professional audit on high-value contracts.

What does the static audit check?

Four classic exploit classes: reentrancy (including checks-effects-interactions violations), access-control gaps, integer overflow, and unvalidated external calls.

What does the AI audit find that static can't?

Business-logic and economic-model vulnerabilities — incentives, accounting flows, governance edge cases that pattern scanners miss. It's sampled 3× for stability and reports the highest severity honestly.

Is it a substitute for a formal audit?

No. It's a fast, honest pre-launch check to catch critical issues before deployment. High-value contracts should still get a professional audit — but catching a reentrancy bug before you deploy is worth $2.

Which chains?

The AI audit supports Solidity (EVM/Base/Arbitrum/etc.), Rust (Solana/Anchor), and Move (Sui/Aptos). Payment settles on Base.

Why minia2a for audits

minia2a is a permissionless x402 micropayment marketplace — pay per API call with USDC on Base, no subscription, no KYC, no $5k invoices. The audit vertical is our deepest capability: deterministic static analysis plus AI deep review, severity-ranked findings, and every payment settled as a verifiable on-chain transaction. 5% platform fee — 0% through 2026.

Most trust signals in agent payments are post-payment: a seller earns a reputation score only after settlements have already happened. minia2a inverts that. Our audit vertical verifies a contract, a token, or an endpoint's payment logic before you spend USDC — pre-payment verification, not post-payment scoring. When you're deciding whether to pay an unknown endpoint, a backward-looking score arrives too late; a pre-payment check is the decision itself.