Skip to content

Blockchain & Web3

Smart contracts and dApps you can trust with real value.

We design, test and ship Solidity contracts and the apps around them on Ethereum, Base, Polygon, Arbitrum and BNB Chain. Security is the default, not an add-on.

  • 223 tests
  • 100% coverage
  • Slither-analysed

Problems we solve

“We need a token, but we're worried about getting it wrong.”

Tested, standards-based contracts with documented admin models and a verified deployment.

“Our contracts need an audit, but we're not ready.”

Audit preparation: tests, static analysis and a fixes list so the external audit is faster and cheaper.

“Users don't understand our dApp.”

Clear transaction flows, human-readable errors and wallet UX that non-crypto users can follow.

“We need to make on-chain data understandable.”

Dashboards and visualisations that turn transactions into clear money flows and reports.

What we build

01

Smart contracts

Solidity 0.8.x on EVM chains, built on audited OpenZeppelin components, gas-efficient and with an upgrade strategy that matches your risk profile.

02

Tokens, vesting & staking

ERC-20 tokens, team and investor vesting with cliffs, staking and reward distribution. Edge cases tested, not assumed.

03

NFTs

ERC-721 and ERC-1155 collections with Merkle allowlists, ERC-2981 royalties, delayed reveal and mint pages.

04

Escrow, DAOs & treasury

Milestone escrow, subscription payments, Governor + Timelock DAO governance and multisig-controlled treasuries.

05

dApp frontends

Wallet connection, on-chain reads, clear transaction flows and human-readable error states — built with viem and modern React.

06

On-chain analytics & forensics

Dashboards and tracing tools that turn raw blockchain data into clear money-flow charts and reports.

07

Security & audit preparation

Test suites, fuzzing, Slither static analysis and a documented fixes list, so your external audit is faster and cheaper.

08

Real-world assets

Tokenisation of real-world assets with custodian-controlled mint/burn and proof-of-reserve checks.

What you get

  • Solidity source with NatSpec documentation
  • Foundry test suite with fuzz tests
  • Slither report with a fixes list
  • Deployment scripts and verified source on the block explorer
  • Architecture and threat-model notes
  • Full IP transfer and repository handover

We build technology, not investment products. Showcase tokens are never sold or promoted as investments; for token projects we recommend involving legal counsel early (e.g. MiCA in the EU).

Showcase

Try it live

Standards: Solidity 0.8.x, OpenZeppelin, Foundry tests with fuzzing, Slither static analysis, verified source. Foundry suite with unit, fuzz and invariant tests, 100% line and branch coverage, and Slither static analysis in CI with no open high or medium findings.

Showcase

Milestone Escrow

The client locks the full budget up front, split into milestones. Funds move only on release, arbiter decision or cancellation.

Solidity 0.8.28OpenZeppelin v5ETH / ERC-20

223 tests · 100% coverage · Slither‑analysed

Showcase

Token + Vesting + Staking

A capped ERC-20 with gasless approvals, vesting schedules with cliff for team and investors, and Synthetix-style staking rewards.

ERC-20EIP-2612OpenZeppelin v5

223 tests · 100% coverage · Slither‑analysed

Showcase

SigmaNFT Collection

A fair NFT launch: allowlist and public phases, per-wallet limits, immutable max supply, ERC-2981 royalties and a delayed reveal.

ERC-721ERC-2981Merkle proofs

223 tests · 100% coverage · Slither‑analysed

Showcase

Gold-Backed Token (RWA)

Backing becomes a precondition of minting: tokens can only be minted if the reported gold reserve covers the new total supply.

ERC-20AccessControlProof of reserve

223 tests · 100% coverage · Slither‑analysed

Showcase

SigmaGovernor DAO

Holders delegate, propose and vote; successful proposals are queued in a timelock and executed only after a delay.

OpenZeppelin GovernorERC20VotesTimelockController

223 tests · 100% coverage · Slither‑analysed

Showcase

Subscription Manager

Merchants create plans, subscribers approve once, and a keeper charges each period — funds flow directly to merchant and payees.

ERC-20SafeERC20OpenZeppelin v5

223 tests · 100% coverage · Slither‑analysed

Showcase

SigmaVault (ERC-4626)

Users deposit an asset, receive shares and redeem them for their pro-rata part of the pool — compatible with every ERC-4626 integrator.

ERC-4626OpenZeppelin v5Virtual shares

223 tests · 100% coverage · Slither‑analysed

Testnet demo

On-chain demo (Sepolia)

Connect a browser wallet on the Sepolia testnet, mint a free NFT and run a two-milestone escrow step by step.

Try it live
Live AI demo

Smart Contract AI Reviewer

Paste Solidity or pick one of our showcase contracts and get a structured, severity-ranked security pre-review.

Try it live
Live AI demo

Document Q&A with citations

Upload a PDF or paste text and ask questions. Every answer links back to the exact passages it's based on.

Try it live

Packages

Transparent starting prices. Every project begins with a free scoping call and a written proposal.

Starter

Smart Contract Starter

ERC-20 or NFT contract with tests and a verified deployment.

from$3,000

  • ERC-20 or ERC-721/1155
  • Foundry test suite
  • Verified on the explorer
  • Deployment scripts
Start with this package

Growth

Recommended

dApp Growth

Contracts plus frontend and wallet integration.

from$10,000

Typically $10,000 – $30,000

  • Multiple contracts
  • dApp frontend
  • Wallet integration
  • Slither report
Start with this package

Enterprise

Protocol & RWA

Complex protocols, governance, real-world-asset tokenisation.

Custom quote

  • Architecture & threat model
  • Governance & treasury
  • Audit coordination
  • Long-term support
Request a quote

Prices in USD, excl. VAT. EU B2B invoices via reverse charge.

Fixed scope, fixed price

Audit-Readiness Sprint

Get your smart contracts ready for an external audit.

Fixed price

$4,500 – $8,5001–2 weeks

1 week for up to ~1,000 nSLOC, 2 weeks for up to ~2,500 nSLOC. Larger codebases are quoted individually.

What's included

  • Threat model: actors, privileged roles, trust assumptions and attack surfaces
  • Test-suite gap analysis with a line and branch coverage report
  • Fuzz and stateful invariant tests (Foundry) for the critical paths
  • Slither run with every finding triaged
  • Prioritised fixes list with concrete recommendations

You receive

An audit handoff pack — frozen scope and commit, architecture notes, invariants, known issues and test instructions — so the auditors spend their time on your logic.

Prepares your code for an external audit; it does not replace one.

Request this sprint

Free checklist

Smart contract audit-readiness checklist

Scope, documentation, tests, fuzzing, static analysis and audit logistics — what to prepare before you pay for an external audit.

Read online

Direct PDF download — no email required.

Not sure which package fits?

Answer five short questions and get an indicative budget range and duration for your project.

Get an estimate

Selected work

Client work and showcase projects

Client platforms shown with permission, plus our own clearly labelled showcase projects you can try.

Client workBlockchain & Web3

RCIID

Blockchain forensics · Austria

A platform for an Austrian blockchain forensics firm that presents crypto transaction tracing to lawyers, authorities and victims.

Read case study
Client workWeb & Platforms

GAGA Menjačnica

Currency exchange & precious metals · Novi Sad, Serbia

A fast Next.js platform for a currency exchange and gold & silver dealer in Novi Sad.

Read case study
Client workWeb & Platforms

Sisak Green

Green energy & circular economy · Sisak, Croatia

A bilingual (DE/EN) investor platform for an industrial waste-to-energy project in Croatia.

Read case study

Showcase projects by sigmacode

See all work

Tech stack

Blockchain & Web3

  • Solidity
  • Foundry
  • Hardhat
  • OpenZeppelin
  • ethers.js
  • viem
  • wagmi
  • The Graph
  • Chainlink oracles
  • EVM chains: Ethereum, Base, Arbitrum, Polygon, BNB Chain, Optimism
  • Token standards: ERC-20, ERC-721, ERC-1155, ERC-4626, ERC-2981
  • Account abstraction (ERC-4337)
  • Multisig wallets (Safe)
  • Security tooling: Slither, fuzzing, invariant testing
  • On-chain analytics & forensics

Web & Platforms

  • Next.js
  • React
  • TypeScript
  • Node.js
  • NestJS
  • Python
  • PostgreSQL
  • Prisma
  • Redis
  • Tailwind CSS
  • Headless CMS: Sanity, Strapi, Payload
  • Stripe
  • i18n at scale
  • REST & GraphQL APIs
  • WebSockets & real-time
See the full tech stack

How a project runs

  1. 01

    Discovery

    A free scoping call to understand your goals, users and constraints. We ask the uncomfortable questions early.

  2. 02

    Plan

    A written proposal with architecture, scope, milestones, risks and a fixed price or milestone budget.

  3. 03

    Milestones

    We build in short iterations with working demos. You get repository access and can give feedback at every step.

  4. 04

    Handover

    Deployment, documentation and a walkthrough for your team. Full IP transfer on final payment.

  5. 05

    Care

    Optional retainer for maintenance, hosting, security updates and continuous improvement.

Process

Frequently asked questions

Which chains do you work with?

EVM chains: Ethereum, Base, Polygon, Arbitrum and BNB Chain, plus their testnets. Showcase contracts are deployed to Sepolia first.

Is your review a replacement for an audit?

No. Our audit preparation makes an external audit faster and cheaper, but for contracts that hold significant value we always recommend an independent audit firm.

Can you take over an existing contract codebase?

Yes. We start with a review of the code, tests and deployment setup and give you a written assessment before proposing any changes.

Do you use upgradeable contracts?

Only where it's justified. Upgradeability adds trust assumptions; we discuss the trade-off with you and document the admin model either way.

How long does a typical smart contract project take?

A focused token or NFT contract with tests and a verified deployment usually takes a few weeks; dApps and multi-contract systems take longer. You get a milestone plan with the proposal.

Do you deploy to mainnet for us?

Yes, if you want. We prepare deployment scripts, run the deployment together with you and verify the source on the block explorer. Keys stay under your control, ideally in a multisig.

Can you help with tokenomics or legal questions?

We implement token mechanics technically and point out risks, but we don't provide legal or financial advice. We recommend involving legal counsel early, especially under MiCA in the EU.

Let's scope your project

A short call is enough to tell whether and how we can help, and what it will roughly cost.

Prefer to write first? Write to us