Talk to us
Development

From architecture call to mainnet, and the years after it.

From architecture and consulting to the contracts, services and interfaces behind on-chain products. Every build is written against a threat model, tested to invariants, and security-reviewed before it reaches a live network.

Scope a build See how we audit
Solidity, Rust, Vyper, MoveTests written before the codeSecurity-reviewed before handover
Scope

What we build.

Protocols & DeFi

  • AMMs, DEX routers and aggregators
  • Lending and borrowing markets
  • Staking and yield vaults (ERC-4626)
  • Perpetuals and derivatives
  • Liquidity and incentive design
  • Keepers, liquidation and OEV bots

Tokens & assets

  • ERC-20, ERC-721, ERC-1155
  • Confidential tokens (ERC-7984 on Zama)
  • RWA tokenization (ERC-3643)
  • Permissioned transfer and compliance hooks
  • Vesting, airdrops and launchpads
  • Governance and treasury tooling

Application layer

  • dApp front-ends in React
  • Wallet and account abstraction (ERC-4337)
  • Backends, job runners and queues
  • Subgraphs and custom indexers
  • Cross-chain messaging (CCIP)
  • Admin and operations dashboards
Process

How a build runs.

Architecture and threat model

Before any contract is written we agree what the system must never allow. That document becomes the test suite and the audit scope.

Implementation

Written in the language the chain calls for, against the standards your integrators expect, with the invariants encoded as tests from day one.

Test and simulate

Unit and integration coverage, fuzzing, invariant runs and mainnet-fork simulation against real liquidity and real oracle data.

Security review

Reviewed against the threat model before deployment. Findings come back severity-classified, each with a fix and a proof of concept where reproducible.

Deploy and operate

Deployment scripts, verified sources, monitoring and alerting. We stay on to run it if you want us to.

Engagement

Pick the shape that fits the work.

Fixed-scope build

  • A defined deliverable
  • Agreed milestones
  • Security review before handover
  • Fixed price

Embedded team

  • Monthly retainer
  • Engineers in your standups
  • Long-running roadmaps
  • Scales up and down

Consulting

  • Architecture and design review
  • Token and mechanism design
  • Build, buy or integrate decisions
  • Advisory retainer
Stack

What we build with.

SolidityRustVyperMoveTypeScriptFoundryHardhatviemwagmiNode.jsThe GraphTenderlyOpenZeppelinChainlinkZama FHEVM
Standards

Standards we build to.

ERC-20ERC-721ERC-1155ERC-4626ERC-3643ERC-7984ERC-4337ERC-2535EIP-712Chainlink CCIPChainlink CRESafePermit2
Get in touch

Have a protocol to build?

Send the idea, a spec, or a half-finished repo. We will tell you honestly what it needs.

Scope a build
hello@xoralabs.io