Frequently Asked Questions

Every engagement starts with a free 30-minute discovery call and a written proposal. We price fixed-scope work as a flat fee, and ongoing work on a retainer or time-and-materials basis. Pricing is set after we understand your requirements — we do not publish rate cards because blockchain work varies dramatically in complexity.

Most client projects fall between roughly $10k and $100k+. Smart contract audits and short-scope MVP builds tend to sit on the lower end; full DeFi protocols, custody systems, or multi-chain infrastructure projects are larger.

For well-scoped projects we can typically kick off within one week of signing the agreement. For urgent work, reach out at hello@niftyminds.io with the word “urgent” in the subject line.

Yes. The 30-minute discovery call is free and carries no obligation. If we are not the right fit for your project we will say so, and where possible we will refer you to someone who is.

A line-by-line review of the in-scope code, automated tooling (static analysis, symbolic execution where relevant), threat modeling for the protocol’s economic and governance design, and a written report with severity-rated findings and remediation guidance. We also re-review fixes at no additional charge for findings raised during the audit.

No auditor can honestly guarantee that. An audit substantially reduces risk but does not eliminate it. Our Terms of Service detail the limits of this work; in short, audits cover only the defined scope and commit, and cannot insure against exploits. We are explicit about this because we take it seriously.

Most engagements run 1–2 weeks depending on size and complexity. Larger protocols or systems with novel cryptography take longer. We always give a written timeline before starting.

You get direct access to the engineering leads on your project — not account managers acting as go-betweens. For larger projects a technical project manager coordinates daily updates, weekly demos, and delivery timelines.

Daily written updates in a shared Slack or Discord channel, weekly demo sessions over video, and direct access to the engineers on your project. All code ships to a shared repository from day one.

Client deliverables are assigned to you on payment, subject to the Statement of Work. We retain rights only to generic, reusable components and internal tooling we develop independently. The specifics are spelled out in every engagement letter.

Yes. We sign mutual NDAs before discussing any sensitive material, and we are comfortable working under existing NDAs your legal team has drafted.

Primary stack: Solidity (EVM chains), Rust (Solana, Cosmos SDK, Substrate), and TypeScript/Node.js for backend and indexing. We have also shipped on Move-based chains and Bitcoin Layer 2s. If your stack is outside this list, ask — we will tell you honestly whether we are the right fit.

Not yet. We operate to SOC 2-ready internal practices (access controls, documentation, incident response, secrets management) and will provide details during due diligence. Formal certification is planned; it is not currently in place.

We build the technical infrastructure that supports regulated processes (identity verification integrations, auditable transaction flows, custody-ready architectures). We do not provide legal or compliance advice — clients are responsible for engaging counsel in the relevant jurisdictions.