Freelance › Projects › Web development › Web programming › ERC-20 Token: Solidity Development + Security Audit
ERC-20 Token: Solidity Development + Security Audit
Employer
Ivan
Project parameters
Type of cooperationOne-time project
SectionWeb development, Web programming
Prepaymentwithout prepayment
Payment methodsCash, Bank transfer
Acceptance of requestsfrom today, 21:33 until Sep 6, 2026
Project description
Our team is preparing to launch a utility token for an early-stage Web3 product, and we are looking for an experienced Solidity engineer to build and harden the core smart contract before we move anywhere near mainnet. The scope covers the full lifecycle of a single ERC-20-style token: designing the contract, implementing it cleanly, covering it with a serious test suite, and then subjecting the whole thing to a structured security review. We are not looking for a copy-pasted template dropped into a repository. We want a well-reasoned implementation where every public and external function has a clear purpose, access control is explicit, and the behaviour under edge cases is documented and demonstrated with tests rather than assumed.
On the development side you will write the token contract in Solidity, implement the standard transfer, approval and allowance mechanics, and add the administrative functions our product actually requires, such as controlled minting, optional burning, and pausing in an emergency. All privileged actions must sit behind proper access control, and the contract should follow current best practices for storage layout, event emission and error handling. The security review is an equally important half of the engagement: we expect a deliberate pass over reentrancy, integer overflow and underflow, and access-control weaknesses, along with checks for unsafe external calls and any logic that could let a caller drain or lock funds. The findings must be captured in a clear audit report that ranks each issue by severity, explains the impact, and proposes a concrete fix.
Deliverables are the finished contract, a passing automated test suite with meaningful coverage of both normal and adversarial paths, a written security audit report, and a short gas-optimization summary showing where costs were reduced and what trade-offs were made. Please share relevant prior smart-contract work when you apply.
— Solidity ERC-20 contract with transfer, approval, mint, burn and pause logic behind explicit access control
— Automated test suite covering normal usage and adversarial edge cases
— Security audit report: reentrancy, overflow/underflow, access control, ranked by severity with fixes
— Gas-optimization notes with before/after figures and any trade-offs
On the development side you will write the token contract in Solidity, implement the standard transfer, approval and allowance mechanics, and add the administrative functions our product actually requires, such as controlled minting, optional burning, and pausing in an emergency. All privileged actions must sit behind proper access control, and the contract should follow current best practices for storage layout, event emission and error handling. The security review is an equally important half of the engagement: we expect a deliberate pass over reentrancy, integer overflow and underflow, and access-control weaknesses, along with checks for unsafe external calls and any logic that could let a caller drain or lock funds. The findings must be captured in a clear audit report that ranks each issue by severity, explains the impact, and proposes a concrete fix.
Deliverables are the finished contract, a passing automated test suite with meaningful coverage of both normal and adversarial paths, a written security audit report, and a short gas-optimization summary showing where costs were reduced and what trade-offs were made. Please share relevant prior smart-contract work when you apply.
— Solidity ERC-20 contract with transfer, approval, mint, burn and pause logic behind explicit access control
— Automated test suite covering normal usage and adversarial edge cases
— Security audit report: reentrancy, overflow/underflow, access control, ranked by severity with fixes
— Gas-optimization notes with before/after figures and any trade-offs
