Terms of Service

1. Scope of these terms

By using this site you accept these terms. They govern the site, the sample reports and any information you send us before an engagement exists. Audits, due diligence and compliance work are governed by a separate engagement letter or statement of work signed by you and HashKrypt Technologies. Where that document and these terms conflict, that document wins.

2. Nothing here is advice

The content on this site is information about our services. It is not legal, regulatory, tax, financial or investment advice, and it does not create a client relationship. The regulatory references in our compliance material describe real regimes in general terms; how a regime applies to your product depends on facts we have not seen and on local counsel.

3. The sample reports are fictional

Every sample report on this site describes an invented product. The company, addresses, emails, names, findings and figures are made up to show the format and depth of our deliverables. They are watermarked as samples. Nothing in them is a real finding about a real product, and none of it may be presented as one.

4. What an audit is, and what it is not

This is the most important section on this page. An audit is a time-boxed expert review of a defined scope at a defined commit. It is not a guarantee.

• We do not warrant that reviewed code is free of vulnerabilities. No review method, ours included, can prove the absence of every flaw.
• Our findings apply only to the scope and the exact commit stated in the report. Code changed, redeployed, upgraded or configured differently after the review is outside it.
• Dependencies, external protocols, oracles, off-chain infrastructure and network-level behaviour are out of scope unless the report says otherwise.
• A clean report is not a prediction that the product will not be exploited, and not a statement about its market, its team or its solvency.
• Compliance assessments identify the licences and obligations a design appears to trigger. They are not a licence, an approval or a regulator's opinion.

5. A report is not an endorsement

A report or public attestation from us confirms that we performed a defined review and states what we found. It is not an endorsement of the product, a recommendation to invest, a promise of safety or any statement about future returns. Do not present it as one, in marketing or anywhere else.

If you publish our report, publish it in full, unmodified, with its date and scope intact. Excerpts, summaries, scores and quotations require our written consent, because a finding taken out of scope misleads the reader.

6. Quotes, scope and fees

Response times mentioned on this site, including our commitment to quote within 48 hours, describe how fast we reply. They are not a price, a booked slot or a delivery deadline. Fees, scope, schedule, payment terms and any re-audit are fixed in the engagement letter before work starts.

7. Your responsibilities

• You confirm you own the code and material you send us, or are authorised to have it reviewed.
• You authorise us to test what is in scope, including on forks and testnets, and you confirm that authorisation covers any third-party system we are asked to touch.
• You give us accurate and complete information. Findings we could not reach because material was withheld are on you, not on us.
• You remain responsible for deciding what to fix, what to accept and when to deploy. We advise; you ship.

8. Intellectual property

• This site, its text, design, graphics and sample documents belong to us. Do not copy or republish them without permission.
• You keep all rights in the code and material you give us.
• On full payment you own the report we deliver and may use and publish it under section 5.
• Our methodology, tooling, checklists and internal working papers remain ours.

9. Third-party names and logos

Blockchain names and logos shown on this site are the trademarks of their respective owners. We display them to state which networks we have worked on. Their presence does not imply partnership, sponsorship or endorsement by those projects, in either direction.

10. Acceptable use of this site

Do not attack, overload, scrape at scale, probe or attempt to break this site or the systems behind it. Do not impersonate us, and do not forge our name, signature or attestation on any document.

Found a real security issue in our own site or infrastructure? Report it to support@hashkrypt.com and give us reasonable time to fix it. We will credit you if you want the credit. Testing that damages the service or exposes other people's data is not welcome, and not covered.

11. Availability and warranties

This site is provided as is. We do not promise it will be uninterrupted, error free, or that every link and sample stays available. To the extent the law allows, we exclude all implied warranties for the site and its content. Warranties for paid work are only those written in the engagement letter.

12. Limitation of liability

To the maximum extent permitted by law, we are not liable for indirect, incidental, special or consequential loss, and specifically not for lost profits, lost tokens or digital assets, loss of business, exploits of code outside the reviewed scope, or losses arising from decisions you made after reading our report.

Our total liability arising out of an engagement is capped at the fees you paid for that engagement, unless the engagement letter sets a different cap. Nothing here excludes liability for fraud, wilful misconduct or anything else that cannot be excluded by law.

13. Indemnity

You will cover our losses if they arise because you sent us material you had no right to send, because you asked us to test a system you were not authorised to test, or because you presented our report as something it is not.

14. Confidentiality

Both sides keep the other's non-public information confidential. Our handling of your material is set out in the Privacy Policy and in the non-disclosure agreement we sign before code changes hands.

15. Governing law

These terms are governed by the laws of India, and disputes go to the courts at Chennai, Tamil Nadu. Nothing in this section removes a consumer protection you have under the law of your own country.

16. Changes and contact

We may update these terms. The date at the top is the version in force, and continuing to use the site after a change means you accept it. Questions: support@hashkrypt.com.