About the Role
The Smart Contract Auditor reviews VistralNova's on-chain code before it reaches production, and helps set the security standards the rest of the engineering team works to. This role focuses on finding vulnerabilities, logic errors, and economic attack paths in contracts covering digital assets, marketplaces, rewards, and game mechanics. On-chain mistakes are permanent and public, and the value at risk is real — so this work is deliberately separate from the people writing the contracts. You will be the person whose job is to disagree, and to be listened to when you do.
What You'll Do
- Audit smart contracts for vulnerabilities, logic errors, and unsafe assumptions before deployment.
- Review upgrade paths, access control, and privileged operations for abuse potential.
- Analyse economic and game-theoretic attack surfaces in reward and marketplace mechanics.
- Write clear findings with severity, reproduction, and concrete remediation.
- Re-test fixes and confirm that a resolved finding is genuinely resolved.
- Help define secure development standards, review checklists, and test requirements.
- Advise engineers on secure patterns early, when changes are still cheap.
What We Look For
- Demonstrated smart contract security experience, with findings you can talk through.
- Deep understanding of Solidity and the EVM, including gas, storage, and call semantics.
- Familiarity with common vulnerability classes and the incidents that made them famous.
- Experience with security tooling: static analysis, fuzzing, invariant and property-based testing.
- Ability to reason about economic incentives, not only code correctness.
- Precise written communication — an audit report is the deliverable.
- Judgment about severity, so real risks are not buried among stylistic notes.
Nice to Have
- Published audit reports, competitive audit results, or responsible disclosures.
- Experience auditing NFT, marketplace, staking, or reward-distribution systems.
- Familiarity with Rust, Substrate, Ink!, or non-EVM contract environments.
- Experience with wallet security, key management, or account-abstraction risks.
About VistralNova
VistralNova is a technology company building developer tools, game systems, AI-powered experiences, and digital infrastructure for modern interactive products. Our work brings together software engineering, game design, artificial intelligence, and asset-ready infrastructure to help teams create products that are practical, scalable, and easier to trust.
We are evolving toward a flexible technical foundation aligned with Polkadot and PVM-based architecture. Our team values clean architecture, practical execution, strong engineering standards, and long-term product quality.
