Terms of Use.
The rules of the road for using Opcode services, badges, monitoring, and published reports.
LAST UPDATED · MARCH 30, 2026
Overview
Opcode is a security audit service for Solana-based projects. By using opcode.run or any Opcode services, you agree to these terms.
Services
Opcode provides security audit services including External Reviews, Code Audits, and Full Stack Audits. We also publish free scam reports for public benefit. All audit reports represent our assessment at the time of review and are not guarantees of security.
Audit Reports & Badges
Audit reports are published publicly on opcode.run. Opcode badges (Verified, Audited, Certified) are issued based on audit results and may be revoked if the audited code is modified, the project engages in malicious activity, or monitoring detects unauthorized changes. Badges are non-transferable and represent the state of the project at the time of audit.
Payments
Payments are accepted in SOL and USDC via Solana Pay. All prices are in USD. Payments are non-refundable once an audit has begun. If we are unable to complete an audit, a full refund will be issued.
Limitations
Opcode audits are point-in-time assessments. We do not guarantee that audited projects are free of all vulnerabilities. Our reports should not be considered financial advice. Users should perform their own due diligence before interacting with any project, audited or not.
Monitoring & Revocation
Code Audit and Full Stack Audit tiers include 6 months of live monitoring via Helius webhooks. If a monitored program is upgraded or its authority is transferred, the Opcode badge may be automatically revoked. Revocation is a safety measure and does not imply wrongdoing.
Scam Reports
Opcode publishes free scam reports based on our independent investigation. These reports reflect our findings and professional opinion. Projects flagged as scams may dispute findings by contacting us with evidence.
Intellectual Property
All Opcode branding, badges, report formats, and website content are the property of Opcode. Audited projects may display their earned badge on their website using our embed code. Badge usage must accurately represent the audit status.
Liability
Opcode shall not be held liable for any losses resulting from reliance on our audit reports, badge status, or scam reports. Our maximum liability is limited to the fee paid for the audit in question.
Changes
We may update these terms at any time. Continued use of Opcode services constitutes acceptance of updated terms.