Scope a Review

Terms of Use

Last updated: September 10, 2026

These Terms of Use govern your access to and use of the website operated by Eraikey Labs Ltd ("Eraikey", "we", "us" or "our"), a company incorporated under the laws of the Republic of Cyprus under company number HE 457541 and with VAT No. CY60071238O, including any text, reports, blog posts, materials, links, graphics, logos, and other content made available on the website. These Terms apply to use of the website only. Our professional services, including audits, security reviews, consulting, and retainers, are governed by separate written agreements, statements of work, or engagement terms. BY USING THIS WEBSITE, YOU AGREE TO BE BOUND BY THESE TERMS AND CONDITIONS. IF YOU DO NOT AGREE TO ANY OF THE TERMS OR CONDITIONS PROVIDED HEREIN, PLEASE DO NOT USE THIS WEBSITE.

1. Services

1.1 Website Content and Professional Services

The website provides general information about our company, research, publications, and professional services. It does not itself create a client relationship or professional engagement.

Security audits, code reviews, consulting, retainers, incident support, and other professional services are provided only under a separate written agreement or statement of work signed or otherwise accepted by both parties. If these Terms conflict with a signed agreement, the signed agreement controls.

1.2 Open-Source Materials

We publish open-source code and related materials through GitHub and other platforms. Your use of those materials is governed by the section "GitHub Repositories and Open-Source Materials" (Section 16) below and by any applicable LICENSE file in the relevant repository.

Open-source software made available by us is governed by the applicable license included with that software, and not by these Terms to the extent the license states otherwise.

2. No Client Relationship; No Confidential Submissions

Contacting us, requesting a quote, scheduling a call, or exchanging messages with us does not create a client relationship. A client relationship begins only when we enter into a written engagement agreement or statement of work.

Unless we have signed a confidentiality agreement or engagement agreement with you, information submitted through the website or by email is not treated as confidential. Do not send private repositories, credentials, seed phrases, exploits, vulnerability details, proprietary code, or other sensitive information until we have agreed appropriate terms.

3. Permitted Use and Restrictions

You may use the website and its content only for lawful purposes and to learn about our company, research, and services. You agree that you will not:

  • use the website in violation of applicable law or these Terms;
  • copy, modify, distribute, sell, sublicense, or commercially exploit website content without our permission;
  • use automated tools, crawlers, scrapers, or similar technologies to extract content from the website without our permission;
  • use website content for machine learning, AI model training, dataset creation, or automated output generation without our prior written permission, except to the extent that such a restriction cannot lawfully be imposed;
  • attempt to gain unauthorized access to the website, our systems, or any related infrastructure;
  • interfere with, damage, overload, or impair the website or its operation;
  • misrepresent your identity or affiliation with any person or organization;
  • use the website to transmit unlawful, defamatory, abusive, deceptive, malicious, or otherwise harmful content.

4. Sanctions and Export Compliance

You may not use the website in violation of applicable sanctions, export control, or other applicable laws. You are responsible for ensuring that your use of the website complies with applicable law.

5. Intellectual Property

Except for third-party trademarks, logos, icons, and materials, all text, graphics, logos, information, and other content on this website are owned by Eraikey or its licensors and are protected by applicable intellectual property laws.

Eraikey's name, logos, and branding may not be used without our prior written permission, except to accurately refer to us.

Third-party trademarks, service marks, logos, and icons, including GitHub and X, are the property of their respective owners. Their use on this website is for identification and linking purposes only and does not imply endorsement, sponsorship, or affiliation.

You may make truthful, non-misleading references to us where necessary to identify us or discuss our company, website, publications, or services. However, unless we agree otherwise in a separate written agreement, you may not use our name, logos, branding, audit reports, report excerpts, quotes, ratings, badges, client relationship, or engagement status in any press release, website, social media post, investor material, token listing, exchange listing, app-store submission, marketing material, or other public announcement in a way that suggests we reviewed, audited, endorsed, approved, certified, verified, secured, or recommend your project without our prior written permission.

Factual references to us must be truthful, non-misleading, and must not imply endorsement, certification, approval, partnership, or any security guarantee. Use of our logos, branding, report excerpts, quotes, ratings, badges, or similar materials always requires our prior written permission unless expressly permitted in a separate written agreement.

Except as expressly allowed by us or by an applicable open-source license, you may not copy, reproduce, modify, publish, distribute, display, or create derivative works from the website content without our prior written permission.

6. Third-Party Links

The website may contain links to third-party websites, tools, repositories, or services. We are not responsible for third-party content, availability, security, privacy practices, or accuracy. Links do not imply endorsement.

7. Disclaimers

The website and its content are provided for general informational purposes only and are provided "as is" and "as available". We do not warrant that the website or content will be accurate, complete, secure, uninterrupted, available, or error-free.

Website content does not constitute legal, financial, investment, tax, security, or other professional advice. You should not rely on website content as a substitute for a written engagement with us or advice tailored to your specific circumstances.

8. Blockchain and Security Disclaimers

Blockchain technology and related decentralized technologies are emerging innovations that carry security, financial, technical and legal risks. You acknowledge and agree that blockchain technology and related decentralized technologies involve foreseeable and unforeseeable risks, including security, financial, technical, operational, and legal risks. You are solely responsible for evaluating those risks before using, deploying, interacting with, or relying on any protocol, product, software, token, smart contract, report, research content, or other material discussed on the website.

The availability or operation of the website may be affected by changes in applicable law, regulatory requirements, governmental action, or other circumstances beyond our reasonable control.

As part of certain professional engagements, we may produce reports and other materials summarizing our security analysis of protocols, software, systems, or other technology ("Reports"). Where a Report or other deliverable arises from a client engagement, its confidentiality, publication, permitted use, and disclosure are governed by the applicable engagement agreement, statement of work, or other written terms between us and the client.
Where a Report is made publicly available, its content reflects the scope of work performed and information available at the time of the relevant review. Reports may become incomplete or outdated as code, deployments, dependencies, configurations, assumptions, or other circumstances change. Reports do not constitute representations or warranties regarding the security of any protocol, product, system, or project. You assume responsibility for decisions made in reliance on publicly available Reports.

A security review, audit, report, tool, publication, or other communication from us reduces certain risks but cannot guarantee that code, systems, protocols, smart contracts, wallets, applications, or infrastructure are secure, error-free, exploit-free, or suitable for any particular purpose.

Publication of an audit report or other material does not constitute an endorsement of any protocol, token, product, team, transaction, investment, or business decision.

9. Indemnification

You agree to indemnify and hold us, our directors, officers, employees, contractors, and agents harmless from and against claims, losses, liabilities, damages, costs, and reasonable legal expenses arising out of or in connection with your misuse of the website, your violation of these Terms, your infringement of third-party rights, or your violation of applicable law.

10. Limitation of Liability

To the maximum extent permitted by applicable law, our total aggregate liability, and the total aggregate liability of our directors, officers, employees, contractors, agents, and service providers, for all claims, losses, liabilities, and damages arising out of or in connection with your access to or use of the website, website content, Research content, GitHub repositories, open-source materials, templates, scripts, checklists, examples, proof-of-concept materials, testing harnesses, or other free materials made available by us, whether in contract, tort, negligence, misrepresentation, restitution, statute, or otherwise, shall not exceed €100 in total.

For paid professional services, including audits, security reviews, consulting, retainers, incident support, and other professional services, any applicable limitation of liability will be governed by the relevant written agreement, statement of work, order form, or engagement terms, and not by the €100 cap above, unless the applicable written agreement expressly states otherwise.

The website content is provided for general informational purposes only and does not constitute security advice, an audit report, a warranty, or a professional services deliverable.

Nothing in these Terms excludes or limits liability for fraud, fraudulent misrepresentation, death or personal injury caused by negligence, willful misconduct, gross negligence, or any other liability that cannot be excluded or limited under applicable law.

11. Modifications to these Terms

We may update these Terms from time to time by posting the updated version on the website and changing the "Last updated" date above. The updated Terms will apply to your use of the website after they are posted. If you do not agree to the updated Terms, you should stop using the website.

12. Notice of Infringement

If you believe that content on the website infringes your intellectual property rights, you can contact us at legal@eraikey.com .

13. Governing Law and Jurisdiction

These Terms and any dispute or claim arising from or related to the website or website content are governed by the laws of Cyprus, without regard to conflict of law principles. The courts of Cyprus have exclusive jurisdiction, except that we may bring proceedings in any competent court to protect our intellectual property rights or confidential information.

14. Electronic Notices

Notices relating to these Terms may be sent by email to legal@eraikey.com or posted on the website.

15. Research and Disclosures

From time to time, we may publish research, technical analyses, vulnerability disclosures, security advisories, audit-related insights, or other educational content in the Research section of the website.

Our Research content is provided for general informational and educational purposes only. It does not constitute a security audit, assurance report, certification, warranty, professional advice, legal advice, financial advice, investment advice, or a recommendation to buy, sell, hold, use, or rely on any token, protocol, software, product, service, or project.

Unless expressly stated otherwise in a separate written agreement signed by us, Research content is not a deliverable under any audit, retainer, consulting engagement, or statement of work. Any services we provide to clients are governed only by the applicable written agreement, statement of work, or engagement terms.

Research undertaken independently of a client engagement does not become a client deliverable merely because it concerns a current, former, or prospective client. This does not affect any confidentiality, intellectual property, disclosure, embargo, or other obligations that apply under a separate written agreement or applicable law.

Research content may be based on information available at the time of publication and may become incomplete, inaccurate, or outdated. We do not undertake any duty to update Research content, although we may do so at our discretion.

Any technical information, proof-of-concept material, vulnerability discussion, exploit analysis, or code excerpts are provided to support security research, education, testing, remediation, vulnerability validation, and responsible or coordinated disclosure. Publication of Research content does not grant you permission or authorisation to access, test, exploit, interfere with, manipulate, or otherwise interact with any third-party system, network, protocol, wallet, account, smart contract, or data. You are responsible for ensuring that any security testing or research you perform is lawful and within the scope of all applicable authorisations, engagement terms, bug bounty rules, or other permissions.

Where Research content discusses a third-party project, protocol, product, company, token, or service, such discussion does not imply endorsement, partnership, approval, or affiliation unless expressly stated. All third-party names, logos, trademarks, and references remain the property of their respective owners.

We may include disclosure notes in individual Research publications, including information about whether we were engaged by a client, whether the matter was reported through a coordinated disclosure process, whether remediation has been confirmed, whether publication was delayed, or whether any other material relationship or context exists.
Where appropriate, we may coordinate the timing or content of a vulnerability disclosure with affected parties, security coordinators, infrastructure providers, or competent authorities, taking into account remediation status, exploitation risk, contractual obligations, applicable law, and risks to users or third parties.

Research Content and Disclosures are provided "as is" and "as available," and Sections 7 and 10 apply to them.

16. GitHub Repositories and Open-Source Materials

We may publish code, templates, scripts, checklists, examples, proof-of-concept materials, testing harnesses, research tooling, or other materials through our GitHub repositories or other public developer platforms.

Unless expressly stated otherwise, these materials are provided for general informational, educational, research, and defensive security purposes only. They are not audit deliverables, security guarantees, production-ready software, managed services, professional advice, financial advice, trading advice, or recommendations to deploy, rely on, buy, sell, hold, liquidate, or interact with any token, protocol, product, or project.

GitHub materials may include experimental, incomplete, simplified, or “playground” code. They may contain bugs, errors, vulnerabilities, outdated assumptions, incomplete test coverage, or dependencies that change over time. You are solely responsible for reviewing, testing, validating, and securing any use, modification, deployment, or integration of those materials.

GitHub materials, proof-of-concept code, scripts, harnesses, and technical examples do not grant you permission or authorisation to access, test, exploit, interfere with, manipulate, or otherwise interact with any third-party system, smart contract, wallet, protocol, account, network, data, or property. You are responsible for ensuring that any use of these materials is lawful and within the scope of all applicable authorisations, engagement terms, bug bounty rules, licences, and other permissions. Nothing in these Terms is intended to prohibit legitimate security research, testing, simulation, education, or vulnerability validation performed with appropriate authorisation and in accordance with applicable law.

Any licence terms included in a specific repository, including a LICENSE file, govern the copyright licence granted for that repository. If there is a conflict between these Terms and the applicable repository licence regarding copyright permissions, the repository licence will control solely for those copyright permissions. These Terms do not expand any rights granted under a repository licence and do not authorise any unlawful, unauthorised, or harmful use of our materials. For clarity, permission to copy, modify, use, or redistribute software under an open-source or other software licence does not itself constitute authorisation to access, test, interfere with, or exploit any third-party system in which that software may be used.

Where GitHub materials are accessed through GitHub or another third-party developer platform without visiting our website, the applicable repository licence, README, SECURITY.md, NOTICE file, source-code headers, and other repository-level notices may also contain important disclaimers, limitations, security instructions, and responsible-use notices. We recommend that you review those materials before using, modifying, deploying, or redistributing any GitHub materials.

We do not undertake any obligation to maintain, update, support, patch, review, or secure any public GitHub materials unless we expressly agree otherwise in a separate written agreement.

GitHub materials are provided "as is" and "as available," and Sections 7 and 10, including the aggregate liability cap for free materials, apply to them to the maximum extent permitted by applicable law.

17. Miscellaneous terms

These Terms do not create or imply any business relationship between you and Eraikey. No right or cause of action for any third party is created by these Terms.

We may assign or delegate these Terms, in whole or in part, to any person or entity at any time with or without your consent. You may not assign or delegate any rights or obligations under these Terms without Eraikey's prior written consent, and any unauthorized assignment and delegation by you is void.

Nothing in these Terms excludes, restricts, or modifies any right, remedy, liability, or protection that cannot lawfully be excluded, restricted, or modified under applicable law, including any mandatory consumer rights that apply to you.

Our failure or delay in exercising any right, power, or privilege under these Terms will not operate as a waiver thereof.

If any provision of these Terms is found to be unlawful, void, or for any reason unenforceable, that provision will be severed from these terms and conditions and will not affect the validity and enforceability of any remaining provisions.

We assume no responsibility or liability for any failure or delay in operation of the Website, or any loss or damage that you may incur, due to events of Force Majeure or events beyond our control, including without limitation any flood, extraordinary weather conditions, earthquake, fire, strike, blockade, riot, war, insurrection, act of terrorism, labor dispute, accident, action of government, communications, power failure, or equipment or software malfunction.

These Terms may conflict with a contractual agreement between you and Eraikey. The order of precedence is as follows: (i) any Statement of Work, change order, or contractual agreement signed by the parties; and (ii) these Terms.

These Terms supersede any prior agreement regarding their subject matter. If you have another valid written agreement with us for professional services, that agreement controls those professional services. These Terms control your use of the website unless the separate written agreement expressly states otherwise.

Our Privacy Policy explains how we process personal data in connection with the website.