How we work Process

From discovery to launch.

A plain walk through the five phases of an engagement. The thinking behind each step, the handoffs between them, and what you should expect at every stage.

Weeks 1 and 2

Discovery

Discovery is the phase most teams want to skip and the one that matters most. Before any code is written, the process involves sitting down with your team and getting the full picture into focus. The business model. The users. The regulatory constraints. The existing systems. The roadmap and dependencies that shape what is realistic.

The approach involves asking hard questions about tradeoffs. Every system requires them. Speed against security. Decentralization against cost. User experience against regulatory compliance. The goal is to make those tradeoffs intentionally in this phase, rather than discovering later that they were made accidentally somewhere in the codebase.

By the end of discovery, the engagement produces a written architecture document. It covers system design, component breakdown, blockchain platform decisions and the reasoning behind them, integration points, risk assessment, and a realistic timeline. Both sides review it and iterate until there is genuine confidence in the direction. If the problem you hired the team to solve turns out not to be the real problem, this is where that conversation happens.

Weeks 3 and 4

Design

Design is architecture plus specification, taken to a level of detail where any competent engineer could pick up the document and start implementing. For smart contracts, the process starts with threat modeling. Who could attack this contract? How? What is at risk? From there, the approach covers access control design, state transitions, edge cases, potential attack vectors including reentrancy and oracle manipulation, and gas optimization targets that affect both user experience and profitability.

For backend systems and integrations, the design phase produces API specifications, data flow diagrams, failure mode analysis, and monitoring design. Every integration point with external systems like banking partners, compliance services, and blockchain nodes is specified in detail, because integration work always takes longer than expected and surprises at the integration layer are the most expensive kind.

The point of this rigor is not bureaucracy. Arguments on paper cost hours. Arguments in production cost weeks or months. Every version of the design document is shared with your team. The expectation is that you push back on it. If nobody argues with the design, it probably has not been written carefully enough.

Weeks 5+

Implementation

Implementation is the longest phase, and also the least surprising one when discovery and design have been done well. The approach involves writing code in small, reviewable increments. Every change ships with unit tests and integration tests. For critical systems, the process includes property based testing where invariants are defined and tools search for cases that break them. Nothing merges that does not pass the full suite.

Your team gets a weekly written status sync. No theatrical burndown charts. Just an honest paragraph about what moved, what did not, and why. Your engineers are pulled in early for code reviews and integration work so they are learning the system as it takes shape, not inheriting something unfamiliar at the end. Documentation grows alongside the codebase, not as an afterthought six weeks after launch.

For smart contracts, audit timelines are planned from the start of implementation, not at the end. Security audits take weeks. The schedule accounts for them so they do not delay your launch. If the design needs to change because implementation surfaced something new, the process stops, the change is documented, and your sign off is required before continuing.

Before launch

Testing and Audit

Testing is not the phase where the test suite runs one more time. It is the phase where the team, and a qualified third party, attempt to make the system fail. For smart contracts, the process includes a formal security audit from an external specialist firm. Auditors find issues. Some are critical and must be fixed before launch. Some are informational. The engagement covers helping you understand severity, plan fixes, and verify them before going live.

For payment systems and integrations, the approach involves thorough testing with banking partners, compliance services, and other external dependencies. Both happy paths and unhappy paths. What happens when a bank API returns an error. What happens when the blockchain is congested and transactions are slow. What happens when a database is briefly unavailable. Systems are designed to degrade gracefully when parts fail. This phase confirms that they actually do.

Load testing matters for any system where volume is a factor. Gaming platforms, exchanges, and payment infrastructure need to handle peak traffic. The process includes identifying bottlenecks under realistic load and addressing them before they become production incidents. The operational surface is also tested. Can your ops team run this? Can a new engineer read the runbook and recover from a failure at three in the morning? If not, the system is not ready.

Ongoing

Launch and Support

Going live is not the finish line. It is the start of the period where edge cases arrive in real time and where the difference between a calm first month and a chaotic one is how closely the team that designed the system stays with it. The engagement covers monitoring setup, incident response procedures, and close watching during the first weeks in production.

That means dashboards your team can read without training. Alerts that fire on conditions that actually matter, not noise. Incident runbooks your operators can execute without the engineering team on the phone. Scheduled reviews in the weeks after launch to triage anything that surfaced and decide whether it needs a fix, a redesign, or just documentation.

For ongoing support, there are options. Some teams want a retainer for bug fixes, performance work, and minor features. Some want to take ownership and only call if something goes wrong. Some want a hybrid arrangement. The process is flexible and the transition is designed so that when the handoff happens, your team inherits a system they understand completely, not a black box with a vendor dependency.

Ready to start? Tell us what you're building.

Describe the problem, the users, and the constraints. That is enough for a real conversation about scope, timeline, and how the engagement would work.