Blockchain and Smart Contract Development in the UK

Ask three questions. Do several organisations need to write to the same record? Is there no single party they would all trust to run it? Does anyone need to verify the history independently? If the answers are mostly no, a conventional database with an audit log will be cheaper, faster and easier to change — and we will recommend that instead.

It depends on how much logic lives on-chain, the integrations around it and the level of assurance required. Work starts with a discovery sprint, from £2,000, that produces a design and a fixed-price quote for the build. Budget separately for an independent contract audit and for network fees, which vary with the chain you choose.

We test and review every contract we write, but for anything that will hold real value we recommend an independent audit by a specialist security firm — a second team with no stake in the code. We prepare the documentation and tests the auditors need, and fix their findings before launch.

Possibly. In the UK, some cryptoasset activities, such as exchange services or holding assets for customers, require FCA registration; cryptoasset promotions to UK consumers are subject to financial promotion rules; and the wider regime is still evolving. Whether any of this applies to you is a question for your legal adviser — we do not give legal advice — but we raise the questions early and build to the requirements they set.

We write Solidity contracts for Ethereum and EVM-compatible networks. We choose the network with you on transaction fees, speed, tooling and where your users’ wallets already are, and keep the application code separate enough from the chain that a later move remains possible.

That risk shapes how we build. We keep on-chain logic small, use audited standard components, add pause and upgrade mechanisms where they are appropriate, cap the value at risk in early releases and hold admin keys in multi-signature wallets. None of that removes risk entirely, which is why testing and independent audit come before launch, not after.

Not necessarily. For mainstream audiences, a custodial or embedded wallet created at sign-up lets people use the product without managing seed phrases. Crypto-native users often expect to connect the wallet they already have. Many products support both; the choice affects your regulatory position, so we raise it with your advisers early.

It can. Public blockchains are designed so data cannot be changed or deleted, which sits awkwardly with rights such as erasure and rectification. Our approach is to keep personal data off-chain, in a database you control, and put only non-personal references or proofs on-chain. Your DPO should review the design; we provide the technical detail for your DPIA.

Yes. We start by reviewing the deployed contracts, the admin key arrangements and the front end, then give you a written list of risks in order of severity. Fixing a live contract often means deploying a new version and migrating users to it, so we plan that carefully rather than rushing it.

Yes, usually through an established crypto payment provider rather than handling coins directly, which leaves custody and much of the compliance burden with a firm set up for it. Check that the provider holds the FCA registration its activities require. We integrate the checkout, webhooks and reconciliation with your order system.