Repository navigation
Contract Audit Registry
This wiki serves as the canonical protocol security registry and audit archive for the Zero Authority ecosystem.
It exists as a permanent institutional record for:
- Smart contract audits
- Security lineage
- Interface consistency history
- Critical vulnerability disclosures
- On-chain deployment references
- Cross-chain contract registries
- Governance traceability
- Forensic anchoring
- Protocol archaeology
- Incident response grounding
- Long-term protocol memory
This documentation is not a bug tracker. This documentation is not a feature roadmap. This documentation is a protocol integrity archive.
All protocol audits are conducted by Friedger.
https://github.com/zeroauthority-dao/platform-v2-base/blob/main/audits/quests.html
Reported by: BowTiedSirJonathan Date: June 26, 2025
The tokenBased-bounties and nft-bounties smart contracts expose equivalent functionality with differing argument order. This does not affect contract correctness but introduces interface inconsistency across similar contract surfaces, increasing user error risk and developer friction.
Wallet extensions preserve argument labeling, maintaining functional clarity despite ordering differences.
Resolution Commit https://github.com/zeroauthority-dao/platform-v2-base/commit/54b7f45
Status Resolved. Preserved for historical traceability and interface lineage documentation.
Severity: Critical Affected Component: Gig contract Impact: Contract fund drainage risk
A critical vulnerability was discovered that enabled draining of the gig contract. This represents a security-class financial exploit vector and a funds-at-risk protocol failure mode.
This disclosure exists to preserve:
- Permanent incident traceability
- Governance transparency
- Security lineage continuity
- Risk model completeness
- Future auditor visibility
- Protocol forensics integrity
- Institutional memory
This is a disclosure archive record. This is not a live exploit report.
This section is the canonical on-chain contract registry for all Zero Authority deployments.
Purpose:
- Forensic traceability
- Audit verification
- Governance transparency
- Security anchoring
- Deployment lineage
- Protocol archaeology
- Incident response grounding
- Cross-chain verification
https://explorer.stacks.co/txid/SP1ZCYG0D3HCK2F7SY8VH9ZREB0JWCBSAPFNS8V5Z.Cerulean-badge-test
https://explorer.stacks.co/txid/SP2GW18TVQR75W1VT53HYGBRGKFRV5BFYNAF5SS5J.ZADAO-token-whitelist-v1
https://explorer.stacks.co/txid/SP25W1B7YX3F20S598J4EXEE9HZ0XHY6PNVTT6FA3.trajan-endorse-v0_1_0
https://basescan.org/tx/0d05df760fecd5d8a2719adbce5d7f2223c555304e71d3752fbebb246096dfb3
https://basescan.org/tx/0x11822932a28fb1f3a035e4df718718e04e626fcc9246cb0b6f45c82627c100fb
https://basescan.org/tx/0xe928afa87c5df3fc0c24d82765f50ee1fe20f83b8277c1a378e8c765746f8746
https://sepolia.basescan.org/tx/0xba0b8028ffb8b6760950e06aef9edb965ea60d23609e24d12220b5166ad38842
https://basescan.org/tx/0x00ffda6e14c66e295226fe08bfdfd4dc5e8f53219c706b0437cd3afab066270b
https://basescan.org/tx/0x58104148bac708519cc7d6fd3795d449bc3489c536b802a7d15902c56ef4d50c
Gigs → ZADAO-token-whitelist-v2 Bounties → ZADAO-token-whitelist-v1
https://etherscan.io/address/0x32D0BBC22211CF387F23CFA87AaDdFe3DAc18FCE
https://github.com/zeroauthority-dao/platform-v2-base/pull/45
This wiki is designed as a permanent protocol memory layer.
It encodes not only deployments, but history, risk, governance accountability, security evolution, and institutional memory as first-class infrastructure.
The protocol is treated not as software alone, but as a living system with lineage, failures, corrections, and continuity preserved through documentation.