Smart Contract Audit
Auditor: Solidproof | Audit ID: 88b99f3a | Status: All critical & high findings resolved
View audit on Solidproof portal →
Contracts Audited
| Contract | Address |
|---|---|
| TTS Token (UUPS Proxy) | 0x5570eA97d53A53170e973894A9Fa7feb5785d3b9 |
| TTSVotingV3b (Active) | 0x6d6fF6A0bd0A71D999ac1d593a941108a2BE4bC6 |
| TTSStaking (Proxy) | 0xaA12B889Ebcc32037bb8684B18DF7ED09b2B30fc |
Finding Summary — Voting Contract
| ID | Severity | Title | Status |
|---|---|---|---|
| C-1 | Critical | Vote cap check prevents any vote | ✅ Fixed |
| H-1 | High | Settlement callback gas limit | ✅ Fixed |
| H-2 | High | Zero wallet address traps funds | ✅ Fixed |
| H-3 | High | ERC-20 transfer return unchecked | ✅ Fixed (SafeERC20) |
| M-1 | Medium | Admin can redirect club share during VRF window | ⚠️ Acknowledged |
| M-2 | Medium | NFT contract gas-bomb | ✅ Fixed (gas cap) |
| M-3 | Medium | Round unrecoverable if VRF fails | ✅ Fixed (adminResetSettlement) |
| M-4 | Medium | Single-step ownership | ⚠️ Acknowledged |
| M-5 | Medium | CEI pattern in vote() | ✅ Accepted (non-exploitable, TTS is standard ERC-20) |
Finding Summary — Token Contract
| ID | Severity | Title | Status |
|---|---|---|---|
| M-1 | Medium | Zero-value transfer guard | ✅ Fixed (live May 17, 2026) |
| M-2 | Medium | Centralization / wallet updates | ✅ Mitigated (Gnosis Safe 2/2) |
| M-3 | Medium | Rounding dust | ⚠️ Acknowledged (negligible) |
Audit completed by Solidproof. All contracts deployed on Base Mainnet (chainID 8453). View Trust & Security page →
