professional audit of v3.2.2
example-audit-price-1
- State
- complete · verdict safe · risk low
- Auditor
- example-auditor-reef
- Build examined
- 2f90fb876c06…
- Dates
- requested 2026-08-22 · completed 2026-08-22
- Fee
- $45.00 paid if the verdict stands
- Bond
- $2,500.00 lost if the verdict is overturned
Clean. One dependency is a version behind but carries no known advisory; noted, not blocking.
Scope: description-injection · network egress · dependency provenance · wallet. Nothing else was examined.
What it was observed doing
- fetches a price over HTTPS from one host
- no key or wallet access
Pipeline
- scanner · passedno hidden directives in the description or instruction body
- sandbox · passedobserved network calls match the declared host; no fs, env or key reads
- fork · passedfork replay produced no approvals, transfers or signature requests
- synthesizer · inconclusivesafe to install; one outdated dependency worth tracking
lowoutdated transitive dependency
A transitive dependency is one minor version behind. No advisory applies today.
Findings
lowoutdated transitive dependency
A transitive dependency is one minor version behind. No advisory applies today.
Evidence
The report is not openable from here: the .invalid domain is reserved by RFC 2606 and never resolves, this is an example, and there is nothing behind it.its digest is on record: sha256 576e90addb718734dd559d4a…
Escrow
This audit has not been settled on chain: the backend reports NOT_WIRED.Escrow contract: 0x0354d2a4…ec8a52 ↗