Contracts and audits
Every address here comes from the deployment file the launch script writes, and the page checks each one for code on Base. An address that doesn't exist yet stays blank.
01Uroboros contracts on Base
Uroboros contracts on Base
Compiled with solc 0.8.28 (EVM prague, 200 optimizer runs). Basescan's Code tab shows each contract's verified source.
Not deployed yet
The deployment file is not published, so the address column is empty. The table lists what will be deployed and from which source file.
| Contract | Address | On chain |
|---|
02What it depends on
What it depends on
Contracts Uroboros calls but did not deploy.
| Contract | Address |
|---|---|
| Uniswap v4 PoolManager | 0x4985…2b2b |
| Uniswap UniversalRouter | 0x6ff5…9b43 |
| Chainlink ETH/USD | 0x7104…Bb70 |
| USDC | 0x8335…2913 |
03Audits
Audits
There is no external audit. The three internal rounds are published here in full, with findings and fixes. The bounty Sanctum is the live test.
AUDIT-1
The design against the market: launch meta on Base, token economics, watcher anti-farming, the bounty as a leak meter. Records what was applied and what was declined.
AUDIT-2
The fee hook, the token and the FeeRouter after build step 2: buyback sandwiching, minter control, re-entrancy, bands, partial fills. Fixed before launch.
AUDIT-3
The whole contract set and the deploy script as one system, before launch, with a fresh-key rehearsal on a Base fork.
STEP3-FIXES
What changed after AUDIT-3: the bounty's locker cold key, ETH-only raids, write-once fee addresses, two-step ownership. With the tests that pin each fix.
STEP3-FIXES-2
Adds a recovery on/off switch to the Sanctum, set off for good on the bounty, which closes the last open gap. Also moves the fourth treasury locker to 365 days, as the spec says.
04Source and tests
Source and tests
Foundry project: contracts in src/, tests in test/ including fork tests against Base, the split launch in script/Deploy.s.sol, the proof and indexer scripts in scripts/.