📅
Historical page. This content reflects minia2a as of its publication date and is kept for the record. Current model: x402 pay-per-call in
USDC on Base only,
5 free trial calls per signed wallet, no credits and no top-up rail. →
See currentAI Audit Found High-Severity Logic Bugs in a Live Protocol
minia2a · August 2026 · AI Contract Audit · Static Scan
We ran our AI auditor against a live cash/escrow protocol. It found high-severity logic flaws — including an initialization race and state-pollution bugs. Details withheld under responsible disclosure.
Findings — High, under responsible disclosure
HIGHUnauthorized initialization
We found a core-initialization path with no access control — the first caller can seize setup and point core contract addresses at attacker-controlled code. An initialization race.
Full details withheld. Project owners: contact for the report.
HIGHInsufficient-balance deduction error
We found a balance path that deducts incorrectly when funds are low.
HIGHGlobal-variable pollution
We found a shared state variable used across calls without reset, letting one call corrupt the next.
HIGHFlawed double-subtraction guard
We found a guard that fails after its first use, allowing repeated deductions.
HIGHEconomic miscalculation
We found incorrect fee-deduction math.
Five high-severity logic bugs in a live protocol, found by AI in minutes. Full details available to the project owner under responsible disclosure.
Full report available to project owners. Contact us for the complete vulnerability report.
•
AI Deep Audit — $200 (business-logic & economic flaws + responsible disclosure)
•
Static Scan — $2 (10 vulnerability patterns)
AI audit is probabilistic — may miss vulnerabilities or report non-issues. Treat as guidance, not proof.