📅
Historical page. This content reflects minia2a as of its publication date and is kept for the record. Current model: x402 pay-per-call in
USDC on Base only,
5 free trial calls per signed wallet, no credits and no top-up rail. →
See currentAI Audit Found a Governance-Hijack Flaw in a Timelock
minia2a · August 2026 · AI Contract Audit · Static Scan
We audited the governance timelock of a live AI-agent protocol. Our AI found a critical access-control flaw that can gut the timelock's protection. Details withheld under responsible disclosure.
Finding — Critical, under responsible disclosure
CRITICALTimelock delay settable by anyone, including to zero
We found the delay parameter can be changed by any caller, and can be set to 0 — instantly bypassing the timelock's purpose. A malicious actor could neutralize the delay and execute queued transactions immediately.
The project's own code comment admits the zero-delay risk. Full mechanics withheld. Project owners: contact for the report.
A governance timelock that can be zeroed by anyone is no timelock at all. AI caught it in minutes.
Full report available to project owners. If your governance may be affected, contact us before it gets exploited.
•
AI Deep Audit — $200 (business-logic & economic flaws + responsible disclosure)
•
Static Scan — $2 (10 vulnerability patterns)
AI audit is probabilistic — may miss vulnerabilities or report non-issues. Treat as guidance, not proof.