This audit is part of the Zealynx portfolio. Full details are being prepared for publication. Engagement scope and outcome available on request in the meantime.
Hold Escrow and Arbitration Protocol
Zealynx audited the Hold escrow and arbitration protocol, a non-custodial peer-to-peer escrow system on Polygon settled in cNGN. The two-week review covered the three on-chain modules and their libraries: an EscrowFactory that deploys one EIP-1167 clone per deal and maintains the settlement-token whitelist, the per-deal Escrow clone that owns funding, delivery windows, milestone release and dispute entry, and an ArbitrationPool that holds tiered juror stake, draws panels through Chainlink VRF, and runs commit-reveal voting with an optional appeal round. Work concentrated on custody and on the arbitration lifecycle, where the protocol's trust claims are concentrated. Every mechanically demonstrable defect was proven with a proof-of-concept test and then subjected to a falsification step, correcting the defective line and re-running the test so each proof is shown to depend on the cited defect rather than on the harness. Findings were filed as issues during the engagement so remediation could begin before delivery of the report. The client is working through fixes; the report and findings are being prepared for publication.
Scope
9 filesFindings
click any row for the full write-upTeam & approval
Disclaimer
This audit is not an endorsement and does not constitute investment advice. Zealynx reviewed the codebase at the commits listed in section 02 over the engagement window. Findings are limited to issues identified within that scope and do not preclude the existence of other vulnerabilities. Subsequent code changes are not covered by this report unless the engagement is explicitly extended.