Internal review

Audit status and review scope

TikiDeco is not independently audited. This page separates the historical Sepolia V1 deployment from the non-canonical V2 candidate review target.

Audit-status disclaimer: this is an internal review page only. TikiDeco has not completed an independent smart-contract audit.

Status

Internal review: in-progress
Independent audit: not-started
Current evidence date: 2026-07-12
v0.1.0-sepolia release status: Public pre-release at e07471936375ffbe13c68da2708b4436931392a2
v0.2.0-utility-pilot release status: Public pre-release at 5ed20415b569779f8b00245af8b98b9599f77044; pilot campaign remains draft-not-live
v0.2 evidence commit: 3d5c207b133e4b86459bdc173b78422315a0c744
v0.2 evidence report: docs/reports/immutable/v0.2.1-public-review/MONTHLY_REPORT_2026_07.md
Release manifest hash: 3c62dfaf24047b0cbbce87257990a9431a8edf1a234c102b4db98735c7019343
V2 freeze baseline: 9099fdb87a6be715b1d7fd4fafa6fade0b12b61c
Current evidence/source commit: 3d5c207b133e4b86459bdc173b78422315a0c744
Canonical V1 source commit: 9da9b09334031276fbd2bb9d61738a15bfe08c1e
V2 candidate status: Non-canonical candidate code; independent audit not started; not promoted by deployments/canonical.json
Last updated: 2026-07-12

Canonical V1: TikiDecoToken and TikiDecoVestingVault on Ethereum Sepolia
Candidate V2: TikiDecoTokenV2.sol and TikiDecoVestingVaultV2.sol are non-canonical audit-target candidates
Promotion status: No V2 promotion is recorded in deployments/canonical.json

Compiler: 0.8.28, paris, optimizer runs 200
Test status: Hardhat suite and Foundry secondary invariant suite are CI gates
Coverage status: Hardhat coverage is the primary gate; Foundry V2 line, function, and branch thresholds are configured for the secondary invariant suite
Static analysis: Slither V1 informational scan and blocking V2 baseline comparison are configured