Project snapshot · October 18, 2026
Status
The SASC contract is deployed on Base, owned by the 2-of-3 Safe, source-verified and registered as a Chainlink VRF consumer, and its provenance is committed. The public sale opened on October 18, 2026. No independent audit, counsel review or brand clearance has been completed, and storage, backup and signer-custody controls are unverified; the owner decided the sale could open without them.
Opened
October 18, 2026 · 10:02 AM Pacific
When the contract recorded the public sale opening (publicStartedAt).
Right now
Public sale opened
The public sale opened on October 18, 2026. The mint panel reads the live phase, supply and pause status from the contract, and remains the source of truth if the sale is paused, closed or sold out.
Open items
Not completed before the sale
No independent security audit, legal counsel review or trademark clearance has been completed, and storage, backup and signer-custody controls are unverified. The owner decided the sale could open without them. Source verification is not an audit.
The blockchain approach
SASC is deployed on Base, using ERC-721A, ERC-2981, ERC-4906. Base was chosen for low mint costs on a small collection and for a healthy NFT ecosystem. The contract source code is published and verified on Basescan (exact match).
The design priorities are boring on purpose: a hard supply constant, a reserve that a sale can never eat into, exact payment only, a provenance commitment required before the first mint, a Chainlink VRF reveal that cannot run while the sale is open, and a metadata freeze that is permanent. Withdrawals can only ever go to a treasury multisig fixed at construction.
Where the work actually is
The contract is implemented and internally hardened: an adversarial review closed one High and three Medium findings, each pinned by a named regression test, with full-line coverage, stateful fuzzing of the collection invariants, mutation testing and static analysis. That is internal work and it is not a substitute for an independent audit, which has not happened.
Since October 16, 2026, the SASC collection contract has been deployed on Base mainnet at 0x3fCC5b64E910FE0cA4f39BCc598056944897b68f (chain ID 8453); it is owned by the 2-of-3 Safe and source-verified on Basescan. Its public sale opened on October 18, 2026 as a single public phase with no allowlist; live status is on the Mint page.
The Safe accepted ownership of the contract. The Chainlink VRF subscription is owned by the Safe, holds 2 LINK on the owner-selected 2 gwei lane and has the SASC contract registered as its only consumer; the recorded cost assessment budgets up to six randomness requests within that balance. Signer custody controls have not been independently verified.
The owner accepted the selected 333-image vector release. Release integrity checks matched all 333 images and linked metadata files, production validation of the source collection passes, and the image-set provenance hash 0x8c5f959fda420f2dea141d3dfa7d5a3f9602ced5646971a2a004d3b4d454b3e3 is committed and finalized on Base. Artwork rights, licensing terms and brand clearance remain open.
The offline storage package passed integrity and link checks. An off-machine backup was downloaded and restored successfully; recovery and retention controls still need verification.
All four production storage roots (images, metadata, unrevealed image and unrevealed metadata) were pinned on two providers, fully retrieved from each provider and independently retrieved at the October 16 verification. Provider plan, quota and renewal controls have not been verified.
No independent audit, legal counsel review of the licensing terms or trademark clearance has been completed, and storage, backup and signer-custody controls are unverified. The owner decided the public sale could open without them. An audit handoff package is prepared.
A rehearsal copy of the internally reviewed contract is deployed on Base Sepolia. Its runtime bytecode matches that reviewed build, and it is registered as a Chainlink VRF consumer. This was not a sale and is not the production collection. Test tokens have no monetary value. No independent external audit has been completed. Test mints have run, the rehearsal sale is closed, the Chainlink VRF reveal completed on October 10, 2026 and the revealed test metadata is published. The permanent metadata freeze has not run.
Development status
SASC is deployed on Base and the public sale opened on October 18, 2026. No independent external audit has been completed; the owner decided the sale could open without one.
-
Complete
Brand and art direction
Name architecture, positioning, voice, palette, logo system, base character and trait families specified.
-
Complete
Trait architecture and rarity model
Full trait catalogue, category weights, incompatibility rules, family sets and the tier scoring model.
-
Complete
Generator and provenance pipeline
Deterministic seeded generation, duplicate-DNA rejection, rarity reporting, image hashing and provenance hash computation, verified on the full-supply candidate run.
-
Complete
Selected 333-piece vector collection
The owner retained vector run production-01, version 0.1.0, with all 333 generator positions and 15 Unforgivables. The painted black-and-gold concept was not selected for this release.
-
Complete
Linked asset candidate review
The owner accepted the selected linked release, which is bound to the committed provenance. Integrity checks matched all 333 images and linked metadata files, and production validation passes. Artwork rights, licensing terms and brand clearance remain open.
-
Complete
Unforgivables in the selected run
All fifteen one-of-one characters are included at fixed generator positions in the selected vector run. No separate painted set is commissioned.
-
In progress
Production storage and publication
All four production roots were pinned on two providers and fully retrieved from each, with an independent retrieval, at the October 16 verification. An off-machine backup was restored successfully. Provider plan, quota and renewal, and backup recovery and retention controls, remain unverified. The image-set provenance is committed on-chain.
-
Complete
Mint contract implementation
ERC-721A with phase control (its optional Merkle allowlist phase will not be used: the launch is public-only), reserve accounting, Chainlink VRF reveal, metadata freeze and a treasury-only withdrawal path.
-
Complete
Internal contract hardening
Adversarial review closed one High and three Medium findings, each pinned by a named regression test, with full-line coverage, stateful invariant fuzzing, mutation testing, static analysis and gas reporting.
-
Not started
External security audit
Not performed. No independent audit engagement or report exists, and the owner decided the public sale could open without one. Internal hardening and Basescan source verification are not a substitute for an independent third-party review.
-
In progress
Testnet rehearsal
The internally reviewed contract is deployed on Base Sepolia, with its runtime bytecode verified against that build; it is registered as a Chainlink VRF consumer. Test mints have run, the rehearsal sale is closed, the Chainlink VRF reveal completed on October 10, 2026 and the revealed test metadata is published. The permanent metadata freeze has not run.
-
Complete
Base mainnet operations preparation
The 2-of-3 Safe owns the SASC contract and the Chainlink VRF subscription, which holds 2 LINK and has the SASC contract registered as its consumer. Signer custody controls remain unverified.
-
Complete
Mainnet deployment
Deployed on Base mainnet on October 16, 2026 at 0x3fCC5b64E910FE0cA4f39BCc598056944897b68f; ownership transferred to the Safe; source verified on Basescan (exact match). Source verification is not an audit.
-
Not started
Brand and trademark clearance
SASC is a working brand: trademark clearance has not been performed yet.
-
In progress
Public mint
Opened on October 18, 2026 · 10:02 AM Pacific: a single public phase with no allowlist. Live status is on the Mint page.
Internal hardening complete; no independent external audit has been completed. The contract source code is published and verified on Basescan; the project repository remains private.