archon.audit.report
100.0
Mantle Mainnet
risk:29
verified
Feedback #24
For agent 97 on Mantle Mainnet · 2026-06-21
From
via
https://archonaudit.xyz/app/proofs
Block
tx ↗
#96965043
Off-chain feedback document
raw JSON
{
"chain": {
"name": "Mantle Mainnet",
"chainId": 5000
},
"report": {
"id": "4e05e181-1332-453e-a4b4-58a9f2283bf3",
"scope": {
"pragma": "0.8.24",
"network": "mantle-mainnet",
"lineCount": 128,
"protocols": [
"mETH",
"cmETH",
"USDY",
"Aave V3",
"Merchant Moe",
"Agni"
],
"sourceKind": "paste",
"aiReasoning": {
"hits": 0,
"total": 5,
"misses": 5,
"batches": 3,
"reasons": {},
"skipped": 0,
"enriched": 5,
"provider": "tokenhub",
"timeoutMs": 75000,
"fallbackCount": 0,
"providersUsed": [
"Tencent Cloud TokenHub (deepseek-v4-pro)"
]
},
"reducedMode": null,
"solcVersion": "0.8.24",
"gasOptimizer": {
"pricing": {
"mode": "calibrated-receipts",
"pricedAt": "2026-06-21T16:44:48.864Z",
"l2GasPriceWei": "50000100000",
"deployDataFeeMnt": "0.012463527069699784",
"deployDataFeeWei": "12463527069699784",
"calldataZeroBytes": 27,
"calibrationErrorPct": 0,
"calldataGasEstimate": 56012,
"calldataNonZeroBytes": 3494,
"creationBytecodeBytes": 3521
},
"daPricing": {
"model": {
"mode": "calibrated-receipts",
"samples": [
{
"txHash": "0x82d99588e5f1bff33d618743025d598445493032637de25844a67aa8e88088ef",
"l1FeeWei": "699231354481640",
"l1GasUsed": "2530",
"zeroBytes": 135,
"l1GasPrice": "538782662",
"totalBytes": 228,
"blobGasUsed": "63200",
"blockNumber": "96205628",
"nonZeroBytes": 93,
"l1BlobBaseFee": "330004069609410902",
"l1BaseFeeScalar": "169019",
"operatorFeeScalar": "100000000",
"calldataGasEstimate": 2028,
"l1BlobBaseFeeScalar": "0",
"operatorFeeConstant": "0",
"daFootprintGasScalar": "400"
},
{
"txHash": "0xb9ce87de86b212b91eb64012bbdab91014373da1f6d960470b340e1991a1a7c5",
"l1FeeWei": "6874261528561290",
"l1GasUsed": "22258",
"zeroBytes": 28,
"l1GasPrice": "603039864",
"totalBytes": 1945,
"blobGasUsed": "556400",
"blockNumber": "96205472",
"nonZeroBytes": 1917,
"l1BlobBaseFee": "321479049246759320",
"l1BaseFeeScalar": "169019",
"operatorFeeScalar": "100000000",
"calldataGasEstimate": 30784,
"l1BlobBaseFeeScalar": "0",
"operatorFeeConstant": "0",
"daFootprintGasScalar": "400"
}
],
"validation": [
{
"txHash": "0x82d99588e5f1bff33d618743025d598445493032637de25844a67aa8e88088ef",
"errorPct": 0,
"actualL1FeeWei": "699231354481640",
"predictedL1FeeWei": "699231354481572"
},
{
"txHash": "0xb9ce87de86b212b91eb64012bbdab91014373da1f6d960470b340e1991a1a7c5",
"errorPct": 0,
"actualL1FeeWei": "6874261528561290",
"predictedL1FeeWei": "6874261528560500"
}
],
"sampleCount": 2,
"zeroByteFeeWei": "2736708878864",
"nonZeroByteFeeWei": "3545974793924",
"maxValidationErrorPct": 0,
"meanValidationErrorPct": 0
},
"source": "receipt-calibrated",
"groundTruthField": "l1Fee"
},
"sourceHash": "0x3b537653fa316edb3b12621fd7fec32e43adc6dc55b450b2198f0b2a6d9878cd",
"measurement": {
"forge": {
"ok": false,
"error": "No safety=safe gas patches available for automatic measurement.",
"command": null,
"attempted": false,
"gasReport": null
},
"source": "deterministic-estimate",
"status": "skipped",
"patches": [
{
"note": "Review-only patch is not auto-applied for measurement.",
"after": "address immutable public owner;",
"before": "address public owner;",
"ruleId": "immutable-constant",
"safety": "review",
"status": "skipped",
"l2GasDelta": 2100,
"l1DaDeltaWei": null
},
{
"note": "Review-only patch is not auto-applied for measurement.",
"after": "uint256 cached = isAuditor[msg.sender]; // reuse cached value",
"before": "isAuditor[msg.sender] read 2 times",
"ruleId": "cache-repeated-sload",
"safety": "review",
"status": "skipped",
"l2GasDelta": 100,
"l1DaDeltaWei": null
},
{
"note": "Review-only patch is not auto-applied for measurement.",
"after": "uint256 cached = _history[auditedContract]; // reuse cached value",
"before": "_history[auditedContract] read 6 times",
"ruleId": "cache-repeated-sload",
"safety": "review",
"status": "skipped",
"l2GasDelta": 500,
"l1DaDeltaWei": null
},
{
"note": "Review-only patch is not auto-applied for measurement.",
"after": "mapping(uint256 => uint256) bitmap; // pack 256 flags per slot",
"before": "mapping(address => bool) public isAuditor; // allowlisted writer keys",
"ruleId": "bitmap-bools",
"safety": "review",
"status": "skipped",
"l2GasDelta": 20000,
"l1DaDeltaWei": null
}
],
"version": "archon.gasMeasurement.v1",
"measuredAt": "2026-06-21T16:44:49.138Z",
"rulesetHash": "68616b131f38ee744254b4c19e151f3d6fc8e8b278498f91b8cdd001af7b8fcd",
"contractHash": "3b537653fa316edb3b12621fd7fec32e43adc6dc55b450b2198f0b2a6d9878cd"
},
"opportunities": [
{
"id": "immutable-constant",
"file": "AuditAttestationRegistry.sol",
"after": "address immutable public owner;",
"patch": {
"newText": " address immutable public owner;",
"oldText": " address public owner;"
},
"title": "Mark never-changing value constant or immutable",
"where": "AuditAttestationRegistry.sol:23",
"before": "address public owner;",
"safety": "review",
"newText": " address immutable public owner;",
"oldText": " address public owner;",
"category": "storage",
"severity": "info",
"lineStart": 23,
"rationale": "Constants/immutables avoid storage reads for values that do not change after deployment.",
"confidence": 0.62,
"estL1Delta": null,
"estL2Delta": 2100,
"annualizedBasis": "Static deterministic estimate. Exact runtime deltas require queued Foundry snapshots with representative inputs.",
"estimatedGasSaved": 2100,
"estimatedDataBytesSaved": null
},
{
"id": "cache-repeated-sload",
"file": "AuditAttestationRegistry.sol",
"after": "uint256 cached = isAuditor[msg.sender]; // reuse cached value",
"patch": {
"newText": "isAuditor[msg.sender]",
"oldText": "isAuditor[msg.sender]"
},
"title": "Cache repeated storage read",
"where": "AuditAttestationRegistry.sol:52",
"before": "isAuditor[msg.sender] read 2 times",
"safety": "review",
"newText": "isAuditor[msg.sender]",
"oldText": "isAuditor[msg.sender]",
"category": "storage",
"severity": "info",
"lineStart": 52,
"rationale": "Repeated SLOADs should be cached in stack/memory when state cannot change between reads.",
"confidence": 0.7,
"estL1Delta": null,
"estL2Delta": 100,
"annualizedBasis": "Static deterministic estimate. Exact runtime deltas require queued Foundry snapshots with representative inputs.",
"estimatedGasSaved": 100,
"estimatedDataBytesSaved": null
},
{
"id": "cache-repeated-sload",
"file": "AuditAttestationRegistry.sol",
"after": "uint256 cached = _history[auditedContract]; // reuse cached value",
"patch": {
"newText": "_history[auditedContract]",
"oldText": "_history[auditedContract]"
},
"title": "Cache repeated storage read",
"where": "AuditAttestationRegistry.sol:83",
"before": "_history[auditedContract] read 6 times",
"safety": "review",
"newText": "_history[auditedContract]",
"oldText": "_history[auditedContract]",
"category": "storage",
"severity": "info",
"lineStart": 83,
"rationale": "Repeated SLOADs should be cached in stack/memory when state cannot change between reads.",
"confidence": 0.7,
"estL1Delta": null,
"estL2Delta": 500,
"annualizedBasis": "Static deterministic estimate. Exact runtime deltas require queued Foundry snapshots with representative inputs.",
"estimatedGasSaved": 500,
"estimatedDataBytesSaved": null
},
{
"id": "bitmap-bools",
"file": "AuditAttestationRegistry.sol",
"after": "mapping(uint256 => uint256) bitmap; // pack 256 flags per slot",
"patch": {
"newText": " mapping(address => bool) public isAuditor; // allowlisted writer keys // REVIEW: high-volume bool flags can be bitmap-packed",
"oldText": " mapping(address => bool) public isAuditor; // allowlisted writer keys"
},
"title": "Bitmap-pack boolean flags",
"where": "AuditAttestationRegistry.sol:24",
"before": "mapping(address => bool) public isAuditor; // allowlisted writer keys",
"safety": "review",
"newText": " mapping(address => bool) public isAuditor; // allowlisted writer keys // REVIEW: high-volume bool flags can be bitmap-packed",
"oldText": " mapping(address => bool) public isAuditor; // allowlisted writer keys",
"category": "storage",
"severity": "medium",
"lineStart": 24,
"rationale": "Bitmap packing can reduce many boolean SSTOREs from one slot per flag to one slot per 256 flags.",
"confidence": 0.62,
"estL1Delta": null,
"estL2Delta": 20000,
"annualizedBasis": "Static deterministic estimate. Exact runtime deltas require queued Foundry snapshots with representative inputs.",
"estimatedGasSaved": 20000,
"estimatedDataBytesSaved": null
}
]
}
},
"scanId": "c171fedd-ef49-407a-b6fc-94ed229e7ce6",
"createdAt": "2026-06-21T16:45:48.802Z",
"riskScore": 29,
"contractName": "AuditAttestationRegistry",
"severityCounts": {
"low": 1,
"high": 0,
"info": 3,
"medium": 1,
"critical": 0
},
"executiveSummary": "Archon completed a read-only Mantle Mainnet audit of AuditAttestationRegistry and found 5 deterministic findings. The highest-priority issue is Events Access, with risk score 29/100 based on severity-weighted findings. The `transferOwnership` function lacks an event emission, making it difficult for off-chain monitors to track ownership changes on Mantle. Emitting an event would improve transparency and auditability. Review the recommended fixes and run regression tests before deployment."
},
"schema": "archon.proof.metadata.v1",
"erc8004": {
"verifiedConfig": true,
"agentIdentityRef": "eip155:5000:0x8004A169FB4a3325136EB29fA0ceB6D2e539a432:97",
"identityRegistry": "0x8004A169FB4a3325136EB29fA0ceB6D2e539a432",
"reputationRegistry": "0x8004BAa17C55a88189AE136b182e5fdA19dE9b63",
"validationRegistry": null
},
"product": "Archon",
"findings": [
{
"id": "b13e6a4f-7b83-45b3-a835-506deca69709",
"title": "Events Access",
"category": "events-access",
"location": {
"file": "AuditAttestationRegistry.sol",
"lineEnd": 66,
"lineStart": 63
},
"severity": "low"
},
{
"id": "859e62ca-9a4e-4d8c-8db1-8437707041c8",
"title": "Mark never-changing value constant or immutable",
"category": "mantle-gas-optimizer/storage/immutable-constant",
"location": {
"file": "AuditAttestationRegistry.sol",
"lineEnd": 23,
"lineStart": 23
},
"severity": "info"
},
{
"id": "9d006779-7c33-423f-951b-8ca96a2402cb",
"title": "Cache repeated storage read",
"category": "mantle-gas-optimizer/storage/cache-repeated-sload",
"location": {
"file": "AuditAttestationRegistry.sol",
"lineEnd": 52,
"lineStart": 52
},
"severity": "info"
},
{
"id": "61cf56e5-ce5f-4dec-afcc-0534f7cfd805",
"title": "Cache repeated storage read",
"category": "mantle-gas-optimizer/storage/cache-repeated-sload",
"location": {
"file": "AuditAttestationRegistry.sol",
"lineEnd": 83,
"lineStart": 83
},
"severity": "info"
},
{
"id": "707bb61b-4b36-4b96-9a2e-12a89dea115c",
"title": "Bitmap-pack boolean flags",
"category": "mantle-gas-optimizer/storage/bitmap-bools",
"location": {
"file": "AuditAttestationRegistry.sol",
"lineEnd": 24,
"lineStart": 24
},
"severity": "medium"
}
]
}
ipfs://QmaZksDA8SXKwYXEn19RnuBYsfT29e6y2BzF1RpTWbdE8L