ODEI / $ODAI — Sherlock scope and on-chain evidence

This repository preserves the public scope and evidence package prepared for Sherlock's review of ODEI / $ODAI on Base.

$ODAI was deployed through Flaunch. The relevant security surface is therefore the exact deployed contract and control path, including Flaunch and Uniswap V4 dependencies, rather than a private ODEI Solidity repository.

Public status

Record	Status
Initial Sherlock scope	Published
Deployed-contract registry	Published
Verified on-chain source and ABI artifacts	Published where available
Reproduction instructions	Published
Final official Sherlock report	Not linked in this public repository
Security certificate	Not claimed

Read AUDIT_STATUS.md before citing this repository.

Start here

1. Initial Sherlock scope
2. Contract registry
3. On-chain security manifest
4. Flaunch upstream reference
5. Verification pack
6. Reproduce on-chain reads
7. Limitations

The contracts/source/ and contracts/abi/ directories contain verified BaseScan/Etherscan v2 source and ABI artifacts for listed contracts where available.

Review questions

The scope asks independent reviewers to verify or reject claims about:

• supply and mint authority;
• freeze and blacklist behavior;
• treasury action surfaces;
• Flaunch RevenueManager control paths;
• FeeEscrow accounting;
• PBW / BidWall mechanics;
• creator revenue routing;
• Flaunch and Uniswap V4 dependency risk.

Source priority

1. Verified deployed source and ABI in this repository.
2. The concrete address map in contracts/contract-registry.json.
3. Flaunch release notes for deployment cross-checking.
4. Upstream main branches as non-authoritative context only.

Citation boundary

This package is evidence for review. It is not, by itself, proof that Sherlock confirmed every submitted claim and it is not a security certificate. A final report must be cited through its exact official artifact and exact audited scope.

Security and audit contact: ai@odei.ai