Trust & verification

Start here: we are not “audited” yet

Most new tokens and launchpads ship without a third-party audit. We will not claim one until a report is published and linked on this site.

That does not mean “trust us blindly.” It means you should verify addresses on BaseScan, read the risk disclosure, and only participate with money you can lose. Transparency is our substitute for a $20k audit badge—until we can afford the real thing.

What is live on Base mainnet (chain ID 8453)

$EYES is deployed with a fixed 1B supply minted once to the published presale treasury. There is no admin mint function on the token contract.

The launch stack (factory, fee collector, fee router, liquidity locker, buy-and-burn executor) is deployed on Base and wired into eyesopen.to. Fair launches use /app/create when the factory env address matches BaseScan.

Presale participation is a native ETH transfer to the published treasury wallet—not a custodial presale smart contract escrow. Your allocation is registered off-chain and $EYES is sent from treasury inventory by the distributor bot after on-chain verification.

• Presale treasury (ETH + $EYES inventory): 0x3dFf4ADfA6d7482e3fFB362Aa9d6370bCC45c4b5
• $EYES token: 0xC845770d0f437B93886E152566EE926Aa9153C9e
• Always confirm factory and fee collector addresses from the live table at /legal—not from DMs, screenshots, or unofficial posts.

Verify before you participate (5 minutes)

Do this once before sending ETH or using /app/create. If any step fails, stop and use official channels only.

• Open eyesopen.to/legal and compare contract addresses to what you are about to interact with.
• On BaseScan, confirm you are on Base mainnet (8453), not a testnet or another chain.
• For $EYES: open the token contract → read contract → confirm total supply and that your treasury address holds the minted supply.
• For presale: confirm your ETH recipient is exactly the treasury address above—never a personal wallet DM’d to you.
• For the launch factory: call owner() on BaseScan and confirm it matches our published Gnosis Safe (when ownership transfer is marked complete on site).
• Bookmark official links only. Phishing sites copy our UI with different addresses.

What we can and cannot change

Understanding admin power helps you judge risk without an audit PDF.

• Cannot: mint more $EYES (fixed supply at deploy).
• Cannot: recover tokens you sent to the wrong address.
• Can (via platform admin / Safe): enable or configure launch factory settings, fee routing, and buy-and-burn executor parameters on the deployed stack.
• Treasury wallet: holds presale ETH and $EYES for distributor sends—separate from contract owner() fields. Monitor its public balance on BaseScan.
• Public DEX liquidity: not seeded until we announce public trading launch. Until then, $EYES is not freely tradable on a DEX via our LP.

How this differs from most daily launches

Anonymous teams hide admin keys and mint functions. We publish addresses and keep presale flows verifiable.

• Published treasury and contract addresses on-site—not “trust the CA in Telegram.”
• Fixed token supply; no hidden mint on $EYES.
• Platform admin on factory/fees moved to a Gnosis Safe (multisig) for operational control.
• Presale stats and send pipeline are observable (API + on-chain treasury activity).
• Honest “not audited yet” stance instead of a fake CertiK badge.
• Liquidity locker contracts exist for when we seed LP—locks are part of the stack design.

Security audit posture

An independent audit of the core launch stack is planned before public DEX liquidity and full-scale platform marketing—not because every presale project has one, but because it is the right milestone before more capital sits in automated contracts.

Until NEXT_PUBLIC_AUDIT_REPORT_URL is set on production, treat smart contracts as experimental software.

• Now: automated static analysis in CI, internal review, and public address transparency.
• Planned: scoped third-party review of factory + fee path after presale funding allows.
• When published: report link appears on /legal and in the on-chain status panel automatically.
• Optional interim: NEXT_PUBLIC_AUDIT_IN_PROGRESS=true when an audit is booked but not finished.

Admin keys & Gnosis Safe

Deployer EOA deployed contracts. Ownable admin on the launch factory, fee collector, and fee router is transferred to the published Gnosis Safe on Base when ownership transfer is complete.

The $EYES token uses OpenZeppelin Ownable but has no owner-only mint or pause functions—only transferOwnership() exists. Operational control of the platform is on the factory/fee contracts, not token owner().

Do not confuse treasury (funds) with contract owner (admin). They are different addresses by design.

Presale transparency

Presale is intentionally simple: you send ETH to a known treasury, we verify the transaction on-chain, calculate tier pricing, and queue $EYES delivery from treasury inventory.

• No smart-contract escrow—reduces contract risk but means trust in the published treasury address.
• Contributions are verifiable on BaseScan (ETH in, token transfers out).
• Registration and tier logic run on our server; treat API stats as informational—verify your own tx hashes.
• Read Risk Disclosure before participating.

Roadmap milestones (trust-relevant)

We scale public risk in stages instead of flipping everything live at once.

• Presale window: treasury + token live; factory admin on Safe; no public LP required.
• Before public DEX LP: external audit or scoped review + public report link.
• Full platform scale: liquidity seeding with locker, monitored factory volume, bug bounty consideration.

Red flags — stop if you see these

If anyone claiming to be Eyes Open does the following, it is a scam:

• A “new official” contract address in DMs or Discord DMs.
• Requests to send ETH to a wallet that is not the published treasury.
• Pressure to “ape before audit” with unaudited contracts not listed on /legal.
• Seed phrases, “verification sync,” or wallet connect on unofficial domains.
• Promises of guaranteed returns or “risk-free” presale.

Questions & reports

Security concerns about published contracts: use official Discord/Telegram linked from eyesopen.to only.

We welcome responsible disclosure of bugs in deployed contracts; critical findings may qualify for a bounty once a formal program is announced.