Formally verified communal savings & credit protocol.
100% remediation of all 18 security findings (H-01, M-01, L-01–L-10, I-01–I-06) plus design directives DR-02 and DR-03 under the Certora Prover.
Complete invariant, unit, and live Base mainnet fork verification against production Compound III Comet (cUSDCv3) and Chainlink VRF V2.5.
80% of time-weighted Compound III yield distributes pro-rata to members; 20% routes to the ChainPot Safety Module (POL insurance reserve).
Joint Certora × Web3Spell UX scale-up replacing seed phrases and native gas prompts with WebAuthn passkeys and ERC-4337 sponsored USDC transactions.
Every architectural decision begins by isolating the structural failure modes of existing solutions and engineering directly against them.
Rotating Savings and Credit Associations (ROSCAs), known globally as chit funds, tandas, and susus, mobilize hundreds of billions of dollars across two billion people, yet informal physical circles suffer from unpenalized late-stage defaults, opaque manual ledger fraud, 0% yield on idle cash, and 5–9% remittance drag. Conversely, institutional DeFi lending demands >125% over-collateralization, pricing out the exact communities that rely on cooperative credit.
Web3Spell engineered ChainPot V4 on Base, backed by Compound Protocol and formally verified by Certora. After remediating 18/18 Certora Prover security findings and 2 design directives with 100% invariant compliance, Web3Spell and the official Certora team launched a joint operational scale-up: replacing seed phrases and ETH gas hurdles with ERC-4337 Account Abstraction, WebAuthn passkeys, and USDC Paymaster sponsorship across a phased Go-to-Market rollout.
A 7-contract Solidity 0.8.24 suite uniting CircleEngineV4 (payment-gated Chainlink VRF V2.5 social lotteries) and AuctionEngineV4 (reverse-discount SME bidding pots) over RoscaEngineBaseV4, non-custodial pull-only VaultV4 custody, an ERC-4626-hardened CompoundIntegratorV4 supplying idle float into Compound III Comet (cUSDCv3) with an 80/20 yield-and-insurance split, and MemberRegistryV4 reputation scoring.
Explore the defense-in-depth matrix, formal cryptographic equations, end-to-end execution trace, and systems engineering trade-offs.
Because pooled communal capital represents the household savings and working capital of participants, empirical unit testing is insufficient. Certora applied formal verification alongside manual security review across four core audit dimensions.
Replaced cached internalPrincipal (L-09) with live cUSDCv3 balance queries (L-01) and virtual share offsets; proved that contract balances strictly match unallocated deposits + locked collateral (backing == 0 post-claim).
ERC-4626 donation/inflation attacks, token rounding leakage, and ledger drift between internal principal accounting and live Compound III Comet balances.
Enforced payment-gated per-cycle draws (_drawGated fires only when ≥2 eligible members pay; single-payer assigns directly) and 2-step store-then-finalize pull settlement.
Unfunded Circle pots spamming _onStartPot() to drain the shared Chainlink VRF V2.5 subscription (H-01), payout reentrancy during claims, and skipped-cycle race conditions.
Enforced strict 2% minimum bid steps, strictly-lower re-bids, deterministic deadline default flagging, permanent reputation slashing, and protocol-wide repeat-default blacklisting.
Bid manipulation during active payment windows (F-10), bids exceeding totalCollected (H-03), unpenalized late-stage walkaways, and multi-bid reputation farming (M-02).
Proved absolute immutability of pot parameters and Merkle-whitelisted rosters once startPot() executes, paired with timelocked engine binding and bounded admin safety guards.
Mid-cycle parameter tampering, unauthorized roster mutations after pot launch, griefing during pool finalization, and privilege escalation during initialization.
Whether you are architecting zero-knowledge circuits, formally verified DeFi primitives, or a 250-builder ecosystem hackathon, you work directly with our founders and senior engineers.