Security
Last updated October 2026
✓ Independently reviewed
sasa's smart contracts went through three rounds of independent review. No critical, high or open medium findings remain; the reviewer found the code ready for production after the final round.
Read the review (PDF)What was reviewed
About 2,100 lines of Solidity: the contracts that launch coins on every chain, run the bonding curves, decide the winning chain, move money between chains, open the locked Uniswap pools, and run auto orders. Code version: commit bdb63168 with the round 2 and 3 fixes.
Findings and how they were resolved
| ID | Severity | Finding | Resolution |
|---|---|---|---|
| M-1 | Medium | After graduation anyone could move a holder's coins to the winning chain at a moment the holder didn't choose. | Fixed: for 24 hours only sasa's keeper moves other holders; each holder can move their own coins any time; after 24 hours anyone may, so coins never get stuck. |
| M-2 | Medium | If the bridge ever refunded less than a deposit, that money couldn't be re-sent. | Fixed: the refunded amount can be re-sent once, only to the same coin and chain. |
| L-1 | Low | Rounding dust could stay in a settled curve. | Fixed: anything left over goes to the protocol fee at settlement. |
| L-2 | Low | Extra money arriving at graduation opens the pool slightly above the graduation price. | Accepted: it only benefits holders. |
| L-3 | Low | An order's upper limit is checked after the trade. | Accepted: a failing check undoes the whole trade. |
| L-4 | Low | If the keeper stops, the public freeze could be repeated. | Accepted: only when the keeper is down; harmless; monitored. |
| Info | Info | Some admin changes emitted no events. | Fixed: events added. |
What the contracts guarantee
- Money can only end up in a coin's own locked pool, as the published fees, or burned through buybacks. No admin can take it.
- A coin's supply can never exceed 1,000,000,000 across all chains.
- Pool liquidity is locked forever.
- The winning chain is decided by on-chain math from every chain's report.
- Fees have hard caps in the contracts, and selling can never be paused.
Remaining risks
- sasa depends on LayerZero, Across, Uniswap v4 and the issuers of USDC and USDG.
- Money held by the launch curves is capped per chain at first and raised gradually.
- A review lowers risk but can't prove there are no bugs. Meme coins themselves are very risky; see Risks.
The review document is written and published by sasa; it summarizes the independent review in our own words and is not a certificate issued by the reviewer.