The original title is "We open-sourced our security audit. Here's what we found (and fixed)."

Short summary

MarketNow, a payment system for AI agent skills using USDC on Base, underwent a comprehensive security audit before broad launch. The team discovered four critical vulnerabilities—mandate cap bypass, transaction replay attacks, payment underflows, and sender validation gaps—and deployed production fixes including fail-closed error handling, transaction deduplication, and exact-amount validation. They've open-sourced the audit, security methodology, and transparent roadmap for future improvements.

• •Found and fixed 4 critical payment processing vulnerabilities before launch
• •Implemented security improvements: fail-closed errors, transaction dedup, exact-match validation
• •Published full audit methodology and transparent roadmap; third-party audits deferred until revenue

Generated with AI, which can make mistakes.