Reviews
The CharmMine contract was reviewed three times before deployment. The reviews were done by AI models, not by an audit firm.
1. Adversarial review — Opus (Anthropic)
Funds: no issue found. Fairness: four issues (mining before launch, one-block bursts, keeping only rare results, front-run downgrades). Fixed with START_BLOCK, TooFast, tier caps and minTier.
2. Adversarial re-review — Opus (Anthropic)
Two more issues, both fixed: tier caps now release with minting progress, and idle time restarts the window timer. Verdict: safe to deploy.
3. Engineering review — GPT 6 Astra (via Codex)
Critical 0, High 0, Medium 0, Low 4, Info 3. 111 + 13 tests and 4 mainnet-fork tests pass.
Findings of the engineering review
- Low: metadata strings were only partly checked; some characters could have broken the metadata. Fixed: the constructor rejects them.
- Low: an extreme price setting could overflow before the price cap. Fixed: the constructor rejects such settings.
- Low: a backup deployment tool recomputed the start block. Fixed: it now requires the exact block.
- Low: the deployment runbook had outdated function names and steps. Fixed.
- Info:
checkWorkconfirms the work only, not every mint condition. Documented. - Info: BNB forced into the contract cannot be withdrawn; normal mints leave no balance. Documented.
- Info: an old deployment file was in the repository; it must be regenerated before each deployment. Documented.
After the reviews
Version 6, the deployed one, fixes the four Low findings with input checks and documentation only; minting, payment, difficulty and rarity logic did not change. Checked with 124 tests and 4 mainnet-fork tests; not reviewed again.