Midwest Smart Contracts shieldMidwest Smart Contracts & Audit Solutions
Public recordsContact
Independent source-level security re-audit
Source-level acceptedMSC-MINNIE-REAUD-2026-002

MINNIE Claim Distributor v1.1

This is a standard SPL-token claim distributor for the official MINNIE mint. The reviewed v1.1 source remediates the prior exact-balance seal griefing issue.

NetworkSolanaReviewed6 September 2026Version1.1
0Critical
0High
0Medium
3Low · accepted
2Informational
01

Executive conclusion

Prior Medium issue remediated

The v1.1 implementation was reviewed against the previous finding. Claim sealing no longer depends on an exact distributor-token balance, removing the identified denial-of-service path caused by unsolicited token transfers.

Precise statusAcceptance applies to the submitted source archive only. It is not yet a deployed-binary attestation and is not a guarantee of economic, operational, or future code safety.

02

Validation

Tests and targeted review

Regression suite

All 13 supplied project tests passed with zero failures.

Passed
Independent allocation stress

A 250-allocation claim stress exercise completed successfully.

Passed
Remediation verification

The exact-balance seal condition identified in the prior version was removed.

Resolved
03

Accepted design risks

Remaining Low findings

L-01

Trusted off-chain registrar

Eligibility and allocation integrity depend on the authorized off-chain registration process.

Accepted design risk
L-02

Global writable claim counter

Claim transactions serialize on one writable counter account and may encounter throughput contention.

Accepted design risk
L-03

No recovery or permanent lifecycle

The reviewed design intentionally provides no administrative recovery or permanent close lifecycle.

Accepted design risk
04

Release conditions

Mainnet verification still required

These items were outside the submitted source-level re-audit and must be completed before describing the deployed program as matching the reviewed source.

  • Produce and archive the exact release Cargo.lock, feature flags, and reproducible production SBF build.
  • Match the deployed program binary to the reviewed release artifact.
  • Record the live ProgramData account and upgrade authority.
  • Confirm the official MINNIE mint and production configuration on Mainnet.
05

Artifact identity

Reviewed package

Program ID in source
74PdwFTJDreMXSqhLNrfJ4gSTiNhEzYdFTHSajHhes5M
Report ID
MSC-MINNIE-REAUD-2026-002
Submitted ZIP SHA-256
dd1ab957b5470a0bec8ed96f6034a78657a8b612d24b0314849594b219cea195

Change controlDo not modify the reviewed files after this audit. Any contract/program change requires a new review.