ShopChain is a crypto e-commerce dApp where customers pay for orders in USDT. The `PayWith` checkout contract pulls funds from the buyer to the merchant and then marks the order as fulfilled so the warehouse can ship. The team integrated several ERC-20 tokens as accepted payment. Somewhere in the payment flow, an order can be marked paid even when no money actually moved. Review the contracts and find the flaw that lets a buyer check out for free.

QuickLend is a permissionless money market where users supply any ERC-20 as collateral and borrow USDQ stablecoins against it. To keep the protocol fully on-chain and oracle-free, the team values collateral by reading the live exchange rate from the token's Uniswap V2 pair against USDQ. Borrowers love it because listing a new collateral type is instant — no Chainlink feed required. Review the pricing path that determines how much a borrower can withdraw.

ChainGov is an on-chain governance protocol that controls a multi-million-dollar community treasury. Holders of the GOV token create proposals and vote, with each vote weighted by the voter's token balance. Proposals are designed to execute automatically once they reach quorum so the community doesn't have to wait around. The team prides itself on a "frictionless" governance UX. Review the voting and execution logic — is there a way someone who has never genuinely held tokens could push a proposal through?

SwapZap is a one-click "zap" DeFi tool: users hand over any ERC-20 token and the contract routes it through Uniswap V2 into a target asset in a single transaction. The team built it to make portfolio rebalancing effortless for retail users. During a routine pre-launch review, take a close look at how the swap call is constructed in the core contract — those raw router calls deserve scrutiny.

StreamPay is an on-chain payroll-streaming protocol. Employers fund a salary stream and employees withdraw their accrued pay continuously, second by second. The team rewrote the withdrawal hot path to shave gas off every payday transaction. Review the accounting logic and decide whether an employee can take home more than they earned.

Review the smart contract code for GameGold, a play-to-earn gaming token deployed on Ethereum. The token powers an in-game economy where players can upgrade items by burning tokens. The development team recently implemented a burnFrom function to allow the game contract to burn tokens on behalf of players who approve the operation. Players are reporting that their tokens are mysteriously disappearing. Investigate the token burning mechanism to identify any security issues.

Review the smart contracts for VestFlow, a token vesting protocol built on Superfluid streams. The protocol allows startups to vest tokens to investors over time using continuous money streams. Recently integrated with Superfluid's callback system for automated distributions. Examine how the protocol handles Superfluid callbacks and context data to ensure investor funds are protected.

Review the smart contracts for Obscura, a privacy-focused ERC20 payment token designed for anonymous transactions. The protocol implements non-standard approval mechanics to obscure spender identities on-chain. A major payment processor has integrated Obscura, and users are granting allowances for recurring payments. Examine the token transfer logic to ensure user funds are protected.

Review the smart contracts for GovCore, a decentralized governance protocol that recently launched on mainnet. The protocol allows token holders to vote on proposals that control a community treasury worth millions in ETH. The team implemented a custom ERC20 token with snapshot-based voting power. Auditors flagged potential issues with the token transfer mechanics. Examine how token balances and voting power are tracked to ensure the governance system cannot be manipulated.

Review the smart contracts for LuckyDraw, a decentralized lottery protocol on Ethereum. The platform allows users to purchase tickets for weekly prize pools, with winners selected on-chain for full transparency. After several rounds, the community noticed that the same wallet keeps winning despite low ticket holdings. Investigate the winner selection mechanism to ensure fair randomness.

Review the smart contracts for ArtBazaar, an NFT marketplace that allows digital artists to mint and list their artwork in a single seamless transaction. The platform recently integrated a new minting flow to improve user experience. The engineering team wants a security review of the mint-and-list functionality before the mainnet launch. Pay close attention to how state changes interact with external calls.