Trust & Security

Paragon uses a single on-chain escrow contract. You don't have to trust us — you can verify the code yourself on Basescan before trading.

Escrow contract

0x4c0c041d624237cc84a391CB2F62B9688Cd27537

View verified code on Basescan All transactions

If the contract page shows "Contract Source Code Verified", the bytecode on-chain matches the published Solidity source — including OpenZeppelin imports.

What the contract can and cannot do

Allowed

Sellers deposit tokens into escrow
Buyers fully purchase standard listings
Buyers partially purchase crowdfunding listings
Sellers cancel and get unsold tokens back
1% fees sent to the fee wallet on each buy

Not possible

Owner or admin role of any kind
Stealing tokens from active listings
Changing fee % or fee wallet after deploy
Pausing or freezing user funds
Redirecting a buyer's purchase to someone else

How to verify yourself

Open the contract on Basescan and confirm it says "Verified".
Read createListing, buyPartial, and cancelListing — that's all the money-moving logic.
Compare with our repo: contracts/contracts/OtcEscrow.sol
Run tests locally: cd contracts && npm test

Verified source on Basescan

Anyone can read the exact Solidity code deployed at this address and confirm it matches our public repo.

Non-custodial escrow

Tokens sit in the contract until a buyer pays or the seller cancels. Paragon never holds your keys or funds.

Fully immutable

No owner, no admin keys, no upgrade path. The fee wallet is set once at deployment and cannot be changed.

No admin drain

Nobody can withdraw user tokens or ETH from active listings — not even the deployer.

OpenZeppelin libraries

Uses battle-tested SafeERC20 and ReentrancyGuard from OpenZeppelin — industry standard security primitives.

Fixed, transparent fees

1% from seller (tokens) and 1% from buyer (ETH) on each purchase — hard-coded in the contract, not changeable without redeploying.

Automated tests

Seven Hardhat tests cover listing, partial buys, full sell-out, cancel-with-remaining, over-buy rejection, and immutable fee recipient.

Paragon is not a formal audit. For large trades, consider your own review or a professional audit. Never share your private key — all actions happen through your wallet signing transactions to the escrow address above.

← Back to marketplace