{"attestations":{"network":"ethereum","chainId":1,"eas":"0xA1207F3BBa224E2c9c3c6D5aF63D0eb1582Ce587","schemaUid":"0xbe00b10abb2fbae864b99c6ace4e0e622d5f690f822466e167353c32534dc3fb","schema":"string[] projectIds,uint64 reviewedAt,uint32 revision","attester":"0xa34C25578519beaa7A5F24e38BBa89A34594e4ee","current":{"uid":"0xcc6f0dbb88995141351b3fa017c1136be7cd5f6eb0b3f689fc2712084df3f271","revision":1,"reviewedAt":1793145600,"projectIds":["safe","tornado-cash","uniswapv2","uniswapv3"],"txHash":"0x29c8743362e7f0f48f1fe21eb2b62a3cb9dbdf212172af2de09ebe6c27c85697","explorerUrl":"https://easscan.org/attestation/view/0xcc6f0dbb88995141351b3fa017c1136be7cd5f6eb0b3f689fc2712084df3f271"}},"generatedAt":1793901420,"commit":"3197d43b00f71695e1cd7bbcfbbaaf94c9aa9085","projects":[{"id":"aztecnetworkv6","slug":"aztecnetworkv6","name":"Aztec Network v6","href":"https://ethbeat.org/layer2s/projects/aztecnetworkv6","crops":{"censorshipResistance":{"sentiment":"warning","status":"reviewed","points":["Sequencing is permissionless with no single privileged actor.","Decentralised sequencing and private execution environment provide excellent realtime, probabilistic CR.","Exit window is infinite due to immutable core contracts + Escape Hatch.","Passes the walkaway test."],"missing":["No deterministic CR: Self-proposal is probabilistic through the escape hatch."],"additionalConsiderations":[],"notReviewed":[]},"openSource":{"sentiment":"good","status":"reviewed","points":["Onchain verifier has been reproduced.","Rollup is forkable onchain by design."],"missing":[],"additionalConsiderations":[],"notReviewed":[],"license":{"spdxId":"Apache-2.0","name":"Apache License, Version 2.0","url":"https://opensource.org/license/apache-2-0","categories":["popular-strong-community"]}},"privacy":{"sentiment":"good","status":"reviewed","points":["Programmable privacy: private state, private and public smart contracts are protocol-native.","Private transactions are proven client-side (private inputs do not leave the device)."],"missing":["The complicated execution environment might leak some metadata."],"additionalConsiderations":[],"notReviewed":[]},"security":{"sentiment":"bad","status":"reviewed","points":["All state is validated with validity proofs on Ethereum."],"missing":["No multiproof system.","An exploit in the single proof system combined with private execution can be fatal for the protocol."],"additionalConsiderations":[],"notReviewed":["Circuit breakers and rate limits."]}},"inGarden":false,"attestation":null},{"id":"ethscriptions","slug":"ethscriptions","name":"Ethscriptions","href":"https://ethbeat.org/layer2s/projects/ethscriptions","crops":{"censorshipResistance":{"sentiment":"good","status":"reviewed","points":["A based rollup with no sequencer: L2 state is derived deterministically from ethscription activity on Ethereum, so ordering is decided by L1 and any user can force a transaction there.","The Rollup contract is not upgradeable and cannot be paused, so the exit window is infinite.","State proposing falls back to permissionless after a timeout."],"missing":[],"additionalConsiderations":[],"notReviewed":["Whether transaction filters could live in the node state transition function."]},"openSource":{"sentiment":"good","status":"reviewed","points":["The node, the modified geth, the zk fault proof stack and the onchain verifier are all published.","Both the verifier contracts and the program hashes can be independently regenerated from source."],"missing":[],"additionalConsiderations":[],"notReviewed":["License permissiveness across the stack, so fork rights are unconfirmed.","Node build reproducibility, as distinct from the program hashes."]},"privacy":{"sentiment":"neutral","status":"fullyTransparent","points":["The protocol does not make privacy claims, and is fully transparent.","Ethscription activity and the L2 state derived from it are public on Ethereum."],"missing":[],"additionalConsiderations":[],"notReviewed":[]},"security":{"sentiment":"good","status":"reviewed","points":["State is validated on L1 with SP1 validity proofs and the Rollup contract is immutable, putting it at Stage 2.","An application-specific chain with no general-purpose contract deployment, which keeps the surface small."],"missing":["No canonical bridge, so asset movement depends on third-party bridges assessed separately."],"additionalConsiderations":[],"notReviewed":["Audit coverage.","Trusted setup requirements of the proof system.","Prover decentralization and multiproof.","Circuit breakers and rate limits.","Ossification score."]}},"inGarden":false,"attestation":null},{"id":"safe","slug":"safe","name":"Safe","href":"https://ethbeat.org/defi/projects/safe","crops":{"censorshipResistance":{"sentiment":"good","status":"reviewed","points":["The core contracts are immutable and cannot be paused, so the exit window is infinite.","Anyone can create an account, and anyone can submit a transaction once enough owners have signed it.","Only an account's owners, and the modules they enable, can act for it or change its rules.","Passes the walkaway test: owners do not need the Safe{Wallet} interface or the Safe transaction service."],"missing":[],"additionalConsiderations":[],"notReviewed":["Modules and guards an account enables."]},"openSource":{"sentiment":"good","status":"reviewed","points":["The contracts are under the LGPL and the Safe{Wallet} interface under the GPL.","The contracts are verified onchain and can be built and run locally."],"missing":[],"additionalConsiderations":["Since February 2026, new code in the Safe transaction service is under the source-available FSL, converting to MIT after two years. The contracts do not need the service, and its earlier MIT version can be self-hosted."],"notReviewed":[],"license":{"spdxId":"LGPL-3.0","name":"GNU Lesser General Public License version 3","url":"https://opensource.org/license/lgpl-3-0","categories":["popular-strong-community"]}},"privacy":{"sentiment":"neutral","status":"fullyTransparent","points":["The protocol does not make privacy claims, and is fully transparent.","Owners, thresholds and transactions are public onchain."],"missing":[],"additionalConsiderations":[],"notReviewed":[]},"security":{"sentiment":"good","status":"reviewed","points":["The implementations, factories and default fallback handlers are immutable and have no owner.","No external dependency: no oracle, no bridge.","v1.3.0 was audited by G0 Group, v1.4.1 by Ackee Blockchain except for one small ERC-4337 compatibility fix, and v1.5.0 by Certora and Ackee Blockchain."],"missing":[],"additionalConsiderations":["Owners sign a transaction hash, so a compromised interface can make them sign something else. This is how Bybit's account was drained in February 2025.","Delegatecalls, modules and guards are as safe as the code they point to.","No circuit breakers or rate limits beyond what an account adds itself. A bug in an implementation would reach every account using it."],"notReviewed":[]}},"inGarden":true,"attestation":{"uid":"0xcc6f0dbb88995141351b3fa017c1136be7cd5f6eb0b3f689fc2712084df3f271","revision":1,"reviewedAt":1793145600,"explorerUrl":"https://easscan.org/attestation/view/0xcc6f0dbb88995141351b3fa017c1136be7cd5f6eb0b3f689fc2712084df3f271"}},{"id":"tornado-cash","slug":"tornado-cash","name":"Tornado Cash","href":"https://ethbeat.org/privacy/projects/tornado-cash","crops":{"censorshipResistance":{"sentiment":"good","status":"reviewed","points":["The core contracts are immutable and cannot be paused, so the exit window is infinite.","CR based on Ethereum L1 inclusion.","Passes the walkaway test.","Multiple active relayers; users can self-relay withdrawals."],"missing":[],"additionalConsiderations":[],"notReviewed":[]},"openSource":{"sentiment":"good","status":"reviewed","points":["Reproducible from source: anyone can audit it and run it locally to participate."],"missing":[],"additionalConsiderations":[],"notReviewed":[],"license":{"spdxId":"GPL-3.0","name":"GNU General Public License version 3","url":"https://opensource.org/license/gpl-3-0","categories":["popular-strong-community"]}},"privacy":{"sentiment":"good","status":"reviewed","points":["Unconditional privacy.","Clearly defined anonymity set per fixed-denomination pool."],"missing":[],"additionalConsiderations":[],"notReviewed":[]},"security":{"sentiment":"good","status":"reviewed","points":["Simple design."],"missing":["Brittle onchain governance (token voting) controls the official frontend (ENS+IPFS)."],"additionalConsiderations":[],"notReviewed":["Formal verification."]}},"inGarden":true,"attestation":{"uid":"0xcc6f0dbb88995141351b3fa017c1136be7cd5f6eb0b3f689fc2712084df3f271","revision":1,"reviewedAt":1793145600,"explorerUrl":"https://easscan.org/attestation/view/0xcc6f0dbb88995141351b3fa017c1136be7cd5f6eb0b3f689fc2712084df3f271"}},{"id":"umbra","slug":"umbra","name":"Umbra Cash","href":"https://ethbeat.org/privacy/projects/umbra","crops":{"censorshipResistance":{"sentiment":"good","status":"reviewed","points":["The core contracts are immutable and cannot be paused, so the exit window is infinite.","Passes the walkaway test: nobody can stop a recipient from claiming a payment already sent to them, and withdrawals can always be self-relayed.","The contracts censor nobody - the owner can only raise the ETH toll on contract-routed payments, which applies to everyone equally. The hosted app refuses sanctioned and blocklisted addresses."],"missing":["ERC-20 stealth transfers are currently relayed only by Umbra Cash relayer, privacy guarantees are weakened if it censors withdrawals."],"additionalConsiderations":[],"notReviewed":[]},"openSource":{"sentiment":"good","status":"reviewed","points":["The immutable core contracts, the cryptographic library and the frontend are published and can be built and run locally."],"missing":[],"additionalConsiderations":[],"notReviewed":[],"license":{"spdxId":"MIT","name":"The MIT License","url":"https://opensource.org/license/mit","categories":["popular-strong-community"]}},"privacy":{"sentiment":"warning","status":"reviewed","points":["Recipient privacy with no protocol-level compliance mechanism and no privileged view key."],"missing":["Only who controls the receiving address is hidden - the sender, the amount and the stealth address stay public.","The hosted app sends the operator the user's wallet address and withdrawal addresses in one session."],"additionalConsiderations":[],"notReviewed":[]},"security":{"sentiment":"good","status":"reviewed","points":["A small, immutable, externally audited contract set with no proof system and no trusted setup."],"missing":[],"additionalConsiderations":[],"notReviewed":["Ossification score."]}},"inGarden":false,"attestation":null},{"id":"uniswapv2","slug":"uniswapv2","name":"Uniswap V2","href":"https://ethbeat.org/defi/projects/uniswapv2","crops":{"censorshipResistance":{"sentiment":"good","status":"reviewed","points":["The core contracts are immutable and cannot be paused, so the exit window is infinite.","Anyone can create a pair, swap, or withdraw liquidity, with no permission and no operator in the path.","Governance, through a 2-day timelock, can only choose who receives the protocol fee, fixed in code at 1/6 of LP fees. It cannot block swaps, freeze liquidity or touch LP funds.","Passes the walkaway test: pairs work without the team, the interface or governance, and any contract can call them directly."],"missing":[],"additionalConsiderations":[],"notReviewed":["The interfaces users reach the pairs through."]},"openSource":{"sentiment":"good","status":"reviewed","points":["The core, the periphery and the interface are published under the GPL.","The contracts are verified onchain, and can be built and run locally alongside a self-hosted interface."],"missing":[],"additionalConsiderations":[],"notReviewed":[],"license":{"spdxId":"GPL-3.0","name":"GNU General Public License version 3","url":"https://opensource.org/license/gpl-3-0","categories":["popular-strong-community"]}},"privacy":{"sentiment":"neutral","status":"fullyTransparent","points":["The protocol does not make privacy claims, and is fully transparent.","Swaps and liquidity positions are public onchain."],"missing":[],"additionalConsiderations":[],"notReviewed":[]},"security":{"sentiment":"good","status":"reviewed","points":["Every contract that holds user funds is immutable, with no upgrade path.","No external dependency: no oracle, no bridge.","The core has secured value at very high volume since 2020."],"missing":[],"additionalConsiderations":["Per-pair token and liquidity risk stays with the user.","No circuit breakers or rate limits. A faulty token only affects its own pairs, but a bug in the pair code would reach all of them."],"notReviewed":[]}},"inGarden":true,"attestation":{"uid":"0xcc6f0dbb88995141351b3fa017c1136be7cd5f6eb0b3f689fc2712084df3f271","revision":1,"reviewedAt":1793145600,"explorerUrl":"https://easscan.org/attestation/view/0xcc6f0dbb88995141351b3fa017c1136be7cd5f6eb0b3f689fc2712084df3f271"}},{"id":"uniswapv3","slug":"uniswapv3","name":"Uniswap V3","href":"https://ethbeat.org/defi/projects/uniswapv3","crops":{"censorshipResistance":{"sentiment":"good","status":"reviewed","points":["The core contracts are immutable and cannot be paused, so the exit window is infinite.","Anyone can create a pool at an enabled fee tier, swap, or withdraw liquidity, with no permission and no operator in the path.","Governance, through a 2-day timelock, can only enable new fee tiers and set a protocol fee capped in code at 1/4 of LP fees per side. It cannot block swaps, freeze positions or touch LP funds.","Passes the walkaway test: pools work without the team, the interface or governance, and any contract can call them directly."],"missing":[],"additionalConsiderations":[],"notReviewed":["The routers and interfaces users reach the pools through."]},"openSource":{"sentiment":"good","status":"reviewed","points":["The core, the periphery and the interface are published under the GPL. The core was under a Business Source License until it converted to the GPL in 2023.","The contracts are verified onchain, and can be built and run locally alongside a self-hosted interface."],"missing":[],"additionalConsiderations":[],"notReviewed":[],"license":{"spdxId":"GPL-2.0","name":"GNU General Public License version 2","url":"https://opensource.org/license/gpl-2-0","categories":["popular-strong-community"]}},"privacy":{"sentiment":"neutral","status":"fullyTransparent","points":["The protocol does not make privacy claims, and is fully transparent.","Swaps and liquidity positions are public onchain."],"missing":[],"additionalConsiderations":[],"notReviewed":[]},"security":{"sentiment":"good","status":"reviewed","points":["Every contract that holds user funds is immutable, with no upgrade path.","No external dependency: no oracle, no bridge.","The core has secured value at very high volume since 2021."],"missing":[],"additionalConsiderations":["Per-pool token and liquidity risk stays with the user.","No circuit breakers or rate limits. A faulty token only affects its own pools, but a bug in the pool code would reach all of them."],"notReviewed":["The routers and approval contracts that sit outside the pools, which are assessed separately."]}},"inGarden":true,"attestation":{"uid":"0xcc6f0dbb88995141351b3fa017c1136be7cd5f6eb0b3f689fc2712084df3f271","revision":1,"reviewedAt":1793145600,"explorerUrl":"https://easscan.org/attestation/view/0xcc6f0dbb88995141351b3fa017c1136be7cd5f6eb0b3f689fc2712084df3f271"}}]}