Contract Scan — Level 1 Contract Review

Update from MAKO Web (2026-08-29)

The comprehensive independent review committed to on 2026-08-17 completed with an overall verdict of FAIL: every code-addressable security and payment finding across all three implementation rounds was independently confirmed resolved, but the review's own production/source-parity control failed — two public roadmap pages did not match their pinned website revision, and the live main roadmap still contradicted itself about Loop availability. Both were fixed the same day; a follow-up focused parity reevaluation independently confirmed the fix with a PASS. On the operator's explicit direction, the price has moved from the $0.01 test value to its real confirmed intro value of $1.99. Final user acceptance testing remains a separate operator decision.

Update from MAKO Web (2026-08-11)

Independent end-to-end IV&V completed with a PARTIAL PASS. Findings CS-IVV-001 through CS-IVV-004 were confirmed resolved in production. Live BSC and Loop utility scans succeeded, including the first live verification of Loop Top Holders. The review recorded six new items: exact displayed-quote binding and a deterministic payment-test seam (Medium); the disabled production Loop option and stale availability copy (Medium); late content-token consumption and missing result self-hash enforcement (Low); and an unspecified data-lifecycle policy (Informational). Same-day update: all five code-addressable items are now fixed and tested (the data-lifecycle policy item remains a separate operator decision, not a code fix). Production remains at the $0.01 test price and PARTIAL PASS status until these changes are deployed and independently reevaluated. No real payment was made at any point during this review or its remediation.

Update from MAKO Web (2026-08-12)

A small Low-severity item was found and fixed the same day it was identified: in a rare failure case, a report-download authorization could be marked used just before the final delivery step instead of after it — no payment or authorization control was weakened, but a customer could have needed to re-authorize a download rather than it succeeding on the first try. Fixed. Overall status remains PARTIAL PASS, pending independent reevaluation of the full round of fixes made this week.

Update from MAKO Web (2026-08-17)

A single, comprehensive independent review has been commissioned to close out this review cycle with one final result, covering everything reviewed and fixed so far in one pass. Contract Scan L1 remains live at the $0.01 test price and PARTIAL PASS status until that review is complete.

Update from MAKO Web (2026-08-06)

A real customer report showed a wallet address (not a token contract) submitted for scanning produced a report reading "Token Name: Unknown" with no useful findings. Contract Scan now runs a read-only on-chain check before payment and warns/blocks on a wallet-vs-contract mismatch, pointing the customer to Wallet Trace instead — no customer is charged for a scan that can't produce a meaningful result.

Update from MAKO Web (2026-08-04)

Contract Scan L1 is now live at https://www.makoinu.com/contract-scan.html: real payment, on-chain verification, auto-run scan, and a real PDF report with a GREEN/YELLOW/RED verdict have all been directly observed working end-to-end on a real contract. A real production issue was found and resolved jointly with the MAKO Posse Team along the way — a credential the scan only needed for a rarely-used fallback path was blocking every scan from starting; MAKO Posse Team fixed it same-day on request. Held at a test price while final user acceptance testing completes, the same gate Wallet Trace L1 went through before its own real intro price went live.

Milestones

Relationship to MAKO Web

This roadmap covers the MAKO Web Team's own integration work. The underlying Contract Scan utility itself is built and tested by the MAKO Posse Team, independently of this page. Contract Scan L1 now appears alongside Wallet Trace L1 on the main MAKO utilities page, following the same customer experience end to end: connect a wallet, pay, and receive a real report.