Capped Price Verification
Every secondary market listing verifies ticket pricing limits directly in the EVM smart contract logic. Listings exceeding the maximum original markup are aborted automatically.
Non-Custodial MPC
Social login wallets leverage Circle Multi-Party Computation SDKs. User keys are split and encrypted on-device; no third party, including EventShield, can access your private key.
Dynamic QR Safeguard
Check-in ticket signatures expire every 15 seconds. If a screenshot is replicated, the system rejects validation on the network clock.
Protocol Security Auditing
EventShield smart contracts are written using Solidity v0.8.20 and are compiled and audited prior to deploying to the Arc L1 Testnet chain. Static analysis checks are executed via Slither and Mythril to guarantee zero reentrancy loopholes or arbitrary storage mutations.
We reward security researchers who responsible disclose vulnerabilities in the EventShield smart contracts or frontend interface. Bounties are paid directly in USDC stablecoin on Arc Network.
Up to $10,000 USDC
Direct wallet funds theft, contract balance drain, arbitrary price updates bypass.
Up to $2,500 USDC
Contract state lock, refund policy bypass, ticket metadata hijacking.
Up to $500 USDC
RPC query rate limit failure, frontend validation bypass, email logs leak.
Please send encrypted disclosure logs to security@eventshield.io. Do not publish public proof-of-concepts prior to remediation.