Client: Syndicate

Project: Sydicate AppChain / Core Protocol

Industry: Web3

Service: Smart Contract Audit

Syndicate is building programmable appchains and a transaction-first stack that spans L1 > L3. Over the past months, we completed three focused audits for Syndicate to validate their token mechanics, core sequencing architecture, and a multi-chain staking & emissions system.

Key Audit Focus Areas

  1. SYND Crosschain Token We reviewed role-gated minting, bridge authorization, CREATE3 determinism, proxy safety for Arbitrum/Optimism, and pause/recovery readiness. All 9 findings (0 Critical / 3 High / 3 Medium / 2 Low / 1 Informational) were remediated or acknowledged by July 8, 2025.

  2. Core Protocol We assessed sequencing logic, module composition (AND/OR/composite), permission boundaries, bridge integration and rate-limit guarantees, plus CREATE3 deployment hygiene. 5 findings (0 Critical / 1 High / 3 Medium / 1 Low) were fixed by July 27, 2025.

  3. Staking & Emissions We verified the geometric-decay emissions design (80M SYND across 48 epochs), time-weighted pro-rata accounting, L1→L2→L3 bridges, reward pools, and access controls. 7 findings (0 Critical / 1 High / 4 Medium / 2 Low) were fully addressed by September 16, 2025.

Key Findings and Resolutions

Notable fixes Token:

  • Patched a crosschain path that could inflate supply beyond cap; tightened bridge manager privileges; hardened emission scheduler controls.

  • Core: Removed unbounded array/gas behaviors in TEE modules; added collision checks and upgrade validation; reduced front-running surface in config flows.

  • Staking & Emissions: Added zero-address protections on reward claims; refined relayer fee accounting; improved precision guarantees in reward math.

Yannik Heinze, CEO of Softstack: “In Web3, trust is built on code. Our mission at Softstack is to make sure that trust is never broken, by delivering audits that turn complex systems into secure foundations.”

Will Papper (Co-Founder): “Security is fundamental to everything we’re building at Syndicate. Working with Softstack allowed us to validate our architecture across token mechanics, sequencing, and emissions.”

Why this matters

Cross-chain systems multiply complexity: token bridges, retryable tickets, rate limits, epoch math, and time-weighted staking. Syndicate’s fixes reduce systemic risks and improve liveness & correctness for users and partners.

Read the Reports

  • SYND Token Audit (09.07.2025) — All 9 findings addressed.
  • Core Protocol Audit (25.07.2025) — All 5 findings fixed by 27.07.2025.
  • Staking & Emissions Audit (16.09.2025) — All 7 findings mitigated.

Read the full audit report here: https://github.com/softstack/Smart-Contract-Security-Audits/tree/master/Syndicate Learn more about Syndicate: https://syndicate.io