Archon public report
PaymentRouter
Mantle Mainnet · scan depth deep · generated 6/11/2026, 9:56:30 PM
Risk Score
29
Archon completed a read-only Mantle Mainnet audit of IRevenueSplitter_Suite__3_contracts_ and found 5 deterministic findings. The highest-priority issue is Timestamp-sensitive settlement lacks explicit tolerance window, with risk score 29/100 based on severity-weighted findings. The contract's settlement mechanism relies on block timestamps without a tolerance window, which can lead to potential issues with timing attacks. Review the recommended fixes and run regression tests before deployment. External imports could not be resolved (openzeppelin/4/contracts/utils/cryptography/ECDSA.sol, openzeppelin/4/contracts/utils/cryptography/EIP712.sol, openzeppelin/4/contracts/access/Ownable.sol, openzeppelin/4/contracts/utils/ReentrancyGuard.sol); static analysis ran in reduced mode, so Slither/import-dependent checks were skipped while Archon's deterministic rules still ran.
Findings
| Severity | Finding | Location | Confidence |
|---|---|---|---|
| medium | Timestamp-sensitive settlement lacks explicit tolerance window The contract's settlement mechanism relies on block timestamps without a tolerance window, which can lead to potential issues with timing attacks. | PaymentRouter.sol:72 | 70% |
| low | Review calldata parameter width The function requestQuote uses a uint256 for the amount parameter, which may be unnecessarily large. | PaymentRouter.sol:69 | 60% |
| info | Cache repeated storage read The pay function reads the quotes mapping multiple times, which can be optimized. | PaymentRouter.sol:79 | 80% |
| info | Cache repeated storage read The _settle function checks the paidQuotes mapping multiple times, which can be optimized. | PaymentRouter.sol:101 | 80% |
| info | Cache repeated storage read The function checks multiple mappings for the same quoteHash, which can be optimized. | PaymentRouter.sol:121 | 80% |