Pangle — Phase-0 Security Audit · Unlimited AI Limited

Security Audit

Prepared by Unlimited AI Limited. An AI-conducted security assessment of Pangle (Phase-0 MVP), with every claim verified against the live PulseChain contract, the running coordinator, and the source — the on-chain log in the appendix is independently reproducible.

Independence: Unlimited AI Limited is a disclosed related party to the Pangle operator (the Green Wick group). This was conducted to an external-grade bar but is not an independent third-party audit; one remains recommended before any value-bearing phase.

Rendering the audit report… (the full report text is embedded in this page's source.)

This page renders the audit from embedded Markdown using a local script. With JavaScript disabled, the complete report is available verbatim in the page source inside the <script id="audit-md"> block below, or view /docs for the technical & security documentation.

Independent external audit — Keylith Security Research. A genuinely arms-length third-party assessment — report KSR-2026-PANG-01. The current revision (v1.2, 2026-06-13) extends the original on-chain review to the now open-sourced coordinator: no Critical or High-severity finding in the $PANG contract or the coordinator source, with single-key operator custody (KL-01) the residual High. The Internal tab holds the disclosed related-party review by Unlimited AI Limited.

Revision history — re-audited at each phase & major milestone

Rev 1.22026-06-13current · shown below

Adds Addendum A — Coordinator Source Audit. With the coordinator now open-sourced (MIT), Keylith independently reviewed the off-chain source: no Critical or High-severity vulnerability in the coordinator, the prior KL-05 gap ("no independent, source-available coordinator review") is largely resolved, and several earlier self-review claims are now verified directly in code. KL-01 — single operator key — remains the residual High and the headline pre-value gate.

Rev 1.02026-06-06view this revision ↗

The initial independent assessment — the live $PANG (PangleToken) deployment + public disclosures, on-chain layer only (the coordinator was closed-source at the time). Confirmed the deployed contract clean and the public disclosures honest, and surfaced the KL-04 supply-reconciliation gap (since corrected).

Each future phase and significant milestone is sent back to the same independent auditor — this record will grow with every revision.

Keylith Security Research · KSR-2026-PANG-01 · v1.2 · PDF Open in new tab ↗

If the report doesn't display inline, open it in a new tab or download the PDF.