Start Earning →
← Back to MyAi
Live system status →

Security & Audits

MyAi Network is built with security-first principles across every layer — from smart contracts on Base to API infrastructure and compliance integrations with the Infinihash ecosystem.

🔒
Smart Contract
Deployed & Verified
Basescan verified
🛡️
KYC Integration
Live — Infinihash KYC
10,000+ sanctions labels
📡
KYT Monitoring
Live — 24/7 Monitoring
Multi-chain coverage including BTC, ETH, BSC, Base, Tron, Solana
⚡
API Security
JWT + API keys
CORS + CSP enforced; API rate limits not yet enabled
🔐
Liquidity Lock
Pending — Pre-TGE
Aerodrome vAMM
📋
Formal Audit
Planned Post-TGE
Post-TGE

Smart Contract Security

MYAI Token Contract0xAfF22CC20434ce43B3ea10efe10e9360390D327c
NetworkBase (Chain ID 8453)
Token StandardERC-20
Contract SourceOpen-source, Basescan verified
LiquidityAerodrome Finance vAMM (lock pending)
Mint AuthorityRenounced post-TGE
Referral RegistryDeployed — Base Sepolia
Reputation RegistryDeployed — Base Sepolia

Smart contract code is open-source and available for review at Basescan. Static-analyzer scan results published 2026-05-17: Slither + Aderyn report. A formal third-party audit is planned post-TGE.

Compliance Infrastructure

KYC Platform
  • AI-powered identity verification
  • 10,000+ sanctions labels (incl. OFAC SDN)
  • AML risk scoring (0–100)
  • Institutional-grade onboarding
  • Real-time entity screening
View Platform →
KYT Engine
  • Real-time transaction monitoring
  • Multi-chain coverage including BTC, ETH, BSC, Base, Tron, Solana
  • OpenCorporates integration
  • GDELT news risk scoring
  • Automated alert workflows
View Platform →

API & Infrastructure Security

✓JWT-based authentication (RS256)
✓Rate limiting on website API routes (coordinator API rate limiting is not yet enabled)
✓CORS with origin allowlist
✓Helmet.js security middleware
✓Content Security Policy (CSP)
✓HSTS with preload
✓Input validation & sanitization
✓SQL injection prevention (ORM)
✓API key rotation policy
✓No sensitive data in logs
✓Cloudflare WAF + DDoS protection
✓HTTPS-only (TLS 1.2+)

Responsible Disclosure

We welcome responsible security disclosures from the community. If you discover a vulnerability in any MyAi or Infinihash service, please report it privately before public disclosure.

Security email
[email protected]
Response time
< 48 hours
Bug bounty
Coming post-TGE
Scope
All *.myaitoken.io, *.infinihash.com

Network Transparency

MyAi Network publishes live operational data so anyone can verify the GPU pool, job throughput, and earnings distribution. This is intentional — a DePIN network without observable health stats is impossible for the community to trust.

  • /api/network — open, unauthenticated. Returns per-agent: GPU model, VRAM, driver version, temperature, power draw, reliability score, jobs completed/failed, and MYAI earnings (pending + paid). Refreshed every 30 s. No account data, wallet keys or customer records are exposed. Agent labels are operator-chosen and public by design — if you run a node, set a display name you are happy to publish, because the default is your machine’s hostname.
  • /leaderboard — top providers by jobs completed and MYAI earned.
  • /explorer — recent inference jobs and their routing decisions.
  • OpenAPI 3.1 spec — every public endpoint documented.

Note: Agent earnings shown are MYAI denominated, derived from on-chain job completion records. No bank or fiat data is ever exposed.

← HomeDocsMarketplaceNetwork DashboardBasescan Contract