TRND — SeedRound & Multisig — Security Audit ✅ Passed

TierZero certifies that the smart-contract code below was audited and that all Critical, High, and Medium findings were resolved and independently re-verified.

Project	TRND Token Sale — SeedRound & Multisig
Chain	TON (Tact, TVM)
Auditor	TierZero — https://tierzero.dev
Certificate ID	TZ-2026-07-A4F2
Audited commit	e373f36
Audit date	2026-07-07
Verdict	✅ Passed

---

Scope

This certificate covers the two contracts going live in the first mainnet phase:

• SeedRound (seed_round.tact) — USDT-paid seed allocation registry.
• Multisig (multisig.tact) — the M-of-N owner that controls treasury withdrawals.

The full TRND suite (jetton, ICO, staking, vesting) was reviewed in the same engagement and its findings were fixed and re-verified as well; those contracts deploy in later phases and will be added here as they go live.

How we audited

• Manual, line-by-line review by senior engineers, focused on the TON message model (sender verification, bounce handling, value carried across message hops), gas/storage, 257-bit arithmetic, TEP-74 conformance, and access control.
• TON Sandbox / Blueprint test suite: 77 tests passing, including 13 TierZero proof-of-concept & re-verification tests that first reproduce each issue and then prove the fix holds.

Findings — all Critical/High/Medium resolved

The audit surfaced 1 High and 8 Medium issues (plus Low/Informational). Every one was fixed by the team and re-verified by TierZero. Highlights:

#	Finding	Status
HIGH-01	Jetton wallet missing bounce recovery → token loss & supply desync	✅ Fixed & re-verified
MED-01	Withdrawal power concentrated in one key	✅ Fixed — split to a multisig-controlled treasury
MED-06	Lost signer key could freeze governance (5-of-5)	✅ Fixed — quorum rotation + survivable 3-of-5 threshold
MED-07	A single signer could veto a quorum-approved order	✅ Fixed — cancellation is now submitter-only
MED-08	Duplicate signers could brick the multisig	✅ Fixed — uniqueness enforced at init

Remaining items are Informational / low-severity hardening notes with no impact on funds safety.

Verdict

The SeedRound and Multisig contracts, at commit e373f36, are well-engineered and safe by our review: the team responded to every finding quickly and correctly, and the fixes were confirmed with reproducible tests. TierZero approves this code. 👏

Mainnet contract addresses will be listed here at go-live, after TierZero's on-chain verification (multisig threshold 3-of-5, treasury wired to the multisig, deployed code-hash matching the audited commit).

This certificate attests to the audited source code at the stated commit. A security audit reduces risk but does not guarantee the absence of all vulnerabilities.