Ethereum · Pre-launch contract audit · January 2022

Planetary Property Association

I audited Planetary Property Association’s smart contracts before launch, reviewing the ERC-1155 Shuttle Pass and ERC-721 Surrealestates mint logic before the system went live.

Pre-launch smart contract auditor Planetary Property Association Ethereum contracts reviewed before launch, linking Shuttle Passes, allowlists, the Surrealestates mint, and 10,000 NFTs
1,854.79 ETHprimary contract receipts
10,000Surrealestates supply
1,945.226 ETHsecondary trading reported

Project file

PeriodJanuary 2022

Product
A tiered ERC-1155 Shuttle Pass feeding eligibility into a 10,000-piece ERC-721 land collection.
Delivery scope
Pre-launch review of the two-contract architecture, Merkle allocations, sale controls, supply rules, privileged functions, and buyer transaction paths.
Public evidence
7public sources3on-chain records

Project constraints

  1. 01Three pass tiers with different entitlements
  2. 02Two contracts and multiple sale stages
  3. 03Eligibility and transaction feedback before gas

Review two linked contracts before launch and surface risks in eligibility, supply, pricing, sale states, privileged controls, and fund flows.

Planetary Property Association was not a single contract and a mint button. Bronze, Silver, and Gold Shuttle Passes carried different entitlements into the main Surrealestates sale. My role was to audit this contract system before launch: trace the assumptions between the two contracts and review the paths that could affect eligibility, supply, pricing, minting, metadata, or withdrawals.

01

Contract boundary review

I reviewed how the three ERC-1155 Shuttle Pass tiers fed eligibility into the ERC-721 mint, including the assumptions each contract made about supply, token ownership, and sale state.

02

Eligibility and mint-limit checks

I traced Merkle proof validation, per-wallet allocations, public and early mint limits, and price branches to review which paths could mint and under what terms.

03

Sale controls and privileged paths

I reviewed sale-state transitions, owner minting, metadata controls, price setters, and withdrawals, with particular attention to permissions and launch-time misuse.

04

Buyer transaction paths

I followed wallet eligibility, quantity, payable value, failure conditions, and transaction completion from the contract boundary so the team could inspect the full mint path before release.

  1. 01

    Audited the ERC-1155 Shuttle Pass and ERC-721 Surrealestates contracts before launch.

  2. 02

    Reviewed tiered access, Merkle proofs, wallet allocations, sale stages, supply limits, pricing, owner controls, and withdrawals.

  3. 03

    Traced the assumptions between the pass contract, the main collection, and the buyer-facing mint transaction.

  4. 04

    Delivered the contract review before the public mainnet launch.

Post-launch context: the Shuttle Pass contract received exactly 1,854.79 ETH during the 9–10 January 2022 mint; historical market reporting later recorded 1,945.226 ETH in secondary trading.

The audit was completed before launch. Public transaction history after release shows 6,810 successful value-bearing calls to the Shuttle Pass contract between 9 and 10 January 2022, totalling exactly 1,854.79 ETH. Using daily ETH snapshots of roughly $3,083–$3,158, that is about $5.7M–$5.9M at the time. These figures describe the project after the audit; they are not presented as audit findings.

  • Completed the smart contract review before the public launch.
  • The subsequently deployed ERC-1155 and ERC-721 contracts have published source code that makes the released system inspectable.
  • Historical market reporting recorded 9,434 Shuttle Pass sales and 1,945.226 ETH in secondary trading.
From the pre-launch contract review

“David found a backdoor in the contract in less than five minutes. The function could have allowed ETH to bypass the initial investors’ repayment. He gave us clear instructions on what to do next. He saved us 50 ETH, along with a lot of potential legal fees. We are absolutely in his debt.”

Huntclubhero
Huntclubhero.eth Investor
Smart contract security reviewSolidity 0.8.7ERC-1155ERC-721MerkleProofEthereum wallet UXNFT metadata and release operations
Next case study42 Lisboa