Skip to content
Justlink
Links

Justlink

Security

Justlink is non-custodial: USDC moves through the on-chain PaymentRouter to recipients. Off-chain APIs store titles and webhooks only.

Contract

  • Network: Arc Testnet (chain id 5042002)
  • Router: 0x706a665dC61c49eb6b3c8ca7C2B1e9d9DD636D5C
  • Prefer verifying the contract source on the explorer before sending mainnet funds. See the repo SECURITY.md and audit status.

Application controls

  • Metadata writes require an EIP-191 signature from the on-chain session creator
  • Paid webhooks fire only after on-chain Paid event verification
  • Webhook URLs are https-only with private-network blocking
  • API rate limits reduce abuse

Responsible disclosure

Please report security issues privately via Support (do not open a public issue with exploit details). Allow reasonable time for a fix before disclosure.