Terms of Service — MEDUSA AUDITS

1. Services

MEDUSA AUDITS provides AI-assisted, human-verified smart contract security analysis. Our services include automated scanning, manual code review, and delivery of branded audit reports. Services are provided on a per-engagement basis as described in our pricing tiers.

2. Payment & Escrow

Payment is accepted in USDC on Polygon PoS via our audited PaymentEscrow smart contract at address 0x2904aEB6b72867A75451deC78B8712EC01201623. The contract is owned by our Director's Safe multisig wallet.

Escrow protection: All payments are escrowed on-chain. If MEDUSA AUDITS fails to deliver, the client receives a full refund via the contract's refund() function. Funds are only released to MEDUSA upon successful delivery.

KYC/Data window: Upon payment, a 24-hour window opens for the client to provide complete, accurate project data and any required KYC information. If the client fails to comply within this window, an escalating intake fee (20-40% depending on tier) may be retained to compensate for intake/research work consumed. The remainder is returned to the client.

Anti-abuse bounds: The intake fee is hard-capped at 50% — the client always recovers at least half. The KYC window cannot be set below 12 hours. Once KYC is confirmed, forfeiture is impossible and MEDUSA must deliver or issue a full refund.

3. Scope & Limitations

Our audits analyze smart contract code for known vulnerability patterns, logic errors, and security best practices. An audit does NOT guarantee the absence of all vulnerabilities. We are not liable for any losses, hacks, or exploits that may occur before, during, or after the audit engagement.

4. Confidentiality

We treat all client code and findings as confidential. Audit reports are only shared with the client unless the client expressly authorizes public disclosure. On-chain certificates reference a report hash but do not expose findings.

5. Disclaimer

MEDUSA AUDITS provides security analysis services on an "as-is" basis. We make no warranties, express or implied, regarding the completeness or accuracy of our findings. Our maximum liability is limited to the fee paid for the specific audit engagement.