MergeGate BASE, BASE-SEPOLIA
Settled on-chain

Correct code still gets refunded if it touches a protected path.

Every row below is a real settlement with a transaction you can open. The refunded one passed the buyer's tests on its merits. It was rejected before those tests ever ran, because it also edited the deploy gate.

0.75
USDC released
0.75
USDC refunded
0.30
Verifier fees paid
6
Contracts settled

Settlements

4KInc/mergegate-demo-task
Verdict Submission Amount Recipient Network Settlement
REFUNDED 1758ca30…fe0e 0.25 USDC 0x5c34e3…31a2 BASE 0x8362ac90…5354 ↗ Receipt →
SETTLED 97e4bd61…9373 0.25 USDC 0xbe1424…a558 BASE 0xf8cb4b0f…e9b6 ↗ Receipt →
REFUNDED 272356db…30aa 0.25 USDC 0x5c34e3…31a2 BASE 0x4581edf6…5b1e ↗ Receipt →
SETTLED e83964b7…10ff 0.25 USDC 0xbe1424…a558 BASE 0xb8a45ef2…e827 ↗ Receipt →
REFUNDED 906e9c8c…2d14 0.25 USDC 0x008ed5…6acc BASE-SEPOLIA · rehearsal 0x34eb52f0…b6c7 ↗ Receipt →
SETTLED a34a6bf1…248a 0.25 USDC 0x2219ac…e882 BASE-SEPOLIA · rehearsal 0xe5affe62…9229 ↗ Receipt →

Totals span every network shown. Rows marked rehearsal settled on Base Sepolia, not mainnet.

Settlement integrity

one contract → one eligible SHA
→ one verification → one terminal settlement

Enforced in three independent places: webhook de-duplication, the settlement state machine, and the payment rail's idempotency key. They fail independently, which is the point.

Sandbox posture

gVisor isolation No outbound TCP DNS resolution available No secrets mounted 2 vCPU / 4 GiB 600s timeout Ephemeral .git history stripped

Measured by probing inside a live Cloud Run Job, not assumed. DNS still resolves and is disclosed rather than rounded up to "default-deny". See the probe →