Security & Transparency
Escrows are non-custodial: the team cannot send escrowed funds to an arbitrary address. The 3-of-5 Safe multisig can pause new activity and, in a dispute, can only split the funds between client and provider. Withdrawals of credited funds keep working even when the contracts are paused.
The team
Based in France · Founder KYC verified by SpyWolf · Company registration (SAS) in progress
JoobEscrow was founded by a builder with over 20 years of experience in IT and finance, and a long-standing focus on DeFi. The founder's identity has been verified through a KYC with SpyWolf, the firm that audited our contracts. We chose to stay publicly pseudonymous and to make trust verifiable on-chain instead: audited contracts, a 3-of-5 Safe multisig, and team tokens locked in a vesting contract until January 2028.
Safe signers (3 of 5 required for any admin action)
No single member can move funds: every admin action needs 3 of the 5 signers below. See every Safe transaction ↗
- T.S., Founder0x944b6B2266FA2e21Ec95c507860a65769b948c39 ↗
- I.N., Lead Solidity Developer0x8f72097717722D15c796aebD06AD7EaF3a1b41f7 ↗
- E.M.S., Growth & Marketing0x46E10f8774C331F3f18EBeca1Dd5Cf9c30C7637a ↗
- S.Y., Arbitration Lead0xFF26Ed2Ed32E06E09BeA8253Be0C8C2D7669532a ↗
- C.A.B., Security & Audits0xEc68d396DBd080fBe18b1f47629880d51727FeBC ↗
KYC certificate ↗Verified audits
Every contract that holds or distributes funds was audited by SpyWolf before launch. An audit reduces risk but cannot rule out every bug.
Escrow contract (V4)
0 critical, 0 high. 1 medium and 2 low findings, all fixed and re-checked by SpyWolf. Same code on all 5 escrow contracts and the 0% public demo contract listed below.
JOOB token
Fixed supply of 1,000,000,000, no mint after deployment, no transfer tax. No critical, high or medium issue.
Presale vault
Sealed vault, public price schedule, on-chain vesting for every buyer. No critical, high or medium issue.
JOOB staking
Stake JOOB, earn JOOB in 30-day periods, 7-day withdrawal delay. Owned by the Safe multisig; opens after the TGE.
Fee grid
Escrow fees: 5% under $1,000, 3% up to $10,000, 2% above. Taken from the provider's payout, no fee for the client.
| Deal amount (USDT or USDC) | Provider fee, read on-chain | Contract |
|---|---|---|
| $1 to $999.99 | ... | 0x56c2...58c7 ↗ |
| $1,000 to $9,999.99 | ... | 0x3EEE...D6C3 ↗ |
| $10,000 to $100,000 | ... | 0x7986...D7Cc ↗ |
The client pays no fee. The fee of each escrow is recorded on-chain when it is created and never changes afterwards.
Verified Public Contract
The source code of our escrow is public and verified on BscScan. All contracts are Verified on BscScan and securely managed by a Safe multisig (3 of 5 signatures required for any admin action).
Official Addresses & Anti-Scam Verification
Official Telegram admins (anyone else is an impostor)
Launch Liquidity Lock
The team has locked 1,006.41 USDT of its own funds on PinkLock for the PancakeSwap launch liquidity. The locks are owned by our 3-of-5 Safe, so no single person can unlock them, and they unlock on January 13, 2027, right after the presale closes. We add to it over time: every lock is public and verifiable.
Presale Smart Contract Permissions
Administrative privileges on the presale smart contract (VestingPresale.sol) are strictly governed by the 3-of-5 Safe multisig. Contract code is immutable and verified on BscScan:
- Sale Activation (
start()): Can only be triggered by the Safe strictly afterstartTime(15/10/2026 14:00 UTC). Any attempt prior to this exact timestamp is programmatically rejected by the contract. - Emergency Pause (
pause() / unpause()): The Safe can pause new token purchases during operational emergencies. Pausing cannot freeze existing allocations or prevent user claim withdrawals. - Fund Withdrawals (
withdrawFunds()): Raised USDT and USDC can only be withdrawn to the verified Safe multisig wallet (owner()). No arbitrary destination address is accepted. - Unsold Tokens (
withdrawUnsoldTokens()): Only callable once the sale has concluded (State.Ended). The contract subtracts the tokens still owed to buyers (allocated minus already claimed) from the deposited tokens and sends only the difference, plus any tokens sent to the contract by mistake, to the Safe, to be burned in a public transaction. - Rescue Guard (
rescueERC20()): The owner cannot withdraw deposited JOOB tokens, USDT, or USDC under the guise of stuck tokens. Those core assets are explicitly locked out of rescue functions. - Public Functions (
finalize() & claim()): Finalization is permissionless once the end date has passed. Every participant directly and independently claims their vested allocation.